Access is denied when authentication is set to "enable anonymous access"

  • Hello,

    I kind of have a problem that I could not find an answer for on the net. 

    I have a windows server 2003 with sp1, 2000 sql reporting services installed on my app box.  The report db is on a db server which is a windows server 2003 with sp1 and sql server 2000.

    My problem is as follows.  I want to be able to view reports over the internet.  I have on my app server which has multiple internal IP's(that host different sites) a SSL site that is accessable from the internet.  eg..https://blah.abc.com that goes to that web site configured in my IIS 6.

    When i install Reporting  Services it by default installs itself to the default web site.  I then create a copy of the /ReportServer virtual directory to my SSL Site.  The way my web application works is very simple.  You login to the site which had forms authentication then click on a link which will pass you to the copied /ReportServer virtual directory to view the reports. 

    This works when you have the permission on the copied  /ReportServer virtual folder to "Integrated Windows Authentication", but you are prompted to enter a userID and Password that is valid on the app server.  If you enter the userid and password you will be able to view the reports, but I don't want to promt for a userid and password!  If i change the permission to "enable anonymous access " I get a

     

    Server Error in '/REPORTSERVER' Application.


    Access is denied.

    Description: An error occurred while accessing the resources required to serve this request. The server may not be configured for access to the requested URL.

    Error message 401.2.: You do not have permission to view this directory or page using the credentials you supplied. Contact the Web server's administrator for help.

     

    error.  I'm not sure what else to try.  I am not on a domain to add a user that is common to both app and db server if that is the problem... 

    Can someone please give me some ideas to try...  I am racking my brains with this permission stuff.

  • After changing the permission to anonymous access, try this click on the Edit button and change the user and password to your Administrator User Name and Password and uncheck the IIS Control check box below the User Name, Password text boxes. Try this and see if it helps.

     

    Prasad Bhogadi
    www.inforaise.com

  • FYI, Prasad,

    that does work...but, aren't you then exposing the possibility of malicious, anonymous users exploiting the privileged OS administrator account through its use on your reportserver website ?

  • If you can't add a non-admin user to the app server and the web server, you may be stuck.  That's the best solution I can think of, is using a plain vanilla domain user to access both machines with read permissions.

    Brandie Tarvin, MCITP Database AdministratorLiveJournal Blog: http://brandietarvin.livejournal.com/[/url]On LinkedIn!, Google+, and Twitter.Freelance Writer: ShadowrunLatchkeys: Nevermore, Latchkeys: The Bootleg War, and Latchkeys: Roscoes in the Night are now available on Nook and Kindle.

Viewing 4 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply