asked
how to manage Kerberos Authentication Issues in a Reporting Services 2008 r2 Environment
I have few ssrs 2008 reports.I have created group of users and gave all required permissions to that group. Now when I am running those reports I am getting strange error. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON' I don't know from where it came. I got suggestion that its a issue related to Kerberos authentication. Please some one knows how to solve this let me know. Or some one knows to solve this kerberos issue also tell me in steps if possible. Thanks Vik
The first thing I would check is the settings of your datasource in Reporting Services. What authentication method are you using? Windows Auth? If that is setup correctly, i.e. either using Windows Auth or using a fixed account to access the database, I would recommend that you check all the settings in the SSRS Configuration Tool.
I have checked all these settings already. I deployed same reports in dev environment, they are working fine. But when i deployed in Test environment I am getting this error.
What are the properties of your data source(s) for these reports? Have you tried to login via remote desktop and execute the reports? Also, what is you SSRS service account on both servers?
all data sources are custom with windows authentication. Service account is network service in both servers.
Are your SSRS report using linked servers by any chance? What execution context are you using for the reports? Is it set to use the credentials of the user calling the report (impersonation); are you specifying a particular user (credentials stored securely in the report server); not requiring credentials; or having the user provide credentials when running the report?
1.right now i didnt set up any execution account. When I tried to put an account it gave me error unattended account. 1. Custom source with windows integrated security 2. I tried with credential stored still it was giving me error. 3. so I tried credential supplies by user This is not good. It is working but every time user has to give his\her admin account then he\she can view reports. Do you have any solution for that. (My report is running fine within the server only problem is with remote server)
Have you read through
http://msdn.microsoft.com/en-us/library/ms156302.aspx regarding accounts and their usage? I would use integrated security or setup an execution account. Where do you get the unattended account error?
when you set up the execution account it gave me error .. unattended account has been created .. and when i ran the report the error came with unattended account.
Its a custom source.. I tried with shared source too. same problem came with that too. Its a double hop problem i think. Token is not getting by the user group. thats why it is taking as annonmous logon. I dont know how to solve this.
Have a look at the following, it may just point you in the right direction:
http://www.sqlservercentral.com/articles/Double+Hop/76743/ Also search "double hop" on
sqlservercentral.com...there are other articles, questions etc. that may help.
Yeah I am trying those. Nothing is working. Hope i will find some soltution. If you find something please let me know. Thanks a lot for your valuable time.
Can you tell me how to check that. in sql log i cab see only this error now Login failed for user 'NT AUTHORITY\NETWORK SERVICE'
