SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Can't execute report in Report Manager due to confusing permission errors; please help


Can't execute report in Report Manager due to confusing permission errors; please help

Author
Message
cgwaters
cgwaters
Forum Newbie
Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)

Group: General Forum Members
Points: 3 Visits: 11
I'm struggling with SSRS security. Appreciate any comments/answers to the following.

I have a Windows Server 2008 R2 SP1 server that is a member of an Active Directory domain. I was given a domain account that is a member of the server's Administrators group. I installed SQL Server 2008 R2 on this server, specifying my account for the Log On As values.

On this server, I used BIDS to create a shared datasource, a shared dataset ("Salespersons"), and a fairly complex report that utilizes these objects and a few non-shared datasets. (All of the data for this report is stored on another SQL Server 2008 R2 server that is also a member of the domain.) The reports execute fine from within BIDS. I can deploy the reports without difficulty. I can also use IE9 to log on to Report Manager, using my domain account, on the report server and on a Windows 7 workstation (that is also a member of the domain). When I attempt to execute the reports from within Report Manager, however, I get the following error:

An error has occurred during report processing (rsProcessingAborted)
The execution failed for the shared data set 'Salespersons'. (rsDataSetExecutionError)
Cannot create a connection to data source ' Data source for shared dataset'. (rsErrorOpeningConnection)
Logon failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

Why is NT AUTHORITY\ANONYMOUS LOGON attempting to log on to the data source? Since the report executes OK in BIDS, what account is *BIDS* using to successfully log on?

I examined the properties of my data source in Report Manager. It's configured to connect using Windows Integrated Security; yet when I press the Test Connection button, it returns another 'Logon failed for user 'NT AUTHORITY\ANONYMOUS LOGON' error. Why is that? Why wouldn't it using Windows Integrated Security; i.e., my domain account? I tried various other Connect Using options, with no success.

I'm stumped. Any ideas?
Gazareth
Gazareth
SSCarpal Tunnel
SSCarpal Tunnel (4K reputation)SSCarpal Tunnel (4K reputation)SSCarpal Tunnel (4K reputation)SSCarpal Tunnel (4K reputation)SSCarpal Tunnel (4K reputation)SSCarpal Tunnel (4K reputation)SSCarpal Tunnel (4K reputation)SSCarpal Tunnel (4K reputation)

Group: General Forum Members
Points: 4030 Visits: 5843
It sounds like you're hitting the double-hop problem, see if this link is any good to you:

http://blogs.technet.com/b/rob/archive/2011/11/23/enabling-kerberos-authentication-for-reporting-services.aspx

Cheers
Gaz
avinash jobanputra
avinash jobanputra
Valued Member
Valued Member (55 reputation)Valued Member (55 reputation)Valued Member (55 reputation)Valued Member (55 reputation)Valued Member (55 reputation)Valued Member (55 reputation)Valued Member (55 reputation)Valued Member (55 reputation)

Group: General Forum Members
Points: 55 Visits: 395
S
cgwaters
cgwaters
Forum Newbie
Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)Forum Newbie (3 reputation)

Group: General Forum Members
Points: 3 Visits: 11
Gazareth (1/3/2013)
It sounds like you're hitting the double-hop problem, see if this link is any good to you:

http://blogs.technet.com/b/rob/archive/2011/11/23/enabling-kerberos-authentication-for-reporting-services.aspx

Cheers
Gaz

Thanks! I will check that and then post my results.
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum

































































































































































SQLServerCentral


Search