Discussion:
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'
(too old to reply)
Marek G.
2010-03-25 19:41:28 UTC
Permalink
Hi all , sorry for my english . I have trouble with eport services in the
SQL 2008 and Win 2008 .An error occurred during client rendering. An error
has occurred during report processing. Cannot create a connection to data
source 'Portal'.Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
I have server with SQL 2008 report servicies , SQL 2008 Standart edition in
the cluster server . But if I open report from server , where is RS , this
work . If I try it from client the RS do not work . I have in the data
source checked Windows integrated security.Connection string is : Data
Source=frusldb4\instance4;Initial Catalog=Portal;Persist Security Info=True
.. I set delegation for kerberos on te SQL server , ReportServer ..... Why
this not work ?thanx for answer
Uri Dimant
2010-03-28 07:03:15 UTC
Permalink
Marek
Change SSRS to be run under a domain account with appropriate permissions
instead of 'NT AUTHORITY\ANONYMOUS LOGON'
Post by Marek G.
Hi all , sorry for my english . I have trouble with eport services in the
SQL 2008 and Win 2008 .An error occurred during client rendering. An error
has occurred during report processing. Cannot create a connection to data
source 'Portal'.Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
I have server with SQL 2008 report servicies , SQL 2008 Standart edition
in the cluster server . But if I open report from server , where is RS ,
this work . If I try it from client the RS do not work . I have in the
Data Source=frusldb4\instance4;Initial Catalog=Portal;Persist Security
Info=True .. I set delegation for kerberos on te SQL server , ReportServer
..... Why this not work ?thanx for answer
Kwai-Chang-Caine via SQLMonster.com
2010-03-28 14:26:17 UTC
Permalink
Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos failure
(misconfiguration).
Start with Delegconfig tool here:
http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
to pinpoint your SPN's and which haven't been set properly.
Post by Marek G.
Hi all , sorry for my english . I have trouble with eport services in the
SQL 2008 and Win 2008 .An error occurred during client rendering. An error
has occurred during report processing. Cannot create a connection to data
source 'Portal'.Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
I have server with SQL 2008 report servicies , SQL 2008 Standart edition in
the cluster server . But if I open report from server , where is RS , this
work . If I try it from client the RS do not work . I have in the data
source checked Windows integrated security.Connection string is : Data
Source=frusldb4\instance4;Initial Catalog=Portal;Persist Security Info=True
.. I set delegation for kerberos on te SQL server , ReportServer ..... Why
this not work ?thanx for answer
--
Message posted via http://www.sqlmonster.com
Kwai-Chang-Caine via SQLMonster.com
2010-03-28 14:38:28 UTC
Permalink
The link i sent you is good, but here's a newer version ->
http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
Post by Kwai-Chang-Caine via SQLMonster.com
Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos failure
(misconfiguration).
http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
to pinpoint your SPN's and which haven't been set properly.
Post by Marek G.
Hi all , sorry for my english . I have trouble with eport services in the
SQL 2008 and Win 2008 .An error occurred during client rendering. An error
[quoted text clipped - 7 lines]
Post by Marek G.
.. I set delegation for kerberos on te SQL server , ReportServer ..... Why
this not work ?thanx for answer
--
Message posted via SQLMonster.com
http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
Marek G.
2010-03-29 07:16:04 UTC
Permalink
I look to this server , the server not have instaled iis ...
Post by Kwai-Chang-Caine via SQLMonster.com
The link i sent you is good, but here's a newer version ->
http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
Post by Kwai-Chang-Caine via SQLMonster.com
Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos failure
(misconfiguration).
http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
to pinpoint your SPN's and which haven't been set properly.
Post by Marek G.
Hi all , sorry for my english . I have trouble with eport services in the
SQL 2008 and Win 2008 .An error occurred during client rendering. An error
[quoted text clipped - 7 lines]
Post by Marek G.
.. I set delegation for kerberos on te SQL server , ReportServer ..... Why
this not work ?thanx for answer
--
Message posted via SQLMonster.com
http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
Bruce L-C [MVP]
2010-03-29 14:14:37 UTC
Permalink
RS 2008 does not use IIS but it uses the same protocols and it integrates
with IIS if you have it. Everything said about Kerberos will be the same.
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
Post by Marek G.
I look to this server , the server not have instaled iis ...
Post by Kwai-Chang-Caine via SQLMonster.com
The link i sent you is good, but here's a newer version ->
http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
Post by Kwai-Chang-Caine via SQLMonster.com
Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos failure
(misconfiguration).
http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
to pinpoint your SPN's and which haven't been set properly.
Post by Marek G.
Hi all , sorry for my english . I have trouble with eport services in the
SQL 2008 and Win 2008 .An error occurred during client rendering. An error
[quoted text clipped - 7 lines]
Post by Marek G.
.. I set delegation for kerberos on te SQL server , ReportServer ..... Why
this not work ?thanx for answer
--
Message posted via SQLMonster.com
http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
Marek G.
2010-03-30 19:21:51 UTC
Permalink
Thank You , and where I set the IIS impersonate ?
Post by Bruce L-C [MVP]
RS 2008 does not use IIS but it uses the same protocols and it integrates
with IIS if you have it. Everything said about Kerberos will be the same.
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
Post by Marek G.
I look to this server , the server not have instaled iis ...
Post by Kwai-Chang-Caine via SQLMonster.com
The link i sent you is good, but here's a newer version ->
http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
Post by Kwai-Chang-Caine via SQLMonster.com
Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos failure
(misconfiguration).
http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
to pinpoint your SPN's and which haven't been set properly.
Post by Marek G.
Hi all , sorry for my english . I have trouble with eport services in the
SQL 2008 and Win 2008 .An error occurred during client rendering. An error
[quoted text clipped - 7 lines]
Post by Marek G.
.. I set delegation for kerberos on te SQL server , ReportServer ..... Why
this not work ?thanx for answer
--
Message posted via SQLMonster.com
http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
Bruce L-C [MVP]
2010-03-30 19:34:51 UTC
Permalink
The only time this is an issue (double hop) is when your web application is
on one server and RS is on another.

User->Application on Server 1 -> RS on Server 2

This is called double hop. It is a windows issue that the authentication of
the user does not make it to the second server. The solution is to implement
Kerberos.

I have not implement kerberos or had to deal with this. If you want to
understand the issue more then you read up on double hop authentication
problems.
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
Post by Marek G.
Thank You , and where I set the IIS impersonate ?
Post by Bruce L-C [MVP]
RS 2008 does not use IIS but it uses the same protocols and it integrates
with IIS if you have it. Everything said about Kerberos will be the same.
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
Post by Marek G.
I look to this server , the server not have instaled iis ...
Post by Kwai-Chang-Caine via SQLMonster.com
The link i sent you is good, but here's a newer version ->
http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
Post by Kwai-Chang-Caine via SQLMonster.com
Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos failure
(misconfiguration).
http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
to pinpoint your SPN's and which haven't been set properly.
Post by Marek G.
Hi all , sorry for my english . I have trouble with eport services in the
SQL 2008 and Win 2008 .An error occurred during client rendering. An error
[quoted text clipped - 7 lines]
Post by Marek G.
.. I set delegation for kerberos on te SQL server , ReportServer ..... Why
this not work ?thanx for answer
--
Message posted via SQLMonster.com
http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
Marek G.
2010-03-31 19:29:54 UTC
Permalink
I read double hop trouble ,but I set the spn . But I do not know , where i
set inpersonifikation in the iis .... I donot have instaled IIS ... Which
spn I must set manualy ???
Post by Bruce L-C [MVP]
The only time this is an issue (double hop) is when your web application
is on one server and RS is on another.
User->Application on Server 1 -> RS on Server 2
This is called double hop. It is a windows issue that the authentication
of the user does not make it to the second server. The solution is to
implement Kerberos.
I have not implement kerberos or had to deal with this. If you want to
understand the issue more then you read up on double hop authentication
problems.
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
Post by Marek G.
Thank You , and where I set the IIS impersonate ?
Post by Bruce L-C [MVP]
RS 2008 does not use IIS but it uses the same protocols and it
integrates with IIS if you have it. Everything said about Kerberos will
be the same.
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
Post by Marek G.
I look to this server , the server not have instaled iis ...
Post by Kwai-Chang-Caine via SQLMonster.com
The link i sent you is good, but here's a newer version ->
http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
Post by Kwai-Chang-Caine via SQLMonster.com
Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos failure
(misconfiguration).
http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
to pinpoint your SPN's and which haven't been set properly.
Post by Marek G.
Hi all , sorry for my english . I have trouble with eport services in the
SQL 2008 and Win 2008 .An error occurred during client rendering. An error
[quoted text clipped - 7 lines]
Post by Marek G.
.. I set delegation for kerberos on te SQL server , ReportServer ..... Why
this not work ?thanx for answer
--
Message posted via SQLMonster.com
http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
Bruce L-C [MVP]
2010-03-31 19:59:35 UTC
Permalink
Sorry, I know the theory but I have not had to do this.

However, is there someplace with the server that you would do this?
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
Post by Marek G.
I read double hop trouble ,but I set the spn . But I do not know , where i
set inpersonifikation in the iis .... I donot have instaled IIS ... Which
spn I must set manualy ???
Post by Bruce L-C [MVP]
The only time this is an issue (double hop) is when your web application
is on one server and RS is on another.
User->Application on Server 1 -> RS on Server 2
This is called double hop. It is a windows issue that the authentication
of the user does not make it to the second server. The solution is to
implement Kerberos.
I have not implement kerberos or had to deal with this. If you want to
understand the issue more then you read up on double hop authentication
problems.
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
Post by Marek G.
Thank You , and where I set the IIS impersonate ?
Post by Bruce L-C [MVP]
RS 2008 does not use IIS but it uses the same protocols and it
integrates with IIS if you have it. Everything said about Kerberos will
be the same.
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services
Post by Marek G.
I look to this server , the server not have instaled iis ...
Post by Kwai-Chang-Caine via SQLMonster.com
The link i sent you is good, but here's a newer version ->
http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
Post by Kwai-Chang-Caine via SQLMonster.com
Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos failure
(misconfiguration).
http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
to pinpoint your SPN's and which haven't been set properly.
Post by Marek G.
Hi all , sorry for my english . I have trouble with eport services in the
SQL 2008 and Win 2008 .An error occurred during client rendering. An error
[quoted text clipped - 7 lines]
Post by Marek G.
.. I set delegation for kerberos on te SQL server , ReportServer ..... Why
this not work ?thanx for answer
--
Message posted via SQLMonster.com
http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
Loading...