SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Cannot remote connect report server outside virtual Machine using ssms 2016


Cannot remote connect report server outside virtual Machine using ssms 2016

Author
Message
gissah
gissah
Ten Centuries
Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)

Group: General Forum Members
Points: 1383 Visits: 346

I just installed a new SSRS 2016 on a windows server 2012 r2 vm. I can connect to both the engine and report server on the vm using ssms 2016. but I cannot connect to the report server outside the vm using ssms 2016. I had similar issue with the engine but was able to resolve it through the firewall. I have read and try a lot from here and on the web with no help.

what am i doing wrong here.


Jo Pattyn
Jo Pattyn
One Orange Chip
One Orange Chip (26K reputation)One Orange Chip (26K reputation)One Orange Chip (26K reputation)One Orange Chip (26K reputation)One Orange Chip (26K reputation)One Orange Chip (26K reputation)One Orange Chip (26K reputation)One Orange Chip (26K reputation)

Group: General Forum Members
Points: 26458 Visits: 10700
From memory
1. Can you connect to the windows 2012 vm remotely? The vm might use an internal network.
2. SQL Configuration Manager: is TCP protocol enabled?
3. The SQL Server instance is set for fixed network ports (dynamic ports may mess up the firewall)
4. SPN's are set ? (especially when authenticating with windows/Kerberos).
5. Double check firewalls at both sides (client & server)
6. SSRS has its own access-configuration (at start it is restricted to buildin administrators)
There must be a connectivity guide for SSRS on the web somewhere
Sue_H
Sue_H
SSC Guru
SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)

Group: General Forum Members
Points: 62739 Visits: 13325
gissah - Thursday, September 14, 2017 7:24 AM

I just installed a new SSRS 2016 on a windows server 2012 r2 vm. I can connect to both the engine and report server on the vm using ssms 2016. but I cannot connect to the report server outside the vm using ssms 2016. I had similar issue with the engine but was able to resolve it through the firewall. I have read and try a lot from here and on the web with no help.

what am i doing wrong here.



Did you go through this article?
Configure a Firewall for Report Server Access

If you have all of those open, what else did you try and what errors do you get trying to connect?

Sue



gissah
gissah
Ten Centuries
Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)

Group: General Forum Members
Points: 1383 Visits: 346
Hi SSC-Insane Yes that is the guide I used to set up my port I only limit it to Domain/Private is that why for safety?

Hi SCCChampion, Thanks for your response please
Can you connect to the windows 2012 vm remotely? The vm might use an internal network. Yes I can connect to the vm
2. SQL Configuration Manager: is TCP protocol enabled? Yes TCP is enabled
3. The SQL Server instance is set for fixed network ports (dynamic ports may mess up the firewall) My Dynamic port is empty, cause I am using TCP Port 1433
4. SPN's are set ? (especially when authenticating with windows/Kerberos). looking into it. I run a couple of script to set the spn
5. Double check firewalls at both sides (client & server) the report is working across the network
6. SSRS has its own access-configuration (at start it is restricted to buildin administrators) I think this is where my issue is even please advice

Thanks
anthony.green
anthony.green
SSC Guru
SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)

Group: General Forum Members
Points: 96816 Visits: 8690

Take it your trying to get to SSMS to connect to the SSRS instance. IIFC that uses RPC so you need to allow the full RPC port numbers which is pretty much every port which is a security risk as you expose a lot about the server in doing so. I've not found a way to limit the RPC port for SSRS yet. So if your security/network teams say OK you can do it otherwise, the solution is to remote into the machine and run SSMS from there.





How to post data/code for the best help - Jeff Moden
Need a string splitter, try this - Jeff Moden
How to post performance problems - Gail Shaw
Managing Transaction Logs - Gail Shaw
Troubleshooting SQL Server: A Guide for the Accidental DBA - Jonathan Kehayias and Ted Krueger


gissah
gissah
Ten Centuries
Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)

Group: General Forum Members
Points: 1383 Visits: 346
@SSC-dedicated Oh ok thanks, tried that and it didn't work as well. system adm has taken over. Thanks all
anthony.green
anthony.green
SSC Guru
SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)SSC Guru (96K reputation)

Group: General Forum Members
Points: 96816 Visits: 8690
gissah - Thursday, September 14, 2017 2:22 PM
@SSC-dedicated Oh ok thanks, tried that and it didn't work as well. system adm has taken over. Thanks all


Try going to the URL instead of the machine, eg http://reports.mydomain.com/reportserver or http://servername/reportserver does that work for you?

Ant



How to post data/code for the best help - Jeff Moden
Need a string splitter, try this - Jeff Moden
How to post performance problems - Gail Shaw
Managing Transaction Logs - Gail Shaw
Troubleshooting SQL Server: A Guide for the Accidental DBA - Jonathan Kehayias and Ted Krueger


gissah
gissah
Ten Centuries
Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)

Group: General Forum Members
Points: 1383 Visits: 346
My issue was on this line <RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel> . I changed it to Allow. when I revised it to OFF is started working. I don't know why
Sue_H
Sue_H
SSC Guru
SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)SSC Guru (62K reputation)

Group: General Forum Members
Points: 62739 Visits: 13325
gissah - Friday, September 15, 2017 11:47 AM
My issue was on this line <RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel> . I changed it to Allow. when I revised it to OFF is started working. I don't know why


Thanks for posting back. The convoluted mess of combinations of what is and isn't supported with the extended protection levels is in this document - you could try to figure out which pieces come into play in your environment. Seems that your connection needed to support extended protection levels and using the allow setting supports it but doesn't require it :
Extended Protection for Authentication with Reporting Services

Sue



Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum








































































































































































SQLServerCentral


Search