.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
Gaurav Pal
Post New Web Links

Windows authentication using SSRS 2008 R2 on separate machine from SQL db engine - Kerberos required

Posted By:      Posted Date: October 19, 2010    Points: 0   Category :Sql Server

Is this still an issue in SSRS 2008 R2:  Can't use Windows authentication (integrated security) when the SQL database server is on a different machine than Reporting Services -- unless you (1) use Kerberos security, or (2) store credentials, or (3) use credentials supplied by the user when running report AND use as Windows credentials to impersonate?

I have SSRS 2008 R2 set up on a different machine than MSSQLServer 2008 R2.  When I create a report on the SSRS server that uses a data source specifying Windows integrated security, my symptom is that I get the following  error:

Cannot create a connection to data source 'myDataSource'. ---> System.Data.SqlClient.SqlException: Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

Here is a blog describing the problem under SSRS 2005 (with IIS): http://blogs.msdn.com/b/jgalla/archive/2006/03/16/reporting-services-and-windows-authentication.aspx



Richard Thompson

View Complete Post

More Related Resource Links

Windows 2008 R2 kerberos authentication

Hi i have install windows 200R2 with blackpearl but i have this issue with Kerberos Authentication the same account when using ie8 on the local machine allows me to login while the same credientials using ie7 & ie8 on remote machine will keep prompting for credentials; any advise on this?

SQL Server 2008 Windows Authentication Mode fails for Database Engine, error 18456

I installed SQL Server 2008 Developer Edition (10.0.1600.22.080709-1414) on a Windows Vista 32-bit development machine with Windows Authentication Mode only (no SQL Server Authentication).   Since this is a development machine, I saw no need for Mixed Mode when I did the install.  The SQL Server Management Studio allows me to login to Analysis Services, Integration Services, Reporting Services, BUT NOT the Database Engine!Windows Authentication for the Database Engine gives the following error: EventID: 18456Login failed for user MYDOMAIN\MYLOGIN'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: <local machine>]The 'fix' I have found online is to login as SA in SQL Server Authentication mode & add MYDOMAIN\MYLOGIN as a administrator for the Database Engine.  Unfortunately, I can't since I didn't install SQL Server Authentication mode (only Windows Authentication Mode).  It appears my only recourse is to uninstall, then reinstall in Mixed mode, then to login as SA in SQL Server Authentication mode & add MYDOMAIN\MYLOGIN as a administrator for the Database Engine. Before I do so, does anyone know of a better approach?Scott D Duncan

installing SSRS 2008 R2 on a separate machine than the SS 2008 R2 database



I set up SQL Server 2008 R2 along with SSRS on a Windows 2008 server--let's call it "SQLDB"--and all's working fine.  I'm able to upload reports that are pulling data from the SQLDB databases.  There is no problem.

However, the operations dept. now tells me that a server with SQL Server installed absolutely will not be made available to the users and so I will need a separate SSRS 2008 R2 server (named "SQLRS") that pulls data from SQLDB databases.  Basically, I need to stop using SSRS on SQLDB and start using SSRS on SQLRS.  Makes sense to me, although I've never done this.

I'm confused about what services and components of SQL Server 2008 R2 need to be installed on which server(s).  Could somebody please point me to a page that explains it thoroughly or, if it's fairly simple, explain it for me here? 

For instance, "SQLDB" has SSAS, SSIS, database engine, SQL Browser, Management Tools, and SQL Agent installed. 

On "SQLRS", I installed SSRS, database engine, SQL Agent, SQL Browser, Management Tools, and SQL Agent.  Was it necessary to install the database engine, considering the data to be pulled is on "SQLDB"?  I read that the Agent is only required for subscriptions, but what about SQL Browser?  Is it only required on s

How can Install Office 2007 on Windows server 2008 R2 64 bit machine in WSS 3.0

I have  64 bit machine  and Windows server 2008 R2 has installed. i have successfully install WSS 3.0  , but  when i tried to install  office 2007 ,  one  error  has  come  "OS is not compatible "  i thought  it was asking  for 64 bit office  2007   and i go through the  google and R&d find no 64 bit office is available ,  i have used   excel .dll in my custom code  so my problem is that   how can  install office 2007  on 64 bot OS 2008 r2  machine .  if anyone can help   me  , please let me know . thanks in advance

Schedule reports with integrated authentication SSRS 2008

Hi All,  Having an issue with SSRS 2008 at the moment, trying to setup subscriptions. Our system is configured so that any one of 10 users can login to the SSRS website using their windows domain account, and then launch report builder to design and save reports.  This all works very well, however, they have a problem when trying to setup subscriptions - the famous "Subscriptions cannot be created because the credentials used to run the report are not stored....." What the message says is true - the credentials are not stored as they are supplied by the user when they login to report builder. Is the /any/ workaround at all that doesn't involve storing the credentials?  It seems totally crazy that they cannot be prompted for them when setting up the subscription.  For this application its 100% essential to make the user provide their credentials when running reports, because they each see a filtered subset of the data in the report model (this is controlled DB side depeding on the login account), so their domain account needs to be passed to SQL server to enable this filtering to work.  If we saved their credentials then they would see all the data..and thats nasty. The only workaround I can come up with would be to create  a separate datasource for each user and upload a separate model, but thats really nasty to be hones

SSRS 2008 Custom Authentication works when using ReportServer url but not when report manager url is

Hi, I am using SSRS 2008 with Custom security extension for authentication. The extension is developed in c#. I have placed the dll under report server bin and report manager bin directory and the logon,login pages under appropriate directory. My reports manager url is http://localhost:port/Reports and my reports server url is http://localhost:port/ReportServer. When I try to login through reports manager url, I am getting 'login failed' error message from the dll. But when I try to login using reports server url, it works. I have also set 'FullTrust' named permission set in RSMgrPolicy.config . <CodeGroup class="FirstMatchCodeGroup" version="1" PermissionSetName="FullTrust" Description="This code group grants MyComputer code Execution permission. "> < IMembershipCondition class = " ZoneMembershipCondition " version = " 1 " Zone = " MyComputer " /> Any suggestions please!   Thanks!

No Servers listed under Database Engine in SQL Server 2008 on Windows Server 2008 R2.

Where to begin. It's late so I hope I can be clear. I have installed SQL Server 2008. I am running Windows Server 2008 R2. I have installed SQL Server four times and I continue to have issues connecting to the Database Engine. Installation has gone without a problem at least to my knowledge I have not been presented with any errors. I have also created a local administrator account called "spadmin" to use to connect to the SQL Server database and to use with SharePoint 2010. Which brings me to the reason why I want to run SQL Server - I want to evaluate the latest SharePoint Server 2010 and WSS. Unfortunately, I have not been able to go beyond installing SQL Server and connecting to the database, because there is no database instance showing under the Database Engine, except under Integration Services. I have the following services installed: SQL Acitivey Directory Helper Service SQL Full-text-Filder Daemon Launcher SQL Server SQL Server Agent SQL Server Analysis Service SQL Server Browser SQL Server Integration Services 10.0 SQL Server Reporting Services SQL Server VSS Writer Am I missing something? I have been following several online instructions on how to install SQL Server 2008 and I can't seem to find where I may have gone wrong. After I install SQL Server 2008 am I supposed to see the default instance (MSSQLSERVER) listed under the Database Eng

Error installing SQL Server 2008 R2 on a Windows 7 Ultimate 32 machine

HI all, I'm installing the Developer edition of MS SQL Server 2008 R2 (downloaded today) on a Windows 7 Ultimate 32bit virtual machine (using VMWare Workstation 6.5).  Yesterday I had tried MS SQL Server 2008 R0 with the same results.  Both give an error about 30% into the installation process: "An error occurred during the installation of assembly 'VSLangProj80,Version="",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral",FileVersion="8.0.50727.1826"' When I click the OK button, the install rolls that last bit back and then continues.  Unfortunatly I didn't take a screenshot of the main install window, just the error window. Any ideas what this error means?  The install yesterday seemed to work, but I'm not through the R2 install yet.  The R0 install also failed to install the documentation for some reason (I left it running during the night) Note that I have VS2010 (original release plus downloaded updates) installed and then just some small stuff like Snagit and Skype on this VM.  I updated Windows 7 completely before I started installing R2 so it is completely up to date as of midnight! Best regards, Arnor BaldvinssonArnor Baldvinsson

Problem in setting up Windows Authentication in Windows 2008 RC2

Hi,We have a working version of application (Intranet) with uses Windows Authentication deployed in Windows 2003. The application uses HttpContext.Current.User.Identity.Name to get the logged-in user. Here impersonate is turned off.Right now, we are move to Windows 2008 RC2 where this Windows Authentication problem arised. I have Digest Authentication and Windows Authentication enabled. And also I have enabled Anonymous Authentication enabled to avoid the Login dialog of IIS in the end-user IE. Now I am getting HttpContext.Current.User.Identity.Name as Empty. When I impersonate using username and password, I am used to login using that user but all the users uses the same user to login.Does any has solution for this?Deployment Server - Windows 2008 RC2 (IIS 7.5)Development - Windows 7 (IIS 7.5)I am new to IIS 7.5. Please give me a solution

SQL Server SSRS 2008 R2 Authentication

We would like to expose SSRS 2008 R2 ReportServer to anonymous users and ReportManager to authenticated users via Forms Based Authentication. I tested a Security Extension in SSRS 2008 and it worked well. When I tried to deploy the same solution to SSRS 2008 R2, I am unable to browse to the reportserver and reportmanager screens. Is there a documented way to authenticate users in FBA when they want to access ReportManager and expose reports on the RepotsServer to anonymous users (or even authenticated users and pass a cookie to the reportserver). I do not want to use a windows user account if that is at all possible?   I followed the following to get it to work in SSRS 2008 : http://technet.microsoft.com/en-za/library/cc281383(en-us).aspx http://technet.microsoft.com/en-za/library/ms155029(en-us).aspx And I worked from the Microsoft Authentication Example project for SSRS. Regards, Pieter Theron    

Problem configuring SSRS 2008 with sharepoint 2007 on Windows server 2008

Hi All - I am unable to integrate SSRS 2008 with sharepoint 2007. I am new to this part please correct em if am wrong. I have 2 servers one for SQL and one for MOSS MOSS server. Windows server 2008 MOSS 2007 .Net 2008 with basic sql 2005 which comes default WSP builder Everything is working fine SQL server: Windows Server 2008 SQl server 2008 and configured SSRS BIDS. When I am trying to install SSRS plugin for MOSS it is not accepting on both the machines. Please help me if am missing something here. I configured sucessfully on one server but havent done on multi server environment. please help me.   Thanks Saritha    saritha k

SQL Server 2008 r2 developer RTM edition not installing on windows 7 64 bit machine with latest serv


This machine had sql server 2008 installed.  I removed it since the upgrade would not work.   The machine currently doesn't have any sql installs.    The error fails during the Setup Support Files step.    Any help on this would be greatly appreciated.  I've included last part of file since you can only include 60k chars here.

2010-09-24 10:14:14 Slp: C:\sql2008r2\x64\FixSqlRegistryKey_x64.exe exit code: 0
2010-09-24 10:14:14 Slp: Launching external tool: C:\sql2008r2\x64\FixSqlRegistryKey_x86.exe
2010-09-24 10:14:14 Slp: ------------------------------------------------------------
2010-09-24 10:14:14 Slp: HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer - OK.
2010-09-24 10:14:14 Slp: HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\Client - OK.
2010-09-24 10:14:14 Slp: HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\Client\SNI9.0 - OK.
2010-09-24 10:14:14 Slp: HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\Client\SNI9.0\GeneralFlags - OK.
2010-09-24 10:14:14 Slp: HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\Client\SNI9.0\GeneralFlags\Flag1 - OK.
2010-09-24 10:14:14 Slp: HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\Client\SNI9.0\GeneralFlags\Flag2 - OK.
2010-09-24 10:14:14 Slp: HKEY_LOCAL_MACHINE\Software\Microsoft\MSSQLServer\Client\SNI9.0\LastConnect -

How to read Metadata of Files In Windows Server 2008 Machine x64?



I want to read metadata like (Author,Modified By, comments..etc) on OLE Files. Please tell me any reliable approach using C# on how to read metadata from File System which is running Windows Server 2008 machine x64 Environment .

Thanks in advance.

Devi Prasad M

problem with connecting to local SQL Server 2008 default instance using windows authentication




I have a user getting some problem with connecting to local SQL Server 2008 default instance using windows authentication with a user which has sysadmin role and is owner of each existing database:

2010-09-28 15:40:35.04 Logon       Error: 18456, Severity: 14, State: 11.


2010-09-28 15:40:35.04 Logon       Login failed for user 'IIS APPPOOL\RoomViewSEWebClient'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT:]



This us

Reporting Services 2008 and Windows Authentication


I have been searching through numerous blogs and MSDN/Technet posts for the answer to this but I can't seem to find anything concrete other than 'do something different.'


What I am attempting to do is setup reporting services to do a double hop when using Windows Authentication back to remote datasources.  Here are the scenarios I am faced with so far;  To the best of my knowledge I have setup the appropriate SPN's for kerberos, the server hosting the application is setup for Delegation, as is the Domain Service Account that RS is running under.  RS is running in native mode, not sharepoint integrated.


1) When the rsreportserver.config file is set to use NTLM a user can authenticate back to the report server and a report will return the USERID for as appropriate user.  When making a connection to a remote datasource it tries to authenticate as NT Authority\Anonymous logon.  obviously I am not going to setup the anon logon as a read only account on the server for security purposes.

The Web.config file for the report server is set to impersonate 'TRUE', when setting to false the reports returns a userid of the service account RS is using, and attempts to connect to the remote datasource as the service account.  There would be no way to filter roles for who is able to

Java Application with SSRS 2008 (Kerberos Enabled)



On one of our Dev Instances we have enabled kerberos by setting up SPN's,changing the authentication type,delegation etc. We have on java app which simple calls the reporting services by url of the report and uses a domain account to connect to reporting services. Some how after the kerberos change the java app is not able to connect and we get a 401 error.

I checked the logs and it seems that the java app is not even able to make a request to the report server computer as I cant see any log of access denied. Below is the authentication tag of report server config file :


and web.config :

    <authentication mode="Windows" />
    <identity impersonate="true" />

Can someone suggest how to proceed?


SQL 2008 - Switching to Windows Authentication Mode


I'm thinking of switching to Windows Authentication on my SQL 2008 server.  Here's my first draft at a plan:

1.  Create Windows accounts matching the exiting SQL accounts.
2.  Grant the new Windows accounts the appropriate database permissions.
3.  Change applications to use the new account information.
4.  Remove the SQL accounts
5.  Switch SQL to Windows Authentication

Is is that simple?  Or am I missing something?

ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend