Integrated Security to RS and SSAS not working

Hi,
Here's my setup:
1. ReportServer website is setup to use Integrated Authentication
2. I added a new user group (in computer management) called ReportAdmins
3. I used Management Studio to connect to my Reposting Services, at the top
level, I added the user group I just created, and gave it Content Manager
permissions.
4. I added an NT user to the group - ReportAdmins.
5. My datasources is an Analysis Services database, and is setup to use
Integrated Security. So I added the NT User to the OLAP Administrators group
as well. (Analysis Services and Reporting Services are all on the same
machine, running under the same service account that is an admin on the box)
Now I go to another machine, login with the NT User I specified above,
launch IE and the when I request the report I get an rsErrorExecutingCommand
- Query execution failed for data set 'abc'
What am I missing? I'ev searched other posts and I seem to have setup all
suggested access relevant to my situation, but somehow the reports aren't
working. If I make this NT USer the machine admin on the box hosting
ReportingServices, ANalysis Services etc, everything works fine (so at least
I know the reports work OK).
Any help is greatly appreciated.
Thanks.does the report works fine if you use the basic authentication instead-of
NTLM?
have you created a role in AS associated to the user group?
"Raghu" <Raghu@.discussions.microsoft.com> wrote in message
news:200FCBCA-570B-4AA1-AEB3-6321729D345D@.microsoft.com...
> Hi,
> Here's my setup:
> 1. ReportServer website is setup to use Integrated Authentication
> 2. I added a new user group (in computer management) called ReportAdmins
> 3. I used Management Studio to connect to my Reposting Services, at the
> top
> level, I added the user group I just created, and gave it Content Manager
> permissions.
> 4. I added an NT user to the group - ReportAdmins.
> 5. My datasources is an Analysis Services database, and is setup to use
> Integrated Security. So I added the NT User to the OLAP Administrators
> group
> as well. (Analysis Services and Reporting Services are all on the same
> machine, running under the same service account that is an admin on the
> box)
> Now I go to another machine, login with the NT User I specified above,
> launch IE and the when I request the report I get an
> rsErrorExecutingCommand
> - Query execution failed for data set 'abc'
> What am I missing? I'ev searched other posts and I seem to have setup all
> suggested access relevant to my situation, but somehow the reports aren't
> working. If I make this NT USer the machine admin on the box hosting
> ReportingServices, ANalysis Services etc, everything works fine (so at
> least
> I know the reports work OK).
> Any help is greatly appreciated.
> Thanks.|||Thank you for your response.
1. Basic Authentication cannot be used for the data source because AS
requires integrated authentication and if I specify basic authentication,
then I cannot use an NT account to connect to AS.
2. The role in AS for the user group is not necessary as the NTUsers in
that group are OLAP admins (in my test case below. I have only one NTUser and
he is an OLAP admin).
BTW, sorry for not mentioning this earlier - I am using RS2005 and SSAS2005.
"Jéjé" wrote:
> does the report works fine if you use the basic authentication instead-of
> NTLM?
> have you created a role in AS associated to the user group?
> "Raghu" <Raghu@.discussions.microsoft.com> wrote in message
> news:200FCBCA-570B-4AA1-AEB3-6321729D345D@.microsoft.com...
> > Hi,
> >
> > Here's my setup:
> > 1. ReportServer website is setup to use Integrated Authentication
> > 2. I added a new user group (in computer management) called ReportAdmins
> > 3. I used Management Studio to connect to my Reposting Services, at the
> > top
> > level, I added the user group I just created, and gave it Content Manager
> > permissions.
> > 4. I added an NT user to the group - ReportAdmins.
> > 5. My datasources is an Analysis Services database, and is setup to use
> > Integrated Security. So I added the NT User to the OLAP Administrators
> > group
> > as well. (Analysis Services and Reporting Services are all on the same
> > machine, running under the same service account that is an admin on the
> > box)
> >
> > Now I go to another machine, login with the NT User I specified above,
> > launch IE and the when I request the report I get an
> > rsErrorExecutingCommand
> > - Query execution failed for data set 'abc'
> >
> > What am I missing? I'ev searched other posts and I seem to have setup all
> > suggested access relevant to my situation, but somehow the reports aren't
> > working. If I make this NT USer the machine admin on the box hosting
> > ReportingServices, ANalysis Services etc, everything works fine (so at
> > least
> > I know the reports work OK).
> >
> > Any help is greatly appreciated.
> >
> > Thanks.
>
>|||Sorry, I misread the 'Basic Authentication' test to mean simple userid
password in RS data source setup. I was playing with IIS setup again and
found that there is a 'Basic Authentication' checkbox for security as well.
I tried the Basic Authentication and it prompts for userid and password. If
I provide the NT UserID and password that is the admin on the ReportServer
and AServer box, everything works fine, but if I use the regular user that I
added to the 'ReportUser' group, it doesn't work.
"Raghu" wrote:
> Thank you for your response.
> 1. Basic Authentication cannot be used for the data source because AS
> requires integrated authentication and if I specify basic authentication,
> then I cannot use an NT account to connect to AS.
> 2. The role in AS for the user group is not necessary as the NTUsers in
> that group are OLAP admins (in my test case below. I have only one NTUser and
> he is an OLAP admin).
> BTW, sorry for not mentioning this earlier - I am using RS2005 and SSAS2005.
> "Jéjé" wrote:
> > does the report works fine if you use the basic authentication instead-of
> > NTLM?
> > have you created a role in AS associated to the user group?
> >
> > "Raghu" <Raghu@.discussions.microsoft.com> wrote in message
> > news:200FCBCA-570B-4AA1-AEB3-6321729D345D@.microsoft.com...
> > > Hi,
> > >
> > > Here's my setup:
> > > 1. ReportServer website is setup to use Integrated Authentication
> > > 2. I added a new user group (in computer management) called ReportAdmins
> > > 3. I used Management Studio to connect to my Reposting Services, at the
> > > top
> > > level, I added the user group I just created, and gave it Content Manager
> > > permissions.
> > > 4. I added an NT user to the group - ReportAdmins.
> > > 5. My datasources is an Analysis Services database, and is setup to use
> > > Integrated Security. So I added the NT User to the OLAP Administrators
> > > group
> > > as well. (Analysis Services and Reporting Services are all on the same
> > > machine, running under the same service account that is an admin on the
> > > box)
> > >
> > > Now I go to another machine, login with the NT User I specified above,
> > > launch IE and the when I request the report I get an
> > > rsErrorExecutingCommand
> > > - Query execution failed for data set 'abc'
> > >
> > > What am I missing? I'ev searched other posts and I seem to have setup all
> > > suggested access relevant to my situation, but somehow the reports aren't
> > > working. If I make this NT USer the machine admin on the box hosting
> > > ReportingServices, ANalysis Services etc, everything works fine (so at
> > > least
> > > I know the reports work OK).
> > >
> > > Any help is greatly appreciated.
> > >
> > > Thanks.
> >
> >
> >|||I think the security is not correctly setup on the server
the reportuser group has not enough authorization on the server.
the error message will display where.
remember that AS2005 is more secure then AS2000, so you must authorize this
group to access the cubes through a role.
"Raghu" <Raghu@.discussions.microsoft.com> wrote in message
news:2DD1B7A0-764E-405B-A247-DDC5C26A4532@.microsoft.com...
> Sorry, I misread the 'Basic Authentication' test to mean simple userid
> password in RS data source setup. I was playing with IIS setup again and
> found that there is a 'Basic Authentication' checkbox for security as
> well.
> I tried the Basic Authentication and it prompts for userid and password.
> If
> I provide the NT UserID and password that is the admin on the ReportServer
> and AServer box, everything works fine, but if I use the regular user
> that I
> added to the 'ReportUser' group, it doesn't work.
> "Raghu" wrote:
>> Thank you for your response.
>> 1. Basic Authentication cannot be used for the data source because AS
>> requires integrated authentication and if I specify basic authentication,
>> then I cannot use an NT account to connect to AS.
>> 2. The role in AS for the user group is not necessary as the NTUsers in
>> that group are OLAP admins (in my test case below. I have only one NTUser
>> and
>> he is an OLAP admin).
>> BTW, sorry for not mentioning this earlier - I am using RS2005 and
>> SSAS2005.
>> "Jéjé" wrote:
>> > does the report works fine if you use the basic authentication
>> > instead-of
>> > NTLM?
>> > have you created a role in AS associated to the user group?
>> >
>> > "Raghu" <Raghu@.discussions.microsoft.com> wrote in message
>> > news:200FCBCA-570B-4AA1-AEB3-6321729D345D@.microsoft.com...
>> > > Hi,
>> > >
>> > > Here's my setup:
>> > > 1. ReportServer website is setup to use Integrated Authentication
>> > > 2. I added a new user group (in computer management) called
>> > > ReportAdmins
>> > > 3. I used Management Studio to connect to my Reposting Services, at
>> > > the
>> > > top
>> > > level, I added the user group I just created, and gave it Content
>> > > Manager
>> > > permissions.
>> > > 4. I added an NT user to the group - ReportAdmins.
>> > > 5. My datasources is an Analysis Services database, and is setup to
>> > > use
>> > > Integrated Security. So I added the NT User to the OLAP
>> > > Administrators
>> > > group
>> > > as well. (Analysis Services and Reporting Services are all on the
>> > > same
>> > > machine, running under the same service account that is an admin on
>> > > the
>> > > box)
>> > >
>> > > Now I go to another machine, login with the NT User I specified
>> > > above,
>> > > launch IE and the when I request the report I get an
>> > > rsErrorExecutingCommand
>> > > - Query execution failed for data set 'abc'
>> > >
>> > > What am I missing? I'ev searched other posts and I seem to have setup
>> > > all
>> > > suggested access relevant to my situation, but somehow the reports
>> > > aren't
>> > > working. If I make this NT USer the machine admin on the box hosting
>> > > ReportingServices, ANalysis Services etc, everything works fine (so
>> > > at
>> > > least
>> > > I know the reports work OK).
>> > >
>> > > Any help is greatly appreciated.
>> > >
>> > > Thanks.
>> >
>> >
>> >

Integrate Reports in ASP.Net Web Form

Hi,
I have my reports at http:\\localhost\ReportServer and need to use them in
ASP.NET Web Form.I have a few questions reg. this
--> I want to generate a PDF when a button labeled "Generate Report" is
clicked"
(1) I tried this using the below code:
Dim myResponse As Byte()
Dim url As String = http://localhost/reportserver?/Reports/Sales
Invoice&ORDER_ID=1879&rs:Format=PDF
Dim myWebClient As New WebClient
myWebClient.Credentials = CredentialCache.DefaultCredentials
myResponse = myWebClient.DownloadData(url)
Response.ContentType = "application/pdf"
Response.AddHeader("content-disposition", "attachment; filename=Sales
Invoice.PDF")
Response.BinaryWrite(myResponse)
But got the error "The remote server returned an error: (403) Forbidden"
I have included "<identity impersonate="true"/>" in Web.Config File.
This Error is because the Credentials is null. I don't know why the
credentials are null even after I use myWebClient.Credentials = CredentialCache.DefaultCredentials
The same code works if I Create new Credentials specifying UserName and
Password. But I am cannot specify Username and password. The Application has
take the credentials from the server.
(2) Why can't I use the following one line of code(This works, I want to
know are there any kind issues with
this)Response.Redirect(http://localhost/reportserver?/Reports/Sales
Invoice&ORDER_ID=1879&rs:Format=PDF)
(3) What are other ways to integrate reports with ASP.NET Web Form.
(4)I need to deploy the Reports that I created in my machine to the server
I tried to deploy setting TargetServerURL=http://servername/ReportServer in
Project Properties, but got the error
"The permissions granted to user are insufficient for performing this
operation". What kind of permissions are required.
(5)What are different ways to deploy Reports on a Server.It sounds like you are running into the double hop issue. You can not make
an impersonated call to another machine if you are currently impersonated,
unless the machines trust one another. You would need to set up Kerberos to
get the machines to trust each other.
--
-Daniel
This posting is provided "AS IS" with no warranties, and confers no rights.
"Kiran" <Kiran@.nospam.net> wrote in message
news:O7VH3Z35EHA.1564@.TK2MSFTNGP09.phx.gbl...
> Hi,
> I have my reports at http:\\localhost\ReportServer and need to use them in
> ASP.NET Web Form.I have a few questions reg. this
> --> I want to generate a PDF when a button labeled "Generate Report"
> is clicked"
> (1) I tried this using the below code:
> Dim myResponse As Byte()
> Dim url As String = http://localhost/reportserver?/Reports/Sales
> Invoice&ORDER_ID=1879&rs:Format=PDF
> Dim myWebClient As New WebClient
> myWebClient.Credentials = CredentialCache.DefaultCredentials
> myResponse = myWebClient.DownloadData(url)
> Response.ContentType = "application/pdf"
> Response.AddHeader("content-disposition", "attachment; filename=Sales
> Invoice.PDF")
> Response.BinaryWrite(myResponse)
> But got the error "The remote server returned an error: (403) Forbidden"
> I have included "<identity impersonate="true"/>" in Web.Config File.
> This Error is because the Credentials is null. I don't know why the
> credentials are null even after I use myWebClient.Credentials => CredentialCache.DefaultCredentials
> The same code works if I Create new Credentials specifying UserName and
> Password. But I am cannot specify Username and password. The Application
> has take the credentials from the server.
> (2) Why can't I use the following one line of code(This works, I want to
> know are there any kind issues with
> this)Response.Redirect(http://localhost/reportserver?/Reports/Sales
> Invoice&ORDER_ID=1879&rs:Format=PDF)
> (3) What are other ways to integrate reports with ASP.NET Web Form.
> (4)I need to deploy the Reports that I created in my machine to the server
> I tried to deploy setting TargetServerURL=http://servername/ReportServer
> in Project Properties, but got the error
> "The permissions granted to user are insufficient for performing this
> operation". What kind of permissions are required.
> (5)What are different ways to deploy Reports on a Server.
>|||For deploying you should have rights in the report server to deploy report.
Log on to the machine to which you are tryiong to deploy , open the report
manager and under security add yourself as a user with deployment rights.
Reponse.Redirect works fine for me. also have you tried using report viewer
HTH
"Kiran" <Kiran@.nospam.net> wrote in message
news:O7VH3Z35EHA.1564@.TK2MSFTNGP09.phx.gbl...
> Hi,
> I have my reports at http:\\localhost\ReportServer and need to use them in
> ASP.NET Web Form.I have a few questions reg. this
> --> I want to generate a PDF when a button labeled "Generate Report"
> is clicked"
> (1) I tried this using the below code:
> Dim myResponse As Byte()
> Dim url As String = http://localhost/reportserver?/Reports/Sales
> Invoice&ORDER_ID=1879&rs:Format=PDF
> Dim myWebClient As New WebClient
> myWebClient.Credentials = CredentialCache.DefaultCredentials
> myResponse = myWebClient.DownloadData(url)
> Response.ContentType = "application/pdf"
> Response.AddHeader("content-disposition", "attachment; filename=Sales
> Invoice.PDF")
> Response.BinaryWrite(myResponse)
> But got the error "The remote server returned an error: (403) Forbidden"
> I have included "<identity impersonate="true"/>" in Web.Config File.
> This Error is because the Credentials is null. I don't know why the
> credentials are null even after I use myWebClient.Credentials => CredentialCache.DefaultCredentials
> The same code works if I Create new Credentials specifying UserName and
> Password. But I am cannot specify Username and password. The Application
> has take the credentials from the server.
> (2) Why can't I use the following one line of code(This works, I want to
> know are there any kind issues with
> this)Response.Redirect(http://localhost/reportserver?/Reports/Sales
> Invoice&ORDER_ID=1879&rs:Format=PDF)
> (3) What are other ways to integrate reports with ASP.NET Web Form.
> (4)I need to deploy the Reports that I created in my machine to the server
> I tried to deploy setting TargetServerURL=http://servername/ReportServer
> in Project Properties, but got the error
> "The permissions granted to user are insufficient for performing this
> operation". What kind of permissions are required.
> (5)What are different ways to deploy Reports on a Server.
>