MDS website authentication

  • I set up MDS on my laptop but I keep getting "402.1 Unauthorized" when I open the website on my browser.

    I went through all the steps in http://social.technet.microsoft.com/wiki/contents/articles/2390.troubleshoot-installation-and-configuration-issues-master-data-services-in-sql-server-2012.aspx but still no luck.

    I'm not an IIS expert and I don't know where to start investigating this. Where can I find logs and the like?

    -- Gianluca Sartori

  • So you did enable Windows Authentication?

    I assume you have full permissions on the underlying database?

    During the set-up of your database in the MDS configuration, you need to specify a user-account that will be the admin of the website. Did you specify your own user account? Does the website have access to the AD of your laptop to check the credentials?

    Need an answer? No, you need a question
    My blog at https://sqlkover.com.
    MCSE Business Intelligence - Microsoft Data Platform MVP

  • Hi Koen, thanks for responding!

    So you did enable Windows Authentication?

    Yes.

    I assume you have full permissions on the underlying database?

    Yes.

    During the set-up of your database in the MDS configuration, you need to specify a user-account that will be the admin of the website. Did you specify your own user account?

    No, I created a user account specifically for the MDS Application Pool. The configuration manager added a login to SQL Server and added the user to the MDS_exec database role.

    Does the website have access to the AD of your laptop to check the credentials?

    No AD here, it's a stand-alone laptop.

    I was under the impression that something was wrong from the start, because IE prompts for user credentials when accessing the page, and it shouldn't. :crazy:

    -- Gianluca Sartori

  • Also, I checked the IIS log files and this is what I found:

    #Software: Microsoft Internet Information Services 7.5

    #Version: 1.0

    #Date: 2012-04-30 10:23:19

    #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status time-taken

    2012-04-30 10:23:19 ::1 GET /MDS - 80 - ::1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+6.1;+WOW64;+Trident/4.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+OfficeLiveConnector.1.3;+OfficeLivePatch.0.0;+InfoPath.3;+.NET4.0C;+.NET4.0E) 301 0 0 9039

    2012-04-30 10:23:29 ::1 GET /MDS/ - 80 - ::1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+6.1;+WOW64;+Trident/4.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+OfficeLiveConnector.1.3;+OfficeLivePatch.0.0;+InfoPath.3;+.NET4.0C;+.NET4.0E) 302 0 0 9970

    2012-04-30 10:23:29 ::1 GET /MDS/Unauthorized.aspx - 80 - ::1 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+6.1;+WOW64;+Trident/4.0;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+OfficeLiveConnector.1.3;+OfficeLivePatch.0.0;+InfoPath.3;+.NET4.0C;+.NET4.0E) 200 0 0 103

    -- Gianluca Sartori

  • Did you run IE or whatever browser under the user account that you created?

    With AD I mean whatever type of Windows security that you have running 😀

    I have installed MDS on my laptop as well, but the user account belongs to my companies AD.

    So when I login at home, MDS can't connect to my companies AD of course, so I can't login. Very ... unconvenient 😀

    Need an answer? No, you need a question
    My blog at https://sqlkover.com.
    MCSE Business Intelligence - Microsoft Data Platform MVP

  • Koen Verbeeck (4/30/2012)


    Did you run IE or whatever browser under the user account that you created?

    It doesn't make any difference. I tried with that user and with Administrator, but it's always the same.

    With AD I mean whatever type of Windows security that you have running 😀

    Woops... sorry:blush:

    I have installed MDS on my laptop as well, but the user account belongs to my companies AD.

    So when I login at home, MDS can't connect to my companies AD of course, so I can't login. Very ... unconvenient 😀

    It's very strange. I set it up with no issues on a virtual machine. I don't know what's wrong with this setup.

    -- Gianluca Sartori

  • And if you really log into your computer using that newly created user account and you go to the website, do you still have the same issue?

    Need an answer? No, you need a question
    My blog at https://sqlkover.com.
    MCSE Business Intelligence - Microsoft Data Platform MVP

  • Koen Verbeeck (4/30/2012)


    And if you really log into your computer using that newly created user account and you go to the website, do you still have the same issue?

    Yes, unfortunately.

    -- Gianluca Sartori

  • Well, I'm out of options.

    Using the other account to run IE solved all the issues with me, so I have no further experience to share with you.

    Need an answer? No, you need a question
    My blog at https://sqlkover.com.
    MCSE Business Intelligence - Microsoft Data Platform MVP

  • OMG! Turns out I'm an idiot! :blush:

    The MDS database had been restored from another instance and the MDS Administrator was a Windows login from the source instance.

    Thanks for your help and sorry again...

    -- Gianluca Sartori

  • No need for apolagizing 😀

    I'm already glad I could try to help someone out with MDS. Never thought I would do that some day 😀

    Need an answer? No, you need a question
    My blog at https://sqlkover.com.
    MCSE Business Intelligence - Microsoft Data Platform MVP

Viewing 11 posts - 1 through 10 (of 10 total)

You must be logged in to reply to this topic. Login to reply