Solved

Data Source Credentials - Best Practice

Posted on 2008-10-22
2
846 Views
Last Modified: 2012-06-27
Windows 2003 running SQL2005 with Reporting Services 9.00.3282.00SP2Enterprise Edition (64-bit)

Is there a resource which provides definitive best practices or recommendations for configuration of SQL 2005 DataSources?  I have found within the different forums various resolutions people have tried but have not been able to find a best practice scenario.
I have used succesfully within another reporting services environment the DataSource option: "Credentials stored securely in the report server" but is this best practice? Our developers are recommending that i use the windows integrated security.

The problem associated with my question is related to:
Events leading up to the issue:
After transferring a set of reports the data source was set to use "windows integrated security"
The reportingservices service on the reporting services server is set to use local system

Specific error:
Running the report(s) results in the following error:
An error has occurred during report processing. Cannot create a connection to data source 'datasourcename'. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. For more information regarding this error it was recommend to enable remote error
------------------------------------------------------------------------------------------
Microsoft indicates --> this error occurs when credentials are passed across multiple computer connections. If you are using Windows Authentication, and the Kerberos version 5 protocol is not enabled, this error occurs when credentials are passed across more than one computer connection. To work around this error, consider using stored credentials or prompted credentials. For more information about how to work around this issue, see Specifying Credential and Connection Information for Report Data Sources.
-----------------------------------------------------------------------------------------
Other troubleshooting steps I have tried on this:
created a test system dsn:
Microsoft SQL Server ODBC Driver Version 03.86.3959
Running connectivity tests...
Attempting connection
Connection established
Verifying option settings
Disconnecting from server
TESTS COMPLETED SUCCESSFULLY!
---------------------------------------------------
Enabled remote errors for reporting services
0
Comment
Question by:mscitssae
  • 2
2 Comments
 
LVL 38

Accepted Solution

by:
Jim P. earned 500 total points
ID: 22786260
>> The reportingservices service on the reporting
>> services server is set to use local system

It is a Best Practice /security hole that you should not use the the Local System account for any SQL service. It should be a regular domain user account with permissions only to the directories and files that are needed on the server that it is running on.

Change that and windows authentication should work fine.
0
 
LVL 38

Expert Comment

by:Jim P.
ID: 22864389
Glad to be of assistance. May all your day get brighter.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

Introduction In my previous article (http://www.experts-exchange.com/Microsoft/Development/MS-SQL-Server/SSIS/A_9150-Loading-XML-Using-SSIS.html) I showed you how the XML Source component can be used to load XML files into a SQL Server database, us…
The Delta outage: 650 cancelled flights, more than 1200 delayed flights, thousands of frustrated customers, tens of millions of dollars in damages – plus untold reputational damage to one of the world’s most trusted airlines. All due to a catastroph…
This videos aims to give the viewer a basic demonstration of how a user can query current session information by using the SYS_CONTEXT function
Viewers will learn how to use the UPDATE and DELETE statements to change or remove existing data from their tables. Make a table: Update a specific column given a specific row using the UPDATE statement: Remove a set of values using the DELETE s…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now