views:

323

answers:

3

I have couple of reports that i developed and are sitting on http//localhost/reports. I have everything else setup including sql server 2005 config tools. The reports run fine when i run them on my own machine, where IIS and sql server 2005 are both loaded. But they dont work when i try from other computers. I have the dir security to windows integrated security checked. The error i get is -

An error has occurred during report processing. Cannot create a connection to data source 'time_clock'. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

how do i make them available for remote users?

A: 

In addition to turning Windows Authentication on, you need to turn Anonymous authentication off.

John Saunders
it is off.. i still get this problem
It's off in IIS? At the Application level?
John Saunders
A: 

Is the reportserver and SQL server on the same box? If SSRS is on a different box and MSSQL is on your box, then you have to configure Kerberos for double hop authentication.

Check this link for help on configuring double hop authentcation.

Raj

Raj
+1  A: 

SSRS machine authenticates the remote user, it impersonates him and it then tries to authenticate to the SQL machine. The SQL machine needs a proof that SSRS is who it claims it is (the remote user), but SSRS does not have the said proof (namely the password of the remote user), therefore authentication falls back to the anonymous logon.

To enable this scenario you need to enable and configure constrained delegation on the account running the SSRS. If constrained delegation is enabled and properly configured then the domain controller will vouch for the SSRS machine impersonated identity of the remote user and the SQL machine will authenticate it successfully.

Remus Rusanu
+1: Nice answer Remus. It's funny, Authentication and Permissions with Reporting Services seem to cause quite a few people issues. I suspect that SSRS 2008 will alleviate this somewhat by no longer being dependent on IIS.
John Sansom
ur answer looks like for win 2003, but i am running all this on my machine which has win xp professional SP3. How do i do it there?
@sinisana: same way, the important think is to download and use setspn.exe from MS site.
Remus Rusanu