Integrated Security to RS and SSAS not working

Hi,
Here's my setup:
1. ReportServer website is setup to use Integrated Authentication
2. I added a new user group (in computer management) called ReportAdmins
3. I used Management Studio to connect to my Reposting Services, at the top
level, I added the user group I just created, and gave it Content Manager
permissions.
4. I added an NT user to the group - ReportAdmins.
5. My datasources is an Analysis Services database, and is setup to use
Integrated Security. So I added the NT User to the OLAP Administrators group
as well. (Analysis Services and Reporting Services are all on the same
machine, running under the same service account that is an admin on the box)
Now I go to another machine, login with the NT User I specified above,
launch IE and the when I request the report I get an rsErrorExecutingCommand
- Query execution failed for data set 'abc'
What am I missing? I'ev searched other posts and I seem to have setup all
suggested access relevant to my situation, but somehow the reports aren't
working. If I make this NT USer the machine admin on the box hosting
ReportingServices, ANalysis Services etc, everything works fine (so at least
I know the reports work OK).
Any help is greatly appreciated.
Thanks.does the report works fine if you use the basic authentication instead-of
NTLM?
have you created a role in AS associated to the user group?
"Raghu" <Raghu@.discussions.microsoft.com> wrote in message
news:200FCBCA-570B-4AA1-AEB3-6321729D345D@.microsoft.com...
> Hi,
> Here's my setup:
> 1. ReportServer website is setup to use Integrated Authentication
> 2. I added a new user group (in computer management) called ReportAdmins
> 3. I used Management Studio to connect to my Reposting Services, at the
> top
> level, I added the user group I just created, and gave it Content Manager
> permissions.
> 4. I added an NT user to the group - ReportAdmins.
> 5. My datasources is an Analysis Services database, and is setup to use
> Integrated Security. So I added the NT User to the OLAP Administrators
> group
> as well. (Analysis Services and Reporting Services are all on the same
> machine, running under the same service account that is an admin on the
> box)
> Now I go to another machine, login with the NT User I specified above,
> launch IE and the when I request the report I get an
> rsErrorExecutingCommand
> - Query execution failed for data set 'abc'
> What am I missing? I'ev searched other posts and I seem to have setup all
> suggested access relevant to my situation, but somehow the reports aren't
> working. If I make this NT USer the machine admin on the box hosting
> ReportingServices, ANalysis Services etc, everything works fine (so at
> least
> I know the reports work OK).
> Any help is greatly appreciated.
> Thanks.|||Thank you for your response.
1. Basic Authentication cannot be used for the data source because AS
requires integrated authentication and if I specify basic authentication,
then I cannot use an NT account to connect to AS.
2. The role in AS for the user group is not necessary as the NTUsers in
that group are OLAP admins (in my test case below. I have only one NTUser and
he is an OLAP admin).
BTW, sorry for not mentioning this earlier - I am using RS2005 and SSAS2005.
"Jéjé" wrote:
> does the report works fine if you use the basic authentication instead-of
> NTLM?
> have you created a role in AS associated to the user group?
> "Raghu" <Raghu@.discussions.microsoft.com> wrote in message
> news:200FCBCA-570B-4AA1-AEB3-6321729D345D@.microsoft.com...
> > Hi,
> >
> > Here's my setup:
> > 1. ReportServer website is setup to use Integrated Authentication
> > 2. I added a new user group (in computer management) called ReportAdmins
> > 3. I used Management Studio to connect to my Reposting Services, at the
> > top
> > level, I added the user group I just created, and gave it Content Manager
> > permissions.
> > 4. I added an NT user to the group - ReportAdmins.
> > 5. My datasources is an Analysis Services database, and is setup to use
> > Integrated Security. So I added the NT User to the OLAP Administrators
> > group
> > as well. (Analysis Services and Reporting Services are all on the same
> > machine, running under the same service account that is an admin on the
> > box)
> >
> > Now I go to another machine, login with the NT User I specified above,
> > launch IE and the when I request the report I get an
> > rsErrorExecutingCommand
> > - Query execution failed for data set 'abc'
> >
> > What am I missing? I'ev searched other posts and I seem to have setup all
> > suggested access relevant to my situation, but somehow the reports aren't
> > working. If I make this NT USer the machine admin on the box hosting
> > ReportingServices, ANalysis Services etc, everything works fine (so at
> > least
> > I know the reports work OK).
> >
> > Any help is greatly appreciated.
> >
> > Thanks.
>
>|||Sorry, I misread the 'Basic Authentication' test to mean simple userid
password in RS data source setup. I was playing with IIS setup again and
found that there is a 'Basic Authentication' checkbox for security as well.
I tried the Basic Authentication and it prompts for userid and password. If
I provide the NT UserID and password that is the admin on the ReportServer
and AServer box, everything works fine, but if I use the regular user that I
added to the 'ReportUser' group, it doesn't work.
"Raghu" wrote:
> Thank you for your response.
> 1. Basic Authentication cannot be used for the data source because AS
> requires integrated authentication and if I specify basic authentication,
> then I cannot use an NT account to connect to AS.
> 2. The role in AS for the user group is not necessary as the NTUsers in
> that group are OLAP admins (in my test case below. I have only one NTUser and
> he is an OLAP admin).
> BTW, sorry for not mentioning this earlier - I am using RS2005 and SSAS2005.
> "Jéjé" wrote:
> > does the report works fine if you use the basic authentication instead-of
> > NTLM?
> > have you created a role in AS associated to the user group?
> >
> > "Raghu" <Raghu@.discussions.microsoft.com> wrote in message
> > news:200FCBCA-570B-4AA1-AEB3-6321729D345D@.microsoft.com...
> > > Hi,
> > >
> > > Here's my setup:
> > > 1. ReportServer website is setup to use Integrated Authentication
> > > 2. I added a new user group (in computer management) called ReportAdmins
> > > 3. I used Management Studio to connect to my Reposting Services, at the
> > > top
> > > level, I added the user group I just created, and gave it Content Manager
> > > permissions.
> > > 4. I added an NT user to the group - ReportAdmins.
> > > 5. My datasources is an Analysis Services database, and is setup to use
> > > Integrated Security. So I added the NT User to the OLAP Administrators
> > > group
> > > as well. (Analysis Services and Reporting Services are all on the same
> > > machine, running under the same service account that is an admin on the
> > > box)
> > >
> > > Now I go to another machine, login with the NT User I specified above,
> > > launch IE and the when I request the report I get an
> > > rsErrorExecutingCommand
> > > - Query execution failed for data set 'abc'
> > >
> > > What am I missing? I'ev searched other posts and I seem to have setup all
> > > suggested access relevant to my situation, but somehow the reports aren't
> > > working. If I make this NT USer the machine admin on the box hosting
> > > ReportingServices, ANalysis Services etc, everything works fine (so at
> > > least
> > > I know the reports work OK).
> > >
> > > Any help is greatly appreciated.
> > >
> > > Thanks.
> >
> >
> >|||I think the security is not correctly setup on the server
the reportuser group has not enough authorization on the server.
the error message will display where.
remember that AS2005 is more secure then AS2000, so you must authorize this
group to access the cubes through a role.
"Raghu" <Raghu@.discussions.microsoft.com> wrote in message
news:2DD1B7A0-764E-405B-A247-DDC5C26A4532@.microsoft.com...
> Sorry, I misread the 'Basic Authentication' test to mean simple userid
> password in RS data source setup. I was playing with IIS setup again and
> found that there is a 'Basic Authentication' checkbox for security as
> well.
> I tried the Basic Authentication and it prompts for userid and password.
> If
> I provide the NT UserID and password that is the admin on the ReportServer
> and AServer box, everything works fine, but if I use the regular user
> that I
> added to the 'ReportUser' group, it doesn't work.
> "Raghu" wrote:
>> Thank you for your response.
>> 1. Basic Authentication cannot be used for the data source because AS
>> requires integrated authentication and if I specify basic authentication,
>> then I cannot use an NT account to connect to AS.
>> 2. The role in AS for the user group is not necessary as the NTUsers in
>> that group are OLAP admins (in my test case below. I have only one NTUser
>> and
>> he is an OLAP admin).
>> BTW, sorry for not mentioning this earlier - I am using RS2005 and
>> SSAS2005.
>> "Jéjé" wrote:
>> > does the report works fine if you use the basic authentication
>> > instead-of
>> > NTLM?
>> > have you created a role in AS associated to the user group?
>> >
>> > "Raghu" <Raghu@.discussions.microsoft.com> wrote in message
>> > news:200FCBCA-570B-4AA1-AEB3-6321729D345D@.microsoft.com...
>> > > Hi,
>> > >
>> > > Here's my setup:
>> > > 1. ReportServer website is setup to use Integrated Authentication
>> > > 2. I added a new user group (in computer management) called
>> > > ReportAdmins
>> > > 3. I used Management Studio to connect to my Reposting Services, at
>> > > the
>> > > top
>> > > level, I added the user group I just created, and gave it Content
>> > > Manager
>> > > permissions.
>> > > 4. I added an NT user to the group - ReportAdmins.
>> > > 5. My datasources is an Analysis Services database, and is setup to
>> > > use
>> > > Integrated Security. So I added the NT User to the OLAP
>> > > Administrators
>> > > group
>> > > as well. (Analysis Services and Reporting Services are all on the
>> > > same
>> > > machine, running under the same service account that is an admin on
>> > > the
>> > > box)
>> > >
>> > > Now I go to another machine, login with the NT User I specified
>> > > above,
>> > > launch IE and the when I request the report I get an
>> > > rsErrorExecutingCommand
>> > > - Query execution failed for data set 'abc'
>> > >
>> > > What am I missing? I'ev searched other posts and I seem to have setup
>> > > all
>> > > suggested access relevant to my situation, but somehow the reports
>> > > aren't
>> > > working. If I make this NT USer the machine admin on the box hosting
>> > > ReportingServices, ANalysis Services etc, everything works fine (so
>> > > at
>> > > least
>> > > I know the reports work OK).
>> > >
>> > > Any help is greatly appreciated.
>> > >
>> > > Thanks.
>> >
>> >
>> >