?
Solved

Data Source Credentials - Best Practice

Posted on 2008-10-22
2
Medium Priority
?
884 Views
Last Modified: 2012-06-27
Windows 2003 running SQL2005 with Reporting Services 9.00.3282.00SP2Enterprise Edition (64-bit)

Is there a resource which provides definitive best practices or recommendations for configuration of SQL 2005 DataSources?  I have found within the different forums various resolutions people have tried but have not been able to find a best practice scenario.
I have used succesfully within another reporting services environment the DataSource option: "Credentials stored securely in the report server" but is this best practice? Our developers are recommending that i use the windows integrated security.

The problem associated with my question is related to:
Events leading up to the issue:
After transferring a set of reports the data source was set to use "windows integrated security"
The reportingservices service on the reporting services server is set to use local system

Specific error:
Running the report(s) results in the following error:
An error has occurred during report processing. Cannot create a connection to data source 'datasourcename'. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. For more information regarding this error it was recommend to enable remote error
------------------------------------------------------------------------------------------
Microsoft indicates --> this error occurs when credentials are passed across multiple computer connections. If you are using Windows Authentication, and the Kerberos version 5 protocol is not enabled, this error occurs when credentials are passed across more than one computer connection. To work around this error, consider using stored credentials or prompted credentials. For more information about how to work around this issue, see Specifying Credential and Connection Information for Report Data Sources.
-----------------------------------------------------------------------------------------
Other troubleshooting steps I have tried on this:
created a test system dsn:
Microsoft SQL Server ODBC Driver Version 03.86.3959
Running connectivity tests...
Attempting connection
Connection established
Verifying option settings
Disconnecting from server
TESTS COMPLETED SUCCESSFULLY!
---------------------------------------------------
Enabled remote errors for reporting services
0
Comment
Question by:mscitssae
  • 2
2 Comments
 
LVL 38

Accepted Solution

by:
Jim P. earned 2000 total points
ID: 22786260
>> The reportingservices service on the reporting
>> services server is set to use local system

It is a Best Practice /security hole that you should not use the the Local System account for any SQL service. It should be a regular domain user account with permissions only to the directories and files that are needed on the server that it is running on.

Change that and windows authentication should work fine.
0
 
LVL 38

Expert Comment

by:Jim P.
ID: 22864389
Glad to be of assistance. May all your day get brighter.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have a large data set and a SSIS package. How can I load this file in multi threading?
In this article we will learn how to fix  “Cannot install SQL Server 2014 Service Pack 2: Unable to install windows installer msi file” error ?
Via a live example, show how to backup a database, simulate a failure backup the tail of the database transaction log and perform the restore.
Via a live example, show how to shrink a transaction log file down to a reasonable size.
Suggested Courses

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question