Answered by:
SSRS Authentication Issue

Question
-
Hi,
We have a client on SQL 2008 and MS CRM 4.0. (Seperate machines). The client does not run SSRS on IIS, rather
Reports were working from the local MS CRM server, however not from any other machine. For example if I were to run it from the SQL machine, it would fail. We are not using IIS to host SSRS, but rather the build in service.
We receive the following error: (interesting highlighted).
Event code: 4011
Event message: An unhandled access exception has occurred.
Event time: 9/13/2010 7:23:45 AM
Event time (UTC): 9/13/2010 12:23:45 PM
Event ID: 3c81e00612044d9f8b25c74ec78b444f
Event sequence: 2
Event occurrence: 1
Event detail code: 0
Application information:
Application domain: ReportServer_MSSQLSERVER_0-1-129288542168579650
Trust level: RosettaSrv
Application Virtual Path: /ReportServer
Application Path: C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\
Machine name: Machine123
Process information:
Process ID: 1312
Process name: ReportingServicesService.exe
Account name: NT AUTHORITY\NETWORK SERVICE
Request information:
Request URL: http://Machine123/ReportServer/ReportExecution2005.asmx
Request path: /ReportServer/ReportExecution2005.asmx
User host address: 192.168.1.1
User:
Is authenticated: False
Authentication Type:
Thread account name: NT AUTHORITY\NETWORK SERVICE
Custom event details:
Event code: 3008
Event message: A configuration error has occurred.
Event time: 9/13/2010 7:39:31 AM
Event time (UTC): 9/13/2010 12:39:31 PM
Event ID: 4ea60fc0c691468dae65713f4f8e5634
Event sequence: 11
Event occurrence: 2
Event detail code: 0
Application information:
Application domain: ReportServer_MSSQLSERVER_0-1-129288548288980680
Trust level: RosettaSrv
Application Virtual Path: /ReportServer
Application Path: C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\
Machine name: Machine123
Process information:
Process ID: 3184
Process name: ReportingServicesService.exe
Account name: NT AUTHORITY\NETWORK SERVICE
Exception information:
Exception type: ConfigurationErrorsException
Exception message: Could not load file or assembly 'System.Web.Services, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a' or one of its dependencies. Access is denied. (C:\Windows\Microsoft.NET\Framework64\v2.0.50727\Config\web.config line 140)
Request information:
Request URL: http://Machine123/ReportServer/ReportService2005.asmx
Request path: /ReportServer/ReportService2005.asmx
User host address: 192.168.1.1
User: Domain1\Machine123$
Is authenticated: True
Authentication Type: NEGOTIATE
Thread account name: NT AUTHORITY\NETWORK SERVICE
Thread information:
Thread ID: 4
Thread account name: NT AUTHORITY\NETWORK SERVICE
Is impersonating: True
Stack trace: at System.Web.Configuration.ConfigUtil.GetType(String typeName, String propertyName, ConfigurationElement configElement, XmlNode node, Boolean checkAptcaBit, Boolean ignoreCase)
at System.Web.Configuration.HttpHandlerAction.Create()
at System.Web.Configuration.HandlerFactoryCache..ctor(HttpHandlerAction mapping)
at System.Web.HttpApplication.GetFactory(HttpHandlerAction mapping)
at System.Web.HttpApplication.MapHttpHandler(HttpContext context, String requestType, VirtualPath path, String pathTranslated, Boolean useAppConfig)
at System.Web.HttpApplication.MapHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)Help appreciated,
Karlo
Karlo Swart Ver206
BlogWednesday, September 15, 2010 4:20 PM
Answers
-
Hi,
Have you installed the SSRS connector? It looks like you are facing a typical kerberos double hop issue. Here are the steps to install SSRS connector to get the reports working from all machines: http://msdn.microsoft.com/en-us/library/dd979290.aspx.
If you don't want to install SSRS connector, set up the trust for delegation properly as described in this post: http://social.microsoft.com/Forums/en-US/crmdevelopment/thread/87d1a6de-06e7-4460-9c8a-7f63d213bd75
I hope that helps,
Kuba
-- Kuba Skałbania, Netwise- Proposed as answer by Jakub (kuba) SkalbaniaMVP Wednesday, September 15, 2010 11:50 PM
- Marked as answer by Jim Glass Jr Thursday, September 16, 2010 2:56 PM
Wednesday, September 15, 2010 8:40 PM
All replies
-
Hi,
Have you installed the SSRS connector? It looks like you are facing a typical kerberos double hop issue. Here are the steps to install SSRS connector to get the reports working from all machines: http://msdn.microsoft.com/en-us/library/dd979290.aspx.
If you don't want to install SSRS connector, set up the trust for delegation properly as described in this post: http://social.microsoft.com/Forums/en-US/crmdevelopment/thread/87d1a6de-06e7-4460-9c8a-7f63d213bd75
I hope that helps,
Kuba
-- Kuba Skałbania, Netwise- Proposed as answer by Jakub (kuba) SkalbaniaMVP Wednesday, September 15, 2010 11:50 PM
- Marked as answer by Jim Glass Jr Thursday, September 16, 2010 2:56 PM
Wednesday, September 15, 2010 8:40 PM -