asked
SSRS Anonymous Logon issue
SQL Server 2016 reporting service running under a domain account. Have a DataSource which works when I provide credentials but when I select 'As the user viewing the report' and test connection, it results in below error message: *The report server couldn't connect to the data source using the information you entered. Make sure you've entered the connection string and any credentials correctly. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.* I am trying to connect to SQL Server 2012 database and the reporting server domain account is sysadmin on the instance. My account is part of an AD group which is a sysdamin on all SQL instances. On SQL 2012 instance, I can see the below error message in the errorlog: *Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Reason: Could not find a login matching the name provided. Error: 18456, Severity: 14, State: 5.* I first thought this would be a SPN issue and checked that all SPN's are registered but the issue persists. Anything that I can check more?
Was able to fix this little while after posting it. What I did was : I had to make the below 2 changes along with setting up SPN's and changing the report server to run under a domain account: 1. Changed value for 'identity impersonate' to 'False' from 'True' in web.config file 2. Add 'RSWindowsNegotiate' to rsreportserver.config file
There're 3 places need to be configured property
- SPN & Service Account Delegation (on DC)
- Authentication Type in SSRS Configuration File rsreportserver.config (on SSRS Server)
- App/Script such as Browsers, Web Apps, Python, PowerShell, etc. Integrated Authentication Settings, Additional Modules, Add-ons, etc.
This video may explain the 3 things above better.
SSRS SQL Reporting Double Hop (aka Negotiate / SPNego / Kerberos/ SSO) ANONYMOUS LOGON Issues
18 People are following this question.
