Authenticating URL images

Hello,
I have a server that provides images (image server). These images are
accessed by my report. In order to improve the security access to the
images, I need to set the authentication on the image server. Reporting
Services sp1 doesn't support it (as declared) then I'm looking for an
alternative.
I thought to have a client certificate (where the report server is hosted)
and request a digital certificate to the image server. Is there any other
alternative ?
Thanks,
Pierre
--
---
Pierre Greborio
Microsoft .NET MVP
http://www.ugidotnet.org
http://www.amazon.com/infopath
---Hi Pierre:
Is it an Intranet environment? What about disabling anonymous access
to the directory with the images on the image server and requiring
windows authentication?
Just a thought,
--
Scott
http://www.OdeToCode.com
On Mon, 2 Aug 2004 10:31:14 +0200, "Pierre Greborio"
<pierreANTI_SPAM@.pierregreborio.it> wrote:
>Hello,
>I have a server that provides images (image server). These images are
>accessed by my report. In order to improve the security access to the
>images, I need to set the authentication on the image server. Reporting
>Services sp1 doesn't support it (as declared) then I'm looking for an
>alternative.
>I thought to have a client certificate (where the report server is hosted)
>and request a digital certificate to the image server. Is there any other
>alternative ?
>Thanks,
>Pierre|||Hi Scott,
> Is it an Intranet environment? What about disabling anonymous access
> to the directory with the images on the image server and requiring
> windows authentication?
I get a security error. It seems that the windows authentication isn't
supported. Is there any workaround ?
Thanks,
Pierre
>> Hello,
>> I have a server that provides images (image server). These images are
>> accessed by my report. In order to improve the security access to the
>> images, I need to set the authentication on the image server.
>> Reporting Services sp1 doesn't support it (as declared) then I'm
>> looking for an alternative.
>> I thought to have a client certificate (where the report server is
>> hosted) and request a digital certificate to the image server. Is
>> there any other alternative ?
>> Thanks,
>> Pierre
--
---
Pierre Greborio
Microsoft .NET MVP
http://www.ugidotnet.org
http://www.amazon.com/infopath
---|||Hi Pierre:
Off hand I cannot think of another way to protect images on the image
server - I think it's strange you'd get a security error enabling
windows authenticaiton but perhaps I'm not understanding the
environment you are in.
Another option would be to keep the images as blobs in the database,
then it could be setup so that only people with access to the report
will have access to the images.
--s
On Mon, 2 Aug 2004 16:54:42 +0200, "Pierre Greborio"
<pierreANTI_SPAM@.pierregreborio.it> wrote:
>Hi Scott,
>> Is it an Intranet environment? What about disabling anonymous access
>> to the directory with the images on the image server and requiring
>> windows authentication?
>I get a security error. It seems that the windows authentication isn't
>supported. Is there any workaround ?
>Thanks,
>Pierre
>> Hello,
>> I have a server that provides images (image server). These images are
>> accessed by my report. In order to improve the security access to the
>> images, I need to set the authentication on the image server.
>> Reporting Services sp1 doesn't support it (as declared) then I'm
>> looking for an alternative.
>> I thought to have a client certificate (where the report server is
>> hosted) and request a digital certificate to the image server. Is
>> there any other alternative ?
>> Thanks,
>> Pierre
--
Scott
http://www.OdeToCode.com|||Pierre,
Not sure what you mean by "I need to set the authentication on the image
server". In SP 1, image access is done under the context of a special
account. From the SP1 Readme:
"When the report is previewed in Report Designer, preview uses the
credentials of the user to display the image. When the report is run on the
report server, the report server uses the unattended execution account to
retrieve the image. If the unattended execution account is not specified,
the image is retrieved using no credentials (anonymous user account). If
either of these accounts have insufficient rights to access the image, the
image will not be displayed in the report. For more information about
setting the unattended execution account on the report server, see
"Configuring an Account for Unattended Report Processing" in Reporting
Services Books Online."
If you need more secure acces than this, you can try using a function for
the image source which will do the security check.
--
Hope this helps.
---
Teo Lachev, MCSD, MCT
Author: "Microsoft Reporting Services in Action"
http://www.prologika.com
"Pierre Greborio" <pierreANTI_SPAM@.pierregreborio.it> wrote in message
news:uLiNRqGeEHA.3148@.TK2MSFTNGP10.phx.gbl...
> Hello,
> I have a server that provides images (image server). These images are
> accessed by my report. In order to improve the security access to the
> images, I need to set the authentication on the image server. Reporting
> Services sp1 doesn't support it (as declared) then I'm looking for an
> alternative.
> I thought to have a client certificate (where the report server is hosted)
> and request a digital certificate to the image server. Is there any other
> alternative ?
> Thanks,
> Pierre
> --
> ---
> Pierre Greborio
> Microsoft .NET MVP
> http://www.ugidotnet.org
> http://www.amazon.com/infopath
> ---
>