Secure Report Server Not Authenticating At Deployment
Aug 14, 2007
Hi,
I am trying to deploy reports to my secure report server. When I attempt to deploy it's not authenticating me and I get an error:
TITLE: Microsoft Report Designer
------------------------------
A connection could not be made to the report server https://reports.******.com/ReportServer.
------------------------------
ADDITIONAL INFORMATION:
The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. (System.Web.Services)
------------------------------
The remote certificate is invalid according to the validation procedure. (System)
------------------------------
BUTTONS:
OK
------------------------------
I have tried to search on the topic, but there's a variety of answers that has left me a bit confused, so let me try asking a-new...
I have RS 2005 installed (Report Server on one server with IIS and everything else, Integrated Security set; the Report Catalog on a separate server with SQL Server 2005, etc.). So far so good.
I can easily access a few of my test reports using URL Access, and I can also access Report Mgr just fine; all that to indicate I'm pretty sure I have RS installed and setup and working correctly.
Now I have a custom ASP.NET 2.0 based web app that, of course, uses Forms based authentication, not Windows. I can create a hyperlink on one my web pages that uses URL Access to get to some of my test reports. But, of course, it's prompts me for (and seems to remember) domain credentials.
That's the piece I want to avoid. I have created a specific Windows domain account that would be used for this purpose. Now, I just need to figure out code to put in my ASP.NET page to pass that along. I am not using the ReportViewer control.
So, I am trying to find a decent reference/example code on how to set the credentials. I have seen much example code that is like:
//assumes a web reference has been setup... ReportingService rs = new ReportingService();
But I don't think I want "DefaultCredentials"... I want to use my custom domain account. Any help?
My other wild idea was creating this custom page in a directory where I could drop in a custom web.config that set the <authentication> element to "Windows" then set the <identity> element to my custom account... any thoughts on that would be appreciated.
I want to make the ReportServer and Reports pages secured i.e not allow anyone to access these pages via browser.
I login to a machine as user ABC. This user does not have permission on reports. if this user accesses ReportServer or Reports, expected is that access should be denied unless I enter an account that has been given permissions. for e.x. following pages should be secured. http://<reportserver>/Reports http://<reportserver>/Reports/Pages/Report.aspx?ItemPath=%2f<Report_Project>%2f<Report_Name> http://<reportserver>/ReportServer http://<reportserver>/ReportServer?%2f<Report_Project>&rs:Command=ListChildren
Actual result is that I am able to access these pages. When I click on the report I get the error (this is expected) but then user ABC should be shown error on first page itself.
In short, for all the accounts that do not already have permissions on reports, the server should challenge me to enter an account and password. Is there some setting in the configuration file? Any help would be appreciated Thanks in advance!
we have SSRS and I've worked on my local PC and developed a report which connects to a database e.g. on server 3 with the credentials set as a particular SQL user. All works fine locally but as soon as I deploy the report to the report server (server 2), I receive the following error: Cannot create a connection to data source"
The database server records the following SQL error:"Login failed for user 'NT AUTHORITYANONYMOUS LOGON'. Reason: Could not find a login matching the name provided."what I need to do to successfully run this from server 2? The fact it works locally fine means that the login is working ok I guess so I'm not sure what happens when it is transferred to the database server.The user is a SQL user rather than domain one and the user exists on SQL databases on both servers.
When i deploying a report model by visual studio, a login window popped , a '' char in the user name textbox. I input my username and password ,then click "OK",but nothing happened.the window showing yet.I view the RS log, there is a message: "login failed". But, deploy report project is very well. Has any idea with this problem?
There are my RS configurations: Sql Server 2005 sp2. Visual studio 2005 sp1. Reporting Services with Form Authentication.
I have created reports using RS.The reports that are generated are build and deployed sucessfully.But when i run the reports through http://localhost/ReportServer I am not able to see the Report. A blank page is displayed with no error message.Whenever i change the Url to http://computername/ReportServer then also the same problem arises. I have already checked the ReportServer Instance and the Folder on which Reports are Deployed.I mean I am able to access the ReportFolder, the Report also, but the Report is not shown.
I'm working through the SQL2005 Reporting Services Tutorial. When I try to deploy, I get the error "Connection could not be made to the report server." It appears that I do not have permissions to get to localhost/reportserver (I get a permissions error when just trying to get there directly from "run"). In another forum I saw several people having the same issue. One contributor said that the problem was solved for him by uninstalling SQL2005 and reinstalling using the local system account rather than a windows domain account. I tried that, but am getting the same error. Anyone know how to fix this?
We have a custom application that connects remotely to a SQL Server 2000 (SP2) database. We would like our application to validate a user's login against Active Directory.
So far I have been able to get a lookup working, but I can not find documentation on how to validate the password from within SQL Server. I found a lot of notes on using ASP.NET objects, or VB, C#, etc, but for this solution it must be done entirely in SQL. It would also be nice if this were SQL Server 2005; we could just embed the C# code and call it as a SQL stored proc, but unfortunately we are left with the constraint that we cannot upgrade this DB at this time.
Linked server 'ADSI' is set up with the sp_addlinkedserver command:
Two table functions in our test DB (trying to test both ways I've found in docs):
ALTER FUNCTION [dbo].[GetAuthenticatedUserViaLDAP] ( -- Add the parameters for the function here @userId nvarchar(50), @password nvarchar(50) ) RETURNS TABLE AS RETURN ( -- Add the SELECT statement with parameter references here SELECT [SAMAccountName], CN [Name], SN [Last Name], ST State FROM OPENQUERY( ADSI, '<LDAP://DC=company,DC=com>;((objectClass=user));SAMAccountName,cn,sn,st') WHERE [SAMAccountName] = @userId )
ALTER FUNCTION [dbo].[GetAuthenticatedUser] ( -- Add the parameters for the function here @userId nvarchar(50), @password nvarchar(50) ) RETURNS TABLE AS RETURN ( -- Add the SELECT statement with parameter references here SELECT [SAMAccountName], [Name], SN [Last Name], ST State FROM OPENQUERY( ADSI, 'SELECT SAMAccountName, Name, SN, ST FROM ''LDAP://bdsserver1/ CN=users,DC=company,DC=com'' WHERE objectCategory = ''Person'' AND objectClass = ''user'' ') WHERE [SAMAccountName] = @userId )
So calling either of these table functions from our custom application gives the same result:
select * from dbo.GetAuthenticatedUser('astonaker','abc') OR select * from dbo.GetAuthenticatedUserViaLDAP('astonaker','abc')
ResultSet:
'astonaker', 'Anthony', 'Stonaker' 'NULL'
So I can at least tell if a given user exists or not, but I have no visibility into whether the password they entered into our application is valid in LDAP.
I don't want to pass unencrypted passwords through the network, but then I don't know how to encrypt/compare these passwords without using the .NET Connection or DirectoryEntry, etc objects.
Not sure if I really have the correct forum for this posting so appologies if it is not. My question refers to the basic functionality of the new Sharepoint 3.0 both WSS and MOSS.
In version 2.0 of Sharepoint Services reports were displayed in Sharepoint using Report Explored to navigate and Report Viewer to display the report. Also KPI's were displayed in a web part which came from Business Scorecard Manager 2005.
I have been investingation both WSS3.0 and MOSS and have installed WSS3.0 to test. I notice that I can connect to reporting services with CTP2.0 for sql server. I can upload reports into document lists and run them from there. My question is has the old idea of using the report explorer gone as when you have report manager running in sharepoint integration it has no website to upload files or manage permissions. Is the document upload method the new way or am I missing something.
More importantly though is the display of KPI's is this now only available in MOSS 2007 and no longer a function of WSS3.0 as you cannot install Business Scorecard manager on WSS3.0 but it appears this is built in to MOSS.
Any guidelines to this new functionality would be greatly appreciated
I have created a report which contains a sub report.But the problem is when i deployed my rdl in my report server,my sub report wont show : "Error SubReport could not be shown".
But still,when i also deployed my sub report for that main report,still, it wont show.. what could be the reason for this?? Thanks...
I have a user who cannot login to a .mdb when he is logged in to Windows, on his workstation or any other. No one can login to the .mdb when he is logged in to Windows.
He CAN login to the same .mdb if someone else is logged in to Windows, either on his workstation or any other.
When the user logs in he gets the following error:
MS SQL Server Login
Connection Failed:
SQL State: €˜28000€™
SQL Server Error 18456
[Microsoft][ODBC SQL Server Driver][SQL Server] Login failed for user €˜domainusername€™
I have removed and recreated the ODBC Connection while he is logged in. I have tried changing the trusted login to administrator (in the window that pops up when he fails to connect).
He has the permissions he needs to the .mdb because he can login under anyone else€™s profile.
I tried copying his profile to a brand new user and ended up with the same result.
This leads me to wonder if there is some corruption in one of his profile€™s .dat files or ???
This is the boss€™ account and he does not want to be given a new username and profile€¦
Microsoft SQL Server 2000 - 8.00.760 (Intel X86)
Running on MS Windows 2003 Server Standard SP1
All workstations are XP SP2 with MS Access 2003 SP2 (from Office Pro distro)
We use roaming profiles. All systems within the same physical and logical network and domain.
Any help you can provide will be greatly appreciated.
Please let me know if there is any additional information you need.
I would like to be able to deploy a report to a particular folder in the report server. It seems when I deploy a report it always shows up in the root even after I have moved it into another folder where I wish it to reside.
I have a question about Report services scale out deployment.
In the technet document it states that reporting services must be Enterprise edition for scale out deployment functionality, does anyone know if the database engine has to be Enterprise also, or can it be standard edition?
Here is the article excerpt from technet:
The Reporting Services edition must be Enterprise, Developer, or Evaluation. Standard edition does not support a scale-out deployment. You can create a scale-out deployment using a combination of editions as long as the edition supports the scale-out feature.
I'm using the reports designer in Visual Studio 2005 Professional and have successfully been deploying reports to my client's server for several months. Now I can't deploy any reports, when I try Visual Studio almost hangs, tries for about 5 minutes to deploy a single report and then fails with an error message:
TITLE: Microsoft Report Designer ------------------------------ A connection could not be made to the report server http://winserver/ReportServer. ------------------------------ ADDITIONAL INFORMATION: The operation has timed out (System.Web.Services) ------------------------------ BUTTONS: OK ------------------------------
It used to ask me for username/password for the server (credentials), now it doesn't do that. I can go to the reports server and reports interface pages in my browser OK. The reports build without any errors.
Has anyone experienced this? Any ideas on how to get it working again?
I just asked you about how to hide the sub report from showing it in the drop down list. I have done it with the report manager [Report properties--> general --> Hide in Listview]. I am using RSBuild tool to automatically deploy the reports.I don't know what modification I have to make in the RSBuild code to incorporate this new functionality[Hiding sub report]. Can you please let me know how to do it?
I am using the following code, The description property is working correctly. But the Hide in List view property is not working. Property[] properties = new Property[2];
Property Prop1 = new Property(); Property Prop2 = new Property();
Currently within the Configuration manager you are able to set the Target Deployment parameters such as serverurl , folder etc.. However is there a way to set the Datasource within these configuration settings. For example we have Dev,Demo, and Production sql servers that ideally would be set to to switch with their corresponding deployment target areas DEV,Prod,Demo Reporting service servers. However as it stands I find myself having to manually change the datasets to point to different Servers for testing and then back to the production when its ready to roll out.
did I miss some feature that allows me to do this within the vs ide or does this have to be done programatically?
We are using custom authentication to acess the report server.Users can access reports only through a .net application. Now we want to give the users the ability to deploy their reports trhough a .net client utility with out changing the anonymous security setting in IIS.
Can anyone point me in the right direction . Can we use rs.exe to deploy reports under forms authenticated mode...
In a nut shell "Is there a way to deploy report through forms authentication"/
I have created a report on my local machine and deployed it on a server. As I am the administrator of the server, I can access the reports with servernameReports. The report has got three data sets. Out of these three one is a Stored procedure and other two data sets have sql queries. The user selects the 'Business year' and 'sales type' from list box. This report works perfect from my local machine as well as from teh server when I am running it
I have some other users who wish to access these reports. I did the following steps:
Created a new role and assigned it at the Data Source Folder and Reports Folder I also made the user a Database user on the server.
After doing these steps, the user can access the Reports site by servernameReports.
The user then can go into the Reports folder. But when the user tries to run the report, he gets an error with:
An error has occurred during report processing. (rsProcessingAborted)
Query execution failed for data set 'BusinessYear'. (rsErrorExecutingCommand)
For more information about this error navigate to the report server on the local server machine, or enable remote errors
Can anyone help me with this? Is htere something to do with setting up of the datasource?
I have tried to search, but could not find relevant info.
I created two reports in SSRS and have configured both the web service and report manager URLs in report services configuration manager.
whenever I try to open either one of the two reports from the manager or service I get the following error msg.
"An error occurred within the report server database. This may be due to a connection failure, timeout or low disk condition within the database.
(rsReportServerDatabaseError)
Invalid object name 'DataSets'. Could not use view or function 'ExtendedDataSets' because of binding errors."
I get a similar msg when I try to deploy the reports from VS 2010. Only the first 2 sentences are returned.
I'm mystified as to why DataSets is an invalid object name. It shows as the TargetDatasetFolder name WebsiteReports Property Page. I've looked around for the error source and can not find where this error is stemming from.
I did make changes in to webconfig with time out = 1200 and maxrequestlength = '102400' ( i think it is 10 mb)
I also made changes to machine.config.comment requestLimit = "50147483647" [number] ( does it mean 5 MB or G)
My report model is 4 MB and it still keep getting error of
Error 2 There was an exception running the extensions specified in the config file. ---> Maximum request length exceeded. c:documents and settingspdesaimy documentsvisual studio 2005projectshrintegral_reportmodelHR Integral1.smdl 0 0
I have got a quistion in regards to SQL Server Reporting Services 2005. We're currently using the SSRS in one of our applciations with 20+ reports. We need to deplaoy 2 instances of an applciation: Test and Production. These applcaitions are running off two different databases in SQL Server [DBName]_Test and [DBName]_Live. So far all of our reports have been written to use a shared datasource. This worked fine untill we had to deploy a Live instance of the application, where the shared datasource is overwritten with the live one.
Now we have manually created a new shared datasource called [DataSource]_Live. However, whenever we need to redeploy the reports from visual studio, we then have to go though each report and point it to a correct datasource. This is extremly manual process - and takes up a lot of time...
Surely there must be an easier way around this (without duplicating the reporting project in VS.NET / or having to modify the datasource fr each report manually each time)?
I have SQLExpress and SQLServer2005 installed, and Reporting services. I am trying to build and deploy a new report using my development machine as server and client. I can open the report wizard in Visual Studio, and make a report and run it in development mode. When I try to deploy the report I am asked for a username and password. I cannot find any combination of inputs that will let me proceed, but I really want to be able to access all the services on my development machine without entering credentials once Windows is running.
I get the following error when I am trying to deploy Report from Visual Studio Report Designer. SRSS is configured in SharePoint integration mode. Configuration is mentioned below.
TITLE: Microsoft Report Designer ------------------------------
A connection could not be made to the report server http://rbddspsdev2:44887/.
Server was unable to process request. ---> The request failed with HTTP status 401: Unauthorized. (System.Web.Services)
------------------------------ BUTTONS:
OK
Configuration is as follows.
Web front end server. MOSS 2007 Standard edition 64 bit. SQL Reporting Service Add in 64 bit.
SQL Server MS SQL server 2005 32 bit with sp2. Reporting Services configured. WSS 3.0 32 bit required for configuration, of SRSS in integrated mode. Windows service and web service are both running under a domain account. The account is a SharePoint Admininstrator. The account is also in Administrators, Reporting Server user and Web service group and also has a dbo rights on database.
Has anybody ever had VS2005 sometimes crash when deploying reports? It only happens once and awhile, but it is annoying. I was hoping this would go away with service pack 1, but it didn't.
Another problem that I thought would be fixed is when you try to close VS2005 after working on reports and it states "Cannot close because an active modal is active" occasionally.
I am trying to create a job that runs a SSIS package. I am getting the following error:
Message Unable to start execution of step 1 (reason: Error authenticating proxy domainsckeels, system error: Logon failure: unknown user name or bad password.). The step failed.
Our DBA ran the following to create the credentials and proxy account.
USE MSDB CREATE CREDENTIAL [sckeels] WITH IDENTITY = 'domainsckeels', secret = 'sckeels_credentials' GO Sp_add_proxy @proxy_name='ssis_users', @credential_name='sckeels' GO Sp_grant_login_to_proxy @login_name='domainsckeels', @proxy_name='ssis_users' GO Sp_grant_proxy_to_subsystem @proxy_name='ssis_users', @subsystem_name='SSIS'
I need to calculate the success rate of our OS Patch deployments. the data from system is stored in SQL with corresponding states (installed, missing, ...)
I would need to provide monthly report that shows how successful the deployment was for particular patchgroup. I have the following 2 dummy tables (just used as example)
table5 ==> Table containing patch groups + patches table6 ==> Table with machines names, patches and patch state
select * from table5 pgrouppatch GROUP1PATCH1 GROUP1PATCH2 GROUP1PATCH3 GROUP1PATCH4
[Code] ....
Result would be pgroup install missing group1 80% 20% group2 50% 50% group3 55% 45%
Ideally I would like to do this in T-SQL but if necessary can also do this in .NET Function. Only mention this but both Patchgroup and machines are dynamic each month can be different.
below are the sql scripts to create tables and populate with data
CREATE TABLE [dbo].[table5]( [pgroup] [varchar](128) NOT NULL, [patch] [nvarchar](128) NOT NULL ) CREATE TABLE [dbo].[table6]( [machinename] [varchar](128) NOT NULL,
I've got a report model I am trying to move from a development server to a production server. I published it to my development RS, exported the SMDL file, then uploaded it to the production server. At that point, I tried assigning the data source to the model and got the error:
We are currently having an issue with a Reporting Services deployment which is being accessed through Tivoli Access Manager (with a custom SSRS security extension).
When you try to launch Report Builder, we receive the following error when ClickOnce tries to validate the deployed app (Report Builder works fine when accessed outside of the Tivoli Access Manager environment):
ERROR DETAILS Following errors were detected during this operation. * [20/03/2008 2:49:35 PM] System.Deployment.Application.InvalidDeploymentException (HashValidation) - File, ReportBuilder.exe, has a different computed hash than specified in manifest. - Source: System.Deployment
Can anyone shed any light on what might be causing this?
All of the components (including the manifest) are downloaded to the client correctly so the authentication seems to be working and it works outside of TAM so there is no issue with the files on teh server having changed etc. either.
I am having an issue with report printing. I have used a specific font (Garamond) for all the report elements when creating the report in Bus Int. Dev. Studio. While printing from the preview pane, the report prints with the Garamond font (as intended).
But the issue is that after deployment, printing the report (with browser print control) does not print it with the Garamond font (looks like it is using the Arial or a similar font). This changes the whole look and feel of the report. I have tried printing the report from the reportserver, report manager and through URL access. All the 3 methods are giving similar results that the print output is not using the on-screen font.
Anybody else face similar issues? Is there any workaround for this? TIA.
hi this is my 1st time on this forum, I need to keep my DB secure on SQL server, that no body can enter into my DB and couldnt see my tables and other elements of DB.
