Thursday, March 22, 2012

Deployment Security Problem

Hi,
I am trying to deploy my reports to a new server running reporting
services w/ SQL Server 2000 on the local machine. The ReportServer web site
has anonymous access NOT checked and Windows Integration selected. I'm
logged onto my machine with my domain account and when I try to deploy my
reports in VS 2003 I get "The underlying connection was closed: Could not
establish trust relationship with remote server." I do NOT have "Require
SSL" turned on and I know it has something to do with the way my credentials
are being passed (or not passed). If I turn on the option to allow
anonymous access to the reportserver site then I get a message that my
IUSR_<machinename> has insufficient privleges to perform the actions, which
is fine I don't want anonymous access on anyway.
How do I resolve deploying reports to the report server with my domain
account? I used the same domain account to install SQL Server and Reporting
Services and I am a local administrator on the server.
Thanks, ChrisIn addition to what I've discovered...
I can take the same URL I'm using for the TargetServerURL property and
browse to the report server. I get a pop-up dialog box to input my
credentials and I'm authenticated fine. Based on Microsoft Knowledge Base
Article - 842517 it would seem that the login dialog box should appear, but
it doesn't and just the error "Could not
> establish trust relationship with remote server." appears. The local
administrators are "content managers" for reporting services and I am a
member of that group, though I don't think the deployment process is making
it that far.
Thanks, Chris
"Chris" <chrisf@.unr.edu> wrote in message
news:u03AZPxfEHA.3536@.TK2MSFTNGP12.phx.gbl...
> Hi,
> I am trying to deploy my reports to a new server running reporting
> services w/ SQL Server 2000 on the local machine. The ReportServer web
site
> has anonymous access NOT checked and Windows Integration selected. I'm
> logged onto my machine with my domain account and when I try to deploy my
> reports in VS 2003 I get "The underlying connection was closed: Could not
> establish trust relationship with remote server." I do NOT have "Require
> SSL" turned on and I know it has something to do with the way my
credentials
> are being passed (or not passed). If I turn on the option to allow
> anonymous access to the reportserver site then I get a message that my
> IUSR_<machinename> has insufficient privleges to perform the actions,
which
> is fine I don't want anonymous access on anyway.
> How do I resolve deploying reports to the report server with my domain
> account? I used the same domain account to install SQL Server and
Reporting
> Services and I am a local administrator on the server.
> Thanks, Chris
>|||Chris:
In IE's security settings for the zone, is User Authentication set to
automatic logon or prompt? You might want to check here (Tools ->
Options -> Security -> Custom Level (for the zone your report server
is in).
--
Scott
http://www.OdeToCode.com
On Tue, 10 Aug 2004 12:54:27 -0700, "Chris" <chrisf@.unr.edu> wrote:
>Hi,
> I am trying to deploy my reports to a new server running reporting
>services w/ SQL Server 2000 on the local machine. The ReportServer web site
>has anonymous access NOT checked and Windows Integration selected. I'm
>logged onto my machine with my domain account and when I try to deploy my
>reports in VS 2003 I get "The underlying connection was closed: Could not
>establish trust relationship with remote server." I do NOT have "Require
>SSL" turned on and I know it has something to do with the way my credentials
>are being passed (or not passed). If I turn on the option to allow
>anonymous access to the reportserver site then I get a message that my
>IUSR_<machinename> has insufficient privleges to perform the actions, which
>is fine I don't want anonymous access on anyway.
>How do I resolve deploying reports to the report server with my domain
>account? I used the same domain account to install SQL Server and Reporting
>Services and I am a local administrator on the server.
>Thanks, Chris
>|||Hey Scott,
The IE zone setting changes don't have any affect. Visual Studio
continues to report the trust relationship error. I've tried both secure
and non-secure TargetServerURL properties.
Chris
"Scott Allen" <bitmask@.[nospam].fred.net> wrote in message
news:jp1jh0dq2m82lm982j8rab8flnjjde59o2@.4ax.com...
> Chris:
> In IE's security settings for the zone, is User Authentication set to
> automatic logon or prompt? You might want to check here (Tools ->
> Options -> Security -> Custom Level (for the zone your report server
> is in).
> --
> Scott
> http://www.OdeToCode.com
> On Tue, 10 Aug 2004 12:54:27 -0700, "Chris" <chrisf@.unr.edu> wrote:
> >Hi,
> > I am trying to deploy my reports to a new server running reporting
> >services w/ SQL Server 2000 on the local machine. The ReportServer web
site
> >has anonymous access NOT checked and Windows Integration selected. I'm
> >logged onto my machine with my domain account and when I try to deploy my
> >reports in VS 2003 I get "The underlying connection was closed: Could not
> >establish trust relationship with remote server." I do NOT have "Require
> >SSL" turned on and I know it has something to do with the way my
credentials
> >are being passed (or not passed). If I turn on the option to allow
> >anonymous access to the reportserver site then I get a message that my
> >IUSR_<machinename> has insufficient privleges to perform the actions,
which
> >is fine I don't want anonymous access on anyway.
> >
> >How do I resolve deploying reports to the report server with my domain
> >account? I used the same domain account to install SQL Server and
Reporting
> >Services and I am a local administrator on the server.
> >
> >Thanks, Chris
> >
>|||Well, I changed the security on the web site to require secure connections
and installed the certificate from the server into my machine's certificate
store and the deploy worked. I don't quite fully understand why non-ssl
connections don't work, but turning ssl on and making sure the CA was
trusted fixed the problem. Could this have been a bug or is there some
requirement that a secure connection be used to deploy reporting service
objects?
Chris
"Scott Allen" <bitmask@.[nospam].fred.net> wrote in message
news:jp1jh0dq2m82lm982j8rab8flnjjde59o2@.4ax.com...
> Chris:
> In IE's security settings for the zone, is User Authentication set to
> automatic logon or prompt? You might want to check here (Tools ->
> Options -> Security -> Custom Level (for the zone your report server
> is in).
> --
> Scott
> http://www.OdeToCode.com
> On Tue, 10 Aug 2004 12:54:27 -0700, "Chris" <chrisf@.unr.edu> wrote:
> >Hi,
> > I am trying to deploy my reports to a new server running reporting
> >services w/ SQL Server 2000 on the local machine. The ReportServer web
site
> >has anonymous access NOT checked and Windows Integration selected. I'm
> >logged onto my machine with my domain account and when I try to deploy my
> >reports in VS 2003 I get "The underlying connection was closed: Could not
> >establish trust relationship with remote server." I do NOT have "Require
> >SSL" turned on and I know it has something to do with the way my
credentials
> >are being passed (or not passed). If I turn on the option to allow
> >anonymous access to the reportserver site then I get a message that my
> >IUSR_<machinename> has insufficient privleges to perform the actions,
which
> >is fine I don't want anonymous access on anyway.
> >
> >How do I resolve deploying reports to the report server with my domain
> >account? I used the same domain account to install SQL Server and
Reporting
> >Services and I am a local administrator on the server.
> >
> >Thanks, Chris
> >
>|||I am using integrated security without ssl. I did have a problem once where
I went through an install without unchecking ssl and I was messed up. Don't
remember how I got out of the hole. However, I have done a couple of
installs since then and made sure to un-check ssl and everything went
smoothly.
Bruce L-C
"Chris" <chrisf@.unr.edu> wrote in message
news:%23hQmER7fEHA.140@.TK2MSFTNGP12.phx.gbl...
> Well, I changed the security on the web site to require secure connections
> and installed the certificate from the server into my machine's
certificate
> store and the deploy worked. I don't quite fully understand why non-ssl
> connections don't work, but turning ssl on and making sure the CA was
> trusted fixed the problem. Could this have been a bug or is there some
> requirement that a secure connection be used to deploy reporting service
> objects?
> Chris
> "Scott Allen" <bitmask@.[nospam].fred.net> wrote in message
> news:jp1jh0dq2m82lm982j8rab8flnjjde59o2@.4ax.com...
> > Chris:
> >
> > In IE's security settings for the zone, is User Authentication set to
> > automatic logon or prompt? You might want to check here (Tools ->
> > Options -> Security -> Custom Level (for the zone your report server
> > is in).
> >
> > --
> > Scott
> > http://www.OdeToCode.com
> >
> > On Tue, 10 Aug 2004 12:54:27 -0700, "Chris" <chrisf@.unr.edu> wrote:
> >
> > >Hi,
> > > I am trying to deploy my reports to a new server running reporting
> > >services w/ SQL Server 2000 on the local machine. The ReportServer web
> site
> > >has anonymous access NOT checked and Windows Integration selected. I'm
> > >logged onto my machine with my domain account and when I try to deploy
my
> > >reports in VS 2003 I get "The underlying connection was closed: Could
not
> > >establish trust relationship with remote server." I do NOT have
"Require
> > >SSL" turned on and I know it has something to do with the way my
> credentials
> > >are being passed (or not passed). If I turn on the option to allow
> > >anonymous access to the reportserver site then I get a message that my
> > >IUSR_<machinename> has insufficient privleges to perform the actions,
> which
> > >is fine I don't want anonymous access on anyway.
> > >
> > >How do I resolve deploying reports to the report server with my domain
> > >account? I used the same domain account to install SQL Server and
> Reporting
> > >Services and I am a local administrator on the server.
> > >
> > >Thanks, Chris
> > >
> >
>

No comments:

Post a Comment