Use of Impersonation in SSAS?

I run a simple .aspx website on a Windows Server 2008 machine.

There is NO impersonation, and System.Security.Principal.WindowsIdentity.GetCurrent().Name returns NT AUTHORITY\NETWORK SERVICE, which it the account which the application pool runs. In my web.config, I have <authentication mode="Forms">.

 

I tried to test the security of the application and server by removing file permissions to the .aspx files. I was greatly worried when the website continued to run without problem (it should not have been able to read the .aspx files).

By turning on file level auditing, I discovered that the .aspx files were being read by the machine$ account (if the machine is called Serv1, then the files would be read by the Serv1$ account, which seems to have access to all files on the local machine).

 

Is this a security breach or is this behaviour by design ?

Please can somebody assist, as I am worried.

 

 

 

 

 

Hi,

 

We are looking for some help with Impersonated SharePoint Search.

We are trying to execute a search with a given user and having no luck.

 

We have tried the methods in this article and it’s not hiding results that the user does not have access to.

I realize this is probably going to be one of those vague questions that I am not going to get much help on here, but I thought I'd give this a shot before we go the MS Incident route on monday.

We have tried to setup Kerberos between MOSS 2007 AND SSAS 2005 to no avail.  We have been through the knowledge base articles outlining the setup multiple times with all the experts on MOSS and Security here where I work.  We've used other materials we have on kerberos here.  But the end result is that the double hop is not happening.  We are trying to connect three ways: excel services, ssrs 2005 in integrated mode, and Sharepoint KPI's (using analysis services).  In every case the connection is not happening.

Other details are that the ssrs integrated mode seems to be setup right because I do get a report (albiet all it has is a connection error message).  Excel services works fine if I use the unattended service account, but when I switch the odc file to windows (should cause kerberos to kick in) it fails.  When I try to add a kpi to the kpi list it can't retrieve a list of kpi's from ssas.

In all cases I am the user trying to perform these operations, and I have total access to the cube -- I'm the developer.  I have no problems connecting to the cube directly through excel, so the security at that end passes t

Hi I am trying to stop a windows service in a server(on different domain) from my C#.NET windows application using ServiceController I am getting following error Inner Exception: {"Access is denied"} Exception Message: "Cannot open Service Control Manager on computer 'x.y.z.a'. This operation might require other privileges." Enviroment:       Windows application running on Windows 7, C#.NET, 3.5 on “ABC” DOMAIN       Target service running on Windows 2003 server. on “XYZ” DOMAIN       Port 445,135 opened between two systems Code:       ServiceController lo_WinSC = new ServiceController();       lo_WinSC.MachineName = "SYSTEMIPAddress";       lo_WinSC.ServiceName = "ServiceToBeStopped"; Some forum suggesting to impersonate account of target domain but failed to Impersonate. Error: “The security database on the server does not have a computer account for this workstation trust relationship”   Question 1: Is it possibile to impersonate account of different domain. i.e My application running on “XYZ” domain, I would like to impersonate an account “ABC” domain. Note: Port LDAP port 389 is opened between two systems. Is possb

I recently ran the same data set through the SSAS logistic regression (Neural network - Hidden layer disabled) as well as a vanilla logistic regression procedure. I am aware that different processes are followed in order to obtain the resulting co-efficients, however, has anyone got further information as to how close the results of the SSAS logistic regression equation are in comparison to logistic regression equations contained in other statistical packages such as SAS or SPSS? I do understand that the respective procedures are dependant on the quality of the data that they are applied to. I assume that the SSAS logistic regression may perform more favourably on one dataset in comparison to a vanilla logistic regression and vice versa. I am aware of the following post however it does not go into much detail concerning the results of the comparison. http://social.msdn.microsoft.com/Forums/en/sqldatamining/thread/4f381c6b-2471-4d4c-a022-316a1073184d Further info would certainly be appreciated.

hi all, how does ssas2008 generate sql queries to read data from the source, where processing dimensions and partitions? is there any reading meterial that clearly explains how the sql queries are constructed according to properties of dsv, dimensions and measures and partitions.   thanks in advance.Andrew Chen Interested in BI related technologies

Hi All, We have separate windows servers hosting production and development environments.  Each environment consists of MS SQL Server and SSAS, studios, etc.  What would be the best way to move MS SQL Server databases and SSAS objects from one server to another?  I have been looking for some import/export applications but have not been able to find anything. Thanks for any help, Thanks, Roscoe

I am trying to create hibernate connection using olap4j driver I am getting this error- java.lang.IllegalAccessException: Class org.eclipse.datatools.connectivity.drivers.jdbc.JDBCConnection can not access a member of class org.olap4j.driver.xmla.XmlaOlap4jDriver with modifiers "protected"     at sun.reflect.Reflection.ensureMemberAccess(Reflection.java:65)     at java.lang.Class.newInstance0(Class.java:349)     at java.lang.Class.newInstance(Class.java:308)     at org.eclipse.datatools.connectivity.drivers.jdbc.JDBCConnection.createConnection(JDBCConnection.java:205)     at org.eclipse.datatools.connectivity.DriverConnectionBase.internalCreateConnection(DriverConnectionBase.java:104)     at org.eclipse.datatools.connectivity.DriverConnectionBase.open(DriverConnectionBase.java:53)     at org.eclipse.datatools.connectivity.drivers.jdbc.JDBCConnection.open(JDBCConnection.java:72)     at org.eclipse.datatools.connectivity.drivers.jdbc.JDBCConnectionFactory.createConnection(JDBCConnectionFactory.java:53)     at org.eclipse.datatools.connectivity.internal.ConnectionFactoryProvider.createConnection(ConnectionFactoryProvider.java:83)     at org.eclipse.datatools.connectivity.internal.ConnectionProfile.createConnection(Connectio

I want to develop one report for that I connected cube from the Excel, my requirement is I want to show data BSM wise, ASM wise, FO wise, Distributor wise, Sales man wise nothing but it is salesman hierarchy. monthly retailing Quantity and retailing value. April 10, may10,june 10 and July10 for the following products No1 90 g all variants,Nupur,Expert,Haircolour,Cinthol How to achieve this plz give suggestion it is an urgent requirement    

Hello Guru's, I'm new to SSAS env. and want to set up its DR env. Can anybody guide me with any good strategis and implementation practices. We are using SSAS 2008 on 2 node Cluster Server. Thank you in Advance.- Nilesh

Hi All, We have a Cube which is to be queried by the Online system , using WCF service. Peroformance of the queries running on the Cube is not really very good , as we have to calculate various percentile (which are all calculated members) on the cube, this howver works well within limits of 5-6 secs for small sample size. But this goes beyond the threshold of 30 secs when the record counts increases. What we have is our SSAS Cubes , and we have WCF Service querying the Cube using ADOMD.NET. This may not be one of the best way to achieve this requirement , but we are kind of completed with development and it may not be feasible to work on another approach, what we are looking for is optimize this design and make it work with in expected time limits of 5-8 secs. Kindly let me know, if i am not clear or if you need any more info to suggest something ! Thanks a lot for your help !   Kindly

Hi All, I have a cube and that is processed through a batch job. The problem I am facing is there are many packages which are calling this Batch job to process the cube. Is there a way to determine the state of the job before the packages call this batch job to process the cube. And in which database can I find all the information about the jobs on the server. Thanks for your help. Vineeshvineesh1701

Hi, I encountered the below listed error while attempting to deploy SSAS 2008 DB: Error 1 OLE DB error: OLE DB or ODBC error: Login timeout expired; HYT00; A network-related or instance-specific error has occurred while establishing a connection to SQL Server. Server is not found or not accessible. Check if instance name is correct and if SQL Server is configured to allow remote connections. For more information see SQL Server Books Online.; 08001; Named Pipes Provider: Could not open a connection to SQL Server [5]. ; 08001.  0 0  I am running a standalone MSSQL 2008 named instance on Windows Server 2008 R2. Here are the steps I have taken but yet the issue is not resolve: 1) Enable Remote connections on the server 2) Enable TCP\IP 3) SQL Browser is Running 4) Set Firewall Inbound Exceptions for SQL Browser, Default Port 1433, UDP Port 1434 5) Using Management Studio I can successfully connect to the MSSQL named instance from the app server 6) I can ping I MSSQL box from the app server 7) Read and implemented all steps in the MSDN post below: http://blogs.msdn.com/b/sql_protocols/archive/2007/05/13/sql-network-interfaces-error-26-error-locating-server-instance-specified.aspx Thanks for your help.

Hi everyone,I've got a heap of reports that are based on various SSAS cubes. I have roles defined on these cubes that restrict data via certain dimensions. Question is, will these restrictions filter through to the report...ie, if I have a sales person restricted in the SSAS cube to only see sales against their territory (restricted in the Territory dimension), when they run the report will it filter the result based on their SSAS credentials and only show the data they have access to (even though the SSRS report has no direct filters or parameters applied)?Cheers for any help!!

Hi Guys, I come from a SAP BW background, and i was wondering if i need to learn SSIS and SSRS together with SSAS in order to get a job? A insight into the current job market would also be helpfful. Thanks!

I am trying to create a report in SSRS 2008 R2 using SSAS 2005 as a datasource. My dataset has a date parameter. When I create an embedded dataset in my report everything works fine, but when I create a shared dataset with the exact same mdx query, I get the following error: An error occurred during local report processing. The definition of the report 'xxxx' is invalid. The Value expression for the report parameter 'DateCalendarHierarchy' contains an error: [BC30034] Bracketed identifier is missing closing ']'. Does anybody have any ideas? Is this a bug? Thanks, Louis

For certain SQL's I will get the following error when calling the Fill method on an AdomdDataAdapter object. "Memory error: While attempting to store a string, a string was found that was larger than the page size selected. The operation cannot be completed."   Snippet of Code: DataSet ds1 = new DataSet(); AdomdCommand acmd1 = cn1.CreateCommand(); acmd1.CommandText = "SELECT ..."; AdomdDataAdapter ad1 = new AdomdDataAdapter(acmd1); ad1.Fill(ds1);   Now when we run this query in Ms Sql Studio we don't get any errors but the query returns 1 row with over 40,000 columns. I'm guessing the # of columns might be an issue but not sure.   When doing a Google search it appears that this problem was found in the 2005 and fixed in that version. Have any of you come across this problem?