Re: HTTP Access to SSAS with anonymous even possible?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



This isn't an option in our environment because our security policy prohibits
it. I can't imagine this would be advisible or wise either. Plus, if this is
what is required to make anonymous access work, then it most definitely
should be part of the instructions and the IUSR_Machine account shouldn't
even be mentioned.

Again, the white paper seems misleading to me because it appears that
anonymous is not possible unless IIS and SSAS are on the same box.

"Jeje" wrote:

try to change the anonymous account in IIS
instead of using the IUSR_Machine account, use a valid user domain account.



"MattM" <MattM@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:EADA9907-1397-47E3-9B94-A6EB1B4B4987@xxxxxxxxxxxxxxxx
I'm trying to follow the information at this link
(http://www.microsoft.com/technet/prodtechnol/sql/2005/httpasws.mspx) but
I
think it's misleading me into thinking I can accomplish my goal. The
article
states you can have SSAS and IIS on separate servers. It also says you can
use anonymous access. But I think you can't have both.

The white paper says when using anonymous access the msmdpump.dll is
running
with the IUSR_MACHINENAME account, but with the SSAS on a separate server
it's not possible to add that account as valid because that account is
local
to the IIS server. So the IIS server is sending it's IUSR_MACHINENAME
account
but the SSAS server won't allow it.

My goal is convert some OWC reports on ASP pages from SQL 2000 to SSAS
2005.
The code worked fine with our SQL 2000 server but so far we can't get it
work
on SSAS 2005.

.



Relevant Pages

  • Re: HTTP Access to SSAS with anonymous even possible?
    ... tell SSAS is that it should serve up this data to an anonymous caller. ... made a domain account, had IIS run under that domain account, then added that ... server, but a compromised domain account leaves all the servers it's valid ...
    (microsoft.public.sqlserver.olap)
  • Re: HTTP Access to SSAS with anonymous even possible?
    ... tell SSAS is that it should serve up this data to an anonymous caller. ... made a domain account, had IIS run under that domain account, then added ... server, but a compromised domain account leaves all the servers it's ...
    (microsoft.public.sqlserver.olap)
  • Re: HTTP Access to SSAS with anonymous even possible?
    ... enable the anonymous access to SSAS ... the guest account must be enabled to allow anonymous access to SSAS... ... but with the SSAS on a separate> server ...
    (microsoft.public.sqlserver.olap)
  • Re: Troubleshoot Security Issues
    ... I forgot to mention that my IIS server hasn't been rebooted since ... so I guess the only thing left is delegation... ... > running under the Localsystem account. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Permission problems with IIS 6.0
    ... We have an application that involves client making calls to ISAPI dll ... application server. ... Our IIS server which connects to the above is on a Win2003 machine. ... IUSR_account) and integrated windows authentication. ...
    (microsoft.public.inetserver.iis)