NaumLitvin
asked on
SSRS 2005 post installation problems
Hello,
I hope I provided enough info about my problem below...
I installed SSRS2005 on Windows Server 2003 R2 Stabdard x64 Edition with SP2 with IIS 6.0 and SQL Server 9.0.1399
- I can see SSRS working from VS2005 (I can run reports using Preview Tab in VS2005),
- I can see reports folder locally on url http://localhost/Reports/Pages/Folder.aspx
- if setup Authentication Access to Basic Authentication in IIS, I can see reports folder from another machine on our network on url http://dbtest/Reports/Pages/Folder.aspx
- windows service identity set to "local system" in SSRS Configurator (see ssrserr-win-serv-id.jpg on http://clip2net.com/page/m0/390524 )
- web service identity set to "nt authority/network service" (see ssrs-web-serv-id.jpg on http://clip2net.com/page/m0/390522 )
- all accounts, "local service", "network service" and ASPNET have permissions to access both SSRS folders (see ssrs-folder-permissions.jp g on http://clip2net.com/page/m0/390519 )
- I setup Sel/Upd/Ins/Del/Exe permissions for LocalSystem and for NT Authority\System for ReportServer DB and for NT Authority\Network Service and NT Authority\System for ReportServerTempDB
- in SSRS Configuration Mgr all the boxes on the left are ticket (only Encryption Keys has ! which should be OK)
Still I have three problems with security settings:
1) When I try to access Reports Folder from another computer using Windows Authentication I am getting error 401 in browser (see ssrs-401.jpg on http://clip2net.com/page/m0/390517 )
2) When I run report from Reports Folder locally I am getting connect error "unknown user name or bad password" even though I think I am providing all needed authentication info
" Logon failed.
" Logon failure: unknown user name or bad password. (Exception from HRESULT: 0x8007052E)
3) When I try to run my test report from browser even on local machine after setting datasource credentials to no credentials required I am getting ASP error (see ssrs-asp-err.jpg on http://clip2net.com/page/m0/390515 )
Below are all (I think) relevant logs:
ReportServer__10_29_2008_0 8_10_26.lo g:
ReportServerWebApp__10_29_ 2008_08_10 _19.log
C:\WINDOWS\system32\LogFil es\W3SVC1\ ex081029.l og
Attached are
- ssrs-3083.jpg (from Event viewer) on http://clip2net.com/page/m0/390511 and
- ssrs-1309.jpg (from Event Viewer) on http://clip2net.com/page/m0/390509
Any idea what to look for or fix will be appreciated.
Thanks!
ReportServer--10-29-2008-08-10-2.doc
ReportServerWebApp--10-29-2008-0.doc
C-WINDOWS-system32-LogFiles-W3SV.doc
I hope I provided enough info about my problem below...
I installed SSRS2005 on Windows Server 2003 R2 Stabdard x64 Edition with SP2 with IIS 6.0 and SQL Server 9.0.1399
- I can see SSRS working from VS2005 (I can run reports using Preview Tab in VS2005),
- I can see reports folder locally on url http://localhost/Reports/Pages/Folder.aspx
- if setup Authentication Access to Basic Authentication in IIS, I can see reports folder from another machine on our network on url http://dbtest/Reports/Pages/Folder.aspx
- windows service identity set to "local system" in SSRS Configurator (see ssrserr-win-serv-id.jpg on http://clip2net.com/page/m0/390524 )
- web service identity set to "nt authority/network service" (see ssrs-web-serv-id.jpg on http://clip2net.com/page/m0/390522 )
- all accounts, "local service", "network service" and ASPNET have permissions to access both SSRS folders (see ssrs-folder-permissions.jp
- I setup Sel/Upd/Ins/Del/Exe permissions for LocalSystem and for NT Authority\System for ReportServer DB and for NT Authority\Network Service and NT Authority\System for ReportServerTempDB
- in SSRS Configuration Mgr all the boxes on the left are ticket (only Encryption Keys has ! which should be OK)
Still I have three problems with security settings:
1) When I try to access Reports Folder from another computer using Windows Authentication I am getting error 401 in browser (see ssrs-401.jpg on http://clip2net.com/page/m0/390517 )
2) When I run report from Reports Folder locally I am getting connect error "unknown user name or bad password" even though I think I am providing all needed authentication info
" Logon failed.
" Logon failure: unknown user name or bad password. (Exception from HRESULT: 0x8007052E)
3) When I try to run my test report from browser even on local machine after setting datasource credentials to no credentials required I am getting ASP error (see ssrs-asp-err.jpg on http://clip2net.com/page/m0/390515 )
Below are all (I think) relevant logs:
ReportServer__10_29_2008_0
ReportServerWebApp__10_29_
C:\WINDOWS\system32\LogFil
Attached are
- ssrs-3083.jpg (from Event viewer) on http://clip2net.com/page/m0/390511 and
- ssrs-1309.jpg (from Event Viewer) on http://clip2net.com/page/m0/390509
Any idea what to look for or fix will be appreciated.
Thanks!
ReportServer--10-29-2008-08-10-2.doc
ReportServerWebApp--10-29-2008-0.doc
C-WINDOWS-system32-LogFiles-W3SV.doc
ASKER
Valentino, could you elaborate a bit, pls. I downloaded the SP2 for x64, can I just install it or I need to backup all databases first? I do not plan to go back to pre-SP2 SQL Server...
Do I need to uninstall SSRS before applying SP2?
Thanks
Do I need to uninstall SSRS before applying SP2?
Thanks
Backing up your databases before applying a patch or SP is always my preferred approach. The installation will do a rollback in case anything goes wrong, but it doesn't hurt to have a backup yourself, right?
There's no need to uninstall anything. SSRS is part of SQL Server so if you install SP2, SSRS will get upgraded as well.
I also recommend to read through the information on the download page, including the Readme (http://download.microsoft.com/download/2/B/5/2B5E5D37-9B17-423D-BC8F-B11ECD4195B4/ReadmeSQL2005SP2.htm).
There's no need to uninstall anything. SSRS is part of SQL Server so if you install SP2, SSRS will get upgraded as well.
I also recommend to read through the information on the download page, including the Readme (http://download.microsoft.com/download/2/B/5/2B5E5D37-9B17-423D-BC8F-B11ECD4195B4/ReadmeSQL2005SP2.htm).
ASKER
I installed SP2, version is now correct (3042).
However, SSRS still does not work. I checked Configuration and now Web Service Identity is not setup. Help says to create Virtual Directory first, but it IS created, checked and kind of working (when Authentication set to Basic)...
see screen shot at http://clip2net.com/page/m0/395532
I restarted SQL Server and IIS, registered ASP - does not help.
Another problem which I failed to mention before (or did not notice then) is that I do not see DataSources when I setup reports on the server. I do see them when I browse folders on server, but when I try to setup a datasource for a report I see the tree with nodes but not a single datasource (and I uploaded two)...
any ideas what to do or what tests to run?
I was thinking to reinstall SSRS but did not see how to uninstall it...
thanks
If I run a report
However, SSRS still does not work. I checked Configuration and now Web Service Identity is not setup. Help says to create Virtual Directory first, but it IS created, checked and kind of working (when Authentication set to Basic)...
see screen shot at http://clip2net.com/page/m0/395532
I restarted SQL Server and IIS, registered ASP - does not help.
Another problem which I failed to mention before (or did not notice then) is that I do not see DataSources when I setup reports on the server. I do see them when I browse folders on server, but when I try to setup a datasource for a report I see the tree with nodes but not a single datasource (and I uploaded two)...
any ideas what to do or what tests to run?
I was thinking to reinstall SSRS but did not see how to uninstall it...
thanks
If I run a report
Does the ASPNET user exist on your server? I haven't seen this issue myself but have been searching the web a bit and in many cases it seems to have something to do with ASP.NET, either the account or some other issue.
If that's not the problem then the explanation through the following link may have a solution for you: http://developmentnow.com/g/115_2007_8_0_0_1008242/Web-Service-Identiy-is-red-in-report-configuration-tool.htm
If that's not the problem then the explanation through the following link may have a solution for you: http://developmentnow.com/g/115_2007_8_0_0_1008242/Web-Service-Identiy-is-red-in-report-configuration-tool.htm
ASKER
Finally got to test the problem and so far no luck.
Yes, user ASPNET exists and has permissions to both Virt Dirs. I went through that exercise with recreating both Virt Dirs and now I have all buttons checked in SSRS Configurator, including Web Identity. Still I am getting Login Failed error on local machine and have to lower Autherntication to from Windows Identity to Basic to be able to access the Reports folder from another computer on the network...
Please, more ideas...
Thanks
Below is fresh snapshot from SSRS log...
w3wp!library!7!11/05/2008- 23:58:48:: i INFO: Call to RenderFirst( '/test/Report2' )
w3wp!library!7!11/05/2008- 23:58:48:: e ERROR: Throwing Microsoft.ReportingService s.Diagnost ics.Utilit ies.LogonF ailedExcep tion: Logon failed., ;
Info: Microsoft.ReportingService s.Diagnost ics.Utilit ies.LogonF ailedExcep tion: Logon failed. ---> System.Runtime.InteropServ ices.COMEx ception (0x8007052E): Logon failure: unknown user name or bad password. (Exception from HRESULT: 0x8007052E)
at System.Runtime.InteropServ ices.Marsh al.ThrowEx ceptionFor HRInternal (Int32 errorCode, IntPtr errorInfo)
at RSRemoteRpcClient.RemoteLo gon.GetRem oteImpToke n(String pRPCEndpointName, Int32 type, Guid dataSourceId, String pUserName, String pDomain, String pPassword)
at Microsoft.ReportingService s.Diagnost ics.Impers onationCon text.Login (Credentia lsType credType, Guid dataSourceId, String userName, String userPwd, String domain)
--- End of inner exception stack trace ---
w3wp!webserver!7!11/05/200 8-23:58:48 :: e ERROR: Reporting Services error Microsoft.ReportingService s.Diagnost ics.Utilit ies.RSExce ption: Logon failed. ---> Microsoft.ReportingService s.Diagnost ics.Utilit ies.LogonF ailedExcep tion: Logon failed. ---> System.Runtime.InteropServ ices.COMEx ception (0x8007052E): Logon failure: unknown user name or bad password. (Exception from HRESULT: 0x8007052E)
at System.Runtime.InteropServ ices.Marsh al.ThrowEx ceptionFor HRInternal (Int32 errorCode, IntPtr errorInfo)
at RSRemoteRpcClient.RemoteLo gon.GetRem oteImpToke n(String pRPCEndpointName, Int32 type, Guid dataSourceId, String pUserName, String pDomain, String pPassword)
at Microsoft.ReportingService s.Diagnost ics.Impers onationCon text.Login (Credentia lsType credType, Guid dataSourceId, String userName, String userPwd, String domain)
--- End of inner exception stack trace ---
at Microsoft.ReportingService s.Diagnost ics.Impers onationCon text.Login (Credentia lsType credType, Guid dataSourceId, String userName, String userPwd, String domain)
at Microsoft.ReportingService s.Diagnost ics.Impers onationCon text..ctor (Credentia lsType credType, Guid dataSourceId, String userName, String password, String domain)
at Microsoft.ReportingService s.Library. SurrogateC ontextFact ory.Create Context(Ex ecutionTyp e& execType)
at Microsoft.ReportingService s.Library. RSService. RenderAsLi ve(Catalog ItemContex t reportContext, ItemProperties properties, ParameterInfoCollection effectiveParameters, Guid reportId, ClientRequest session, String description, ReportSnapshot intermediateSnapshot, DataSourceInfoCollection thisReportDataSources, Boolean cachingRequested, Boolean isLinkedReport, Warning[]& warnings, ReportSnapshot& resultSnapshotData, DateTime& executionDateTime, RuntimeDataSourceInfoColle ction& alldataSources, UserProfileState& usedUserProfile)
at Microsoft.ReportingService s.Library. RSService. RenderAsLi veOrSnapsh ot(Catalog ItemContex t reportContext, ClientRequest session, Warning[]& warnings, ParameterInfoCollection& effectiveParameters)
at Microsoft.ReportingService s.Library. RSService. RenderFirs t(CatalogI temContext reportContext, ClientRequest session, Warning[]& warnings, ParameterInfoCollection& effectiveParameters, String[]& secondaryStreamNames)
at Microsoft.ReportingService s.Library. RenderFirs tCancelabl eStep.Exec ute()
at Microsoft.ReportingService s.Diagnost ics.Cancel ablePhaseB ase.Execut eWrapper()
--- End of inner exception stack trace ---
at Microsoft.ReportingService s.Diagnost ics.Cancel ablePhaseB ase.Execut eWrapper()
at Microsoft.ReportingService s.Library. RenderFirs tCancelabl eStep.Rend erFirst(RS Service rs, CatalogItemContext reportContext, ClientRequest session, JobType type, Warning[]& warnings, ParameterInfoCollection& effectiveParameters, String[]& secondaryStreamNames)
at Microsoft.ReportingService s.WebServe r.ReportSe rviceHttpH andler.Ren derReport( HttpRespon seStreamFa ctory streamFactory)
at Microsoft.ReportingService s.WebServe r.ReportSe rviceHttpH andler.DoS treamedOpe ration(Str eamedOpera tion operation)
at Microsoft.ReportingService s.WebServe r.ReportSe rviceHttpH andler.Ren derPageCon tent()
at Microsoft.ReportingService s.WebServe r.ReportSe rviceHttpH andler.Ren derPage()
w3wp!library!7!11/05/2008- 23:58:52:: i INFO: Call to RenderFirst( '/test/Report2' )
w3wp!library!7!11/05/2008- 23:58:52:: e ERROR: Throwing Microsoft.ReportingService s.Diagnost ics.Utilit ies.LogonF ailedExcep tion: Logon failed., ;
Info: Microsoft.ReportingService s.Diagnost ics.Utilit ies.LogonF ailedExcep tion: Logon failed. ---> System.Runtime.InteropServ ices.COMEx ception (0x8007052E): Logon failure: unknown user name or bad password. (Exception from HRESULT: 0x8007052E)
at System.Runtime.InteropServ ices.Marsh al.ThrowEx ceptionFor HRInternal (Int32 errorCode, IntPtr errorInfo)
at RSRemoteRpcClient.RemoteLo gon.GetRem oteImpToke n(String pRPCEndpointName, Int32 type, Guid dataSourceId, String pUserName, String pDomain, String pPassword)
at Microsoft.ReportingService s.Diagnost ics.Impers onationCon text.Login (Credentia lsType credType, Guid dataSourceId, String userName, String userPwd, String domain)
--- End of inner exception stack trace ---
w3wp!webserver!7!11/05/200 8-23:58:52 :: e ERROR: Reporting Services error Microsoft.ReportingService s.Diagnost ics.Utilit ies.RSExce ption: Logon failed. ---> Microsoft.ReportingService s.Diagnost ics.Utilit ies.LogonF ailedExcep tion: Logon failed. ---> System.Runtime.InteropServ ices.COMEx ception (0x8007052E): Logon failure: unknown user name or bad password. (Exception from HRESULT: 0x8007052E)
at System.Runtime.InteropServ ices.Marsh al.ThrowEx ceptionFor HRInternal (Int32 errorCode, IntPtr errorInfo)
at RSRemoteRpcClient.RemoteLo gon.GetRem oteImpToke n(String pRPCEndpointName, Int32 type, Guid dataSourceId, String pUserName, String pDomain, String pPassword)
at Microsoft.ReportingService s.Diagnost ics.Impers onationCon text.Login (Credentia lsType credType, Guid dataSourceId, String userName, String userPwd, String domain)
--- End of inner exception stack trace ---
Yes, user ASPNET exists and has permissions to both Virt Dirs. I went through that exercise with recreating both Virt Dirs and now I have all buttons checked in SSRS Configurator, including Web Identity. Still I am getting Login Failed error on local machine and have to lower Autherntication to from Windows Identity to Basic to be able to access the Reports folder from another computer on the network...
Please, more ideas...
Thanks
Below is fresh snapshot from SSRS log...
w3wp!library!7!11/05/2008-
w3wp!library!7!11/05/2008-
Info: Microsoft.ReportingService
at System.Runtime.InteropServ
at RSRemoteRpcClient.RemoteLo
at Microsoft.ReportingService
--- End of inner exception stack trace ---
w3wp!webserver!7!11/05/200
at System.Runtime.InteropServ
at RSRemoteRpcClient.RemoteLo
at Microsoft.ReportingService
--- End of inner exception stack trace ---
at Microsoft.ReportingService
at Microsoft.ReportingService
at Microsoft.ReportingService
at Microsoft.ReportingService
at Microsoft.ReportingService
at Microsoft.ReportingService
at Microsoft.ReportingService
at Microsoft.ReportingService
--- End of inner exception stack trace ---
at Microsoft.ReportingService
at Microsoft.ReportingService
at Microsoft.ReportingService
at Microsoft.ReportingService
at Microsoft.ReportingService
at Microsoft.ReportingService
w3wp!library!7!11/05/2008-
w3wp!library!7!11/05/2008-
Info: Microsoft.ReportingService
at System.Runtime.InteropServ
at RSRemoteRpcClient.RemoteLo
at Microsoft.ReportingService
--- End of inner exception stack trace ---
w3wp!webserver!7!11/05/200
at System.Runtime.InteropServ
at RSRemoteRpcClient.RemoteLo
at Microsoft.ReportingService
--- End of inner exception stack trace ---
First question...are you using ACTIVE DIRECTORY to administrate your userID's a nd Passwords...???
I would recommend creating GROUPS for logins,..then you can simply ADD the User's to their designated groups.
....? >>>>>????
I would recommend creating GROUPS for logins,..then you can simply ADD the User's to their designated groups.
....? >>>>>????
ASKER
to CRXIuser2005:
No, I am not using AD, should I? Is it a must? Can I create groups using Server Users Management tool?
If YES, could you please elaborate? You suggest to create group, say, ReportUsers and permit it to do what? who should be mebers of that group? ASPNET? Real people who run reports?
thank you
No, I am not using AD, should I? Is it a must? Can I create groups using Server Users Management tool?
If YES, could you please elaborate? You suggest to create group, say, ReportUsers and permit it to do what? who should be mebers of that group? ASPNET? Real people who run reports?
thank you
ASKER
Well, the asker (me) is still interested bu tif there are indeed no experts available then we have to close it...
I don't know what you mean by Server Users Management Tool.
But the Windows Active Directory works fine. I would recommend using AD.
I've been crazy busy..so ....I'll have to research a little and get back with you...from what I remember it took a while to understand HOW it works..but once you see the concept...its no problem...
M
But the Windows Active Directory works fine. I would recommend using AD.
I've been crazy busy..so ....I'll have to research a little and get back with you...from what I remember it took a while to understand HOW it works..but once you see the concept...its no problem...
M
ASKER
Server Users Management Tool is Server component where I create users and assign them to groups. If needed I can provide few screen shots...
looking forward to see your instructions how to do AD... Although I was under impression that it is not needed, to use AD. If ASPNET has enough permissions on the server and remote user has access to IIS to run ASP.NET applications (which SSRS is) - is that not enough?? Can it be that SSRS internal roles and permissions need some configuration?
thanks
Naum
looking forward to see your instructions how to do AD... Although I was under impression that it is not needed, to use AD. If ASPNET has enough permissions on the server and remote user has access to IIS to run ASP.NET applications (which SSRS is) - is that not enough?? Can it be that SSRS internal roles and permissions need some configuration?
thanks
Naum
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
It fixes several issues with SSRS, could be that your problems are due to this.
Hope this helps.