Re: ReportViewer Control Permission

Hi AG,

I've done some test locally and cannot reproduce the issue on my side. I
tried both a domain user account and a local user account (on the report
server). To make sure we're using the similar configuration and code,
here's my relevant code and configuration:

1) ServerA: installed SQL Server 2005 with Reporting Service; all are
configured correctly to make sure visiting http://ServerA/ReportServer/
success
2) WorkstationB: developing system, Vista.
3) ServerA and WorkstationB are in the same domain.
4) Setup a local user account on ServerA and give this account "Browse"
permission on the server.
5) Used following code to pass the user account:

public class MyCredentials : IReportServerCredentials
{
private string m_user, m_pwd, m_domain;
public MyCredentials(string user, string pwd, string domain)
{
m_user = user;
m_pwd = pwd;
m_domain = domain;
}

#region IReportServerCredentials Members

public bool GetFormsCredentials(out System.Net.Cookie authCookie,
out string userName, out string password, out string authority)
{
authCookie = null;
userName = password = authority = null;
return false;
}

public System.Security.Principal.WindowsIdentity ImpersonationUser
{
get { return null; }
}

public System.Net.ICredentials NetworkCredentials
{
get
{
return new NetworkCredential(m_user, m_pwd, m_domain);
}
}

#endregion
}


6) Published the website to ServerA and verified it works correctly.
7) Repeat step 4) but with a domain user account.

-----------

Now would you please help me check following points so that we could
further troubleshoot this issue on your side:

* Check the event log, "Security" part, see the relevant "Failure Audit"
and post some of the records here.
* On the server or your workstation, right-click on IE shortcut and select
"Run As", and use the account that you're passing to the report server to
run IE, then visit http://yourserver/ReportServer to see if it works
* Check kb http://support.microsoft.com/kb/907273, especially this kb:
http://support.microsoft.com/kb/896861 to see if the registry fix (to
disable loopback check) helps or not. In my case, I don't need to do this
fix but yours scenario may vary.
* Check your IIS log on the server to see if there's any interesting logs
when the 401 error occurs.

By the way, I'm using the same web site on IIS server as the my asp.net web
application and the report server's web service, but running in two
different Application Pool, both application pools are using NETWORK
SERVICE account.



Regards,
Walter Wang (wawang@xxxxxxxxxxxxxxxxxxxx, remove 'online.')
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • Re: controlling user time
    ... A possible expensive solution is to set up a server for a home LAN, ... Create a Domain user account for each ...
    (microsoft.public.windowsxp.general)
  • Re: Administrator Privlidges for all
    ... all data is stored on the server. ... then to grant the user rights to their own ... and groups utility and add the individual domain user account to the LOCAL ...
    (microsoft.public.windowsxp.security_admin)
  • Impersonation and switching back to ASPNET user priviledges
    ... process on the server side. ... using the impersonation mechanism using a predefined fixed user ... "revert" to ASPNET or NETWORK SERVICES user account priviledges. ... public static bool impersonateValidUser(String userName, ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: Drive mapping problem
    ... If you create a domain user account with the same settings like the other, i would say it is not the user account itself having problems. ... Is the user working on a terminal server or on a local workstation that is domain member? ... script or map the printer who are host on the same server. ...
    (microsoft.public.windows.server.general)
  • RE: Migrating users to another server
    ... We must know the SID is exclusive. ... If you are using Domain user account, ... >>I want to setup an exact mirror of a windows 2003/IIS 6 web server. ...
    (microsoft.public.windows.server.migration)