Authorization ticket not received by LogonUser

Hi, I integrated with
ReportingServices using Forms Authentication followed the instruction of the
article from microsoft, it works fine on my laptop (Windows 2003 server and
sql2000), but when I try to duplicate it on our company server (windows 2000
and sql2000), I always got the error: Authorization ticket not received by
LogonUser, when I try to login as the ReportAdmin user.
Could someone help?
Thank you at advance.
YanDid you ever find a solution this problem?
I'm having the same issue. It works on my LapTop but when I duplicate
exactly what I have on the Server, it doesn't work.
Thanks.
"Authorization ticket" wrote:
> Hi, I integrated with
> ReportingServices using Forms Authentication followed the instruction of the
> article from microsoft, it works fine on my laptop (Windows 2003 server and
> sql2000), but when I try to duplicate it on our company server (windows 2000
> and sql2000), I always got the error: Authorization ticket not received by
> LogonUser, when I try to login as the ReportAdmin user.
>
> Could someone help?
> Thank you at advance.
> Yan|||Make sure the <UrlRoot> element value in the RSReportServer.config file is
the same URL value you are using to call the ReportService.asmx.
This error will happen if you have <UrlRoot> =http://MACHINENAME/ReportServer and you are calling the web service like
http://localhost/ReportServer/ReportService.asmx
Not sure if that's the issue but it's something to check. For the auth
cookie to work, the cookie domains have to be the same.
--
Adrian M.
MCP
"Jon-Slem" <JonSlem@.discussions.microsoft.com> wrote in message
news:C1AC412B-0DCA-4F69-A590-650CDB81B344@.microsoft.com...
> Did you ever find a solution this problem?
> I'm having the same issue. It works on my LapTop but when I duplicate
> exactly what I have on the Server, it doesn't work.
> Thanks.
> "Authorization ticket" wrote:
>> Hi, I integrated with
>> ReportingServices using Forms Authentication followed the instruction of
>> the
>> article from microsoft, it works fine on my laptop (Windows 2003 server
>> and
>> sql2000), but when I try to duplicate it on our company server (windows
>> 2000
>> and sql2000), I always got the error: Authorization ticket not received
>> by
>> LogonUser, when I try to login as the ReportAdmin user.
>>
>> Could someone help?
>> Thank you at advance.
>> Yan|||I don't get it.
I fixed this and I'm still getting the error. I didn't even have do this on
my laptop.
Did your work right after you made the change? I made the change in the
ReportingService.cs file, I changed it to the machine name. The config file
was already the machine, no change was need there.
If you have any idea, please give my a buzz.
Thank.
"Adrian M." wrote:
> Make sure the <UrlRoot> element value in the RSReportServer.config file is
> the same URL value you are using to call the ReportService.asmx.
> This error will happen if you have <UrlRoot> => http://MACHINENAME/ReportServer and you are calling the web service like
> http://localhost/ReportServer/ReportService.asmx
> Not sure if that's the issue but it's something to check. For the auth
> cookie to work, the cookie domains have to be the same.
> --
> Adrian M.
> MCP
> "Jon-Slem" <JonSlem@.discussions.microsoft.com> wrote in message
> news:C1AC412B-0DCA-4F69-A590-650CDB81B344@.microsoft.com...
> > Did you ever find a solution this problem?
> > I'm having the same issue. It works on my LapTop but when I duplicate
> > exactly what I have on the Server, it doesn't work.
> > Thanks.
> >
> > "Authorization ticket" wrote:
> >
> >> Hi, I integrated with
> >> ReportingServices using Forms Authentication followed the instruction of
> >> the
> >> article from microsoft, it works fine on my laptop (Windows 2003 server
> >> and
> >> sql2000), but when I try to duplicate it on our company server (windows
> >> 2000
> >> and sql2000), I always got the error: Authorization ticket not received
> >> by
> >> LogonUser, when I try to login as the ReportAdmin user.
> >>
> >>
> >> Could someone help?
> >>
> >> Thank you at advance.
> >>
> >> Yan
>
>

Authentication errors after backing out changes for forms authentication

We attempted to run the custom authentication sample from the RS
samples. We had issues and attempted to "back out" our changes - being
stupid, we didn't back up our config files. "How hard could it be?"
Well, 8 hours later, we're out of answers as to why we can't run RS
anymore. Yes, learn from our mistake.
We're hoping someone can help us with the following.
When going to http://localhost/Reports, I get the following:
System.Web.Services.Protocols.SoapException: Server was unable to
process request. --> System.NullReferenceException: Object reference
not set to an instance of an object. at
Microsoft.ReportingServices.Diagnostics.ExtensionClassFactory.GetExtensionConfigurationInfo(String
extensionType, String extensionName) at
Microsoft.ReportingServices.Diagnostics.AuthenticationExtensionFactory.get_AuthenticationExtension()
at Microsoft.ReportingServices.WebServer.ReportingService2005..ctor()
-- End of inner exception stack trace --
When going to http://localhost/ReportServer, I get a 404.
The log file ReportServerWebApp__01_17_2006_15_33_40 contains the
following stack dump:
'
aspnet_wp!ui!1!1/17/2006-15:34:06:: e ERROR:
System.Web.Services.Protocols.SoapException: Server was unable to
process request. --> System.NullReferenceException: Object reference
not set to an instance of an object.
at
Microsoft.ReportingServices.Diagnostics.ExtensionClassFactory.GetExtensionConfigurationInfo(String
extensionType, String extensionName)
at
Microsoft.ReportingServices.Diagnostics.AuthenticationExtensionFactory.get_AuthenticationExtension()
at
Microsoft.ReportingServices.WebServer.ReportingService2005..ctor()
-- End of inner exception stack trace --
aspnet_wp!ui!1!1/17/2006-15:34:06:: e ERROR: HTTP status code --> 500
--Details--
System.Web.Services.Protocols.SoapException:
System.Web.Services.Protocols.SoapException: Server was unable to
process request. --> System.NullReferenceException: Object reference
not set to an instance of an object.
at
Microsoft.ReportingServices.Diagnostics.ExtensionClassFactory.GetExtensionConfigurationInfo(String
extensionType, String extensionName)
at
Microsoft.ReportingServices.Diagnostics.AuthenticationExtensionFactory.get_AuthenticationExtension()
at
Microsoft.ReportingServices.WebServer.ReportingService2005..ctor()
-- End of inner exception stack trace --
at
Microsoft.SqlServer.ReportingServices2005.RSConnection.GetSecureMethods()
at
Microsoft.ReportingServices.UI.Global.RSWebServiceWrapper.GetSecureMethods()
at
Microsoft.SqlServer.ReportingServices2005.RSConnection.IsSecureMethod(String
methodname)
at
Microsoft.SqlServer.ReportingServices2005.RSConnection.ValidateConnection()
at
Microsoft.ReportingServices.UI.ReportingPage.EnsureHttpsLevel(HttpsLevel
level)
at
Microsoft.ReportingServices.UI.ReportingPage.ReportingPage_Init(Object
sender, EventArgs args)
at System.EventHandler.Invoke(Object sender, EventArgs e)
at System.Web.UI.Control.OnInit(EventArgs e)
at System.Web.UI.Page.OnInit(EventArgs e)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Page.ProcessRequestMain(Boolean
includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
aspnet_wp!ui!1!1/17/2006-15:34:06:: e ERROR: Exception in
ShowErrorPage: System.Threading.ThreadAbortException: Thread was being
aborted.
at System.Threading.Thread.AbortInternal()
at System.Threading.Thread.Abort(Object stateInfo)
at System.Web.HttpResponse.End()
at System.Web.HttpServerUtility.Transfer(String path, Boolean
preserveForm)
at Microsoft.ReportingServices.UI.ReportingPage.ShowErrorPage(String
errMsg) at at System.Threading.Thread.AbortInternal()
at System.Threading.Thread.Abort(Object stateInfo)
at System.Web.HttpResponse.End()
at System.Web.HttpServerUtility.Transfer(String path, Boolean
preserveForm)
at Microsoft.ReportingServices.UI.ReportingPage.ShowErrorPage(String
errMsg)
I confirmed that the rsreportserver.config section that deals with
security/authentication looks as follows - this matches another server
whose RS is working:
<Security>
<Extension Name="Windows"
Type="Microsoft.ReportingServices.Authorization.WindowsAuthorization,Microsoft.ReportingServices.Authorization"/>
</Security>
<Authentication>
<Extension Name="Windows"
Type="Microsoft.ReportingServices.Authentication.WindowsAuthentication,Microsoft.ReportingServices.Authorization"/>
</Authentication>
And the web.configs in both ReportManager and ReportServer folders
reference the correct authentication extension:
Report Manager web.config:
<authentication mode="Windows" />
<identity impersonate="true" />
Report Server web.config:
<authentication mode="Windows" />
<identity impersonate="true" />
At this point, I'm considering spinning up a second instance of RS to
see if there's something more basic broken, but I thought I would ask
for any help/pointers on this.
Thank you!
MichaelSJust a followup, in case a search finds this topic. We never did solve
the problem. We ended up completely removing SQL/RS and reinstalling.
Our suspicion is that something was inadvertently deleted. Since this
was a dev box, it's assumed that a trashing every so often is
acceptable.
MS|||In our case, the pieces that disappeared were three files from
C:\Program Files\Microsoft SQL Server\MSSQL.4\Reporting
Services\ReportServer. Specifically:
global.asax, ModelGenerationRules.smgl, and ReportExecution2005.asmx.
Replacing those files (from a working installation) solved the problem.

Authentication errors after backing out changes for forms authentication

We attempted to run the custom authentication sample from the RS samples. We had issues and attempted to "back out" our changes - being stupid, we didn't back up our config files. "How hard could it be?" Well, 8 hours later, we're out of answers as to why we can't run RS anymore. Yes, learn from our mistake.

We're hoping someone can help us with the following.

When going to http://localhost/Reports, I get the following:

System.Web.Services.Protocols.SoapException: Server was unable to process request. > System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.ReportingServices.Diagnostics.ExtensionClassFactory.GetExtensionConfigurationInfo(String extensionType, String extensionName) at Microsoft.ReportingServices.Diagnostics.AuthenticationExtensionFactory.get_AuthenticationExtension() at Microsoft.ReportingServices.WebServer.ReportingService2005..ctor() End of inner exception stack trace

When going to http://localhost/ReportServer, I get a 404.

The log file ReportServerWebApp__01_17_2006_15_33_40 contains the following stack dump:
'
aspnet_wp!ui!1!1/17/2006-15:34:06:: e ERROR: System.Web.Services.Protocols.SoapException: Server was unable to process request. > System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.ReportingServices.Diagnostics.ExtensionClassFactory.GetExtensionConfigurationInfo(String extensionType, String extensionName)
at Microsoft.ReportingServices.Diagnostics.AuthenticationExtensionFactory.get_AuthenticationExtension()
at Microsoft.ReportingServices.WebServer.ReportingService2005..ctor()
End of inner exception stack trace
aspnet_wp!ui!1!1/17/2006-15:34:06:: e ERROR: HTTP status code --> 500
-Details--
System.Web.Services.Protocols.SoapException: System.Web.Services.Protocols.SoapException: Server was unable to process request. > System.NullReferenceException: Object reference not set to an instance of an object.
at Microsoft.ReportingServices.Diagnostics.ExtensionClassFactory.GetExtensionConfigurationInfo(String extensionType, String extensionName)
at Microsoft.ReportingServices.Diagnostics.AuthenticationExtensionFactory.get_AuthenticationExtension()
at Microsoft.ReportingServices.WebServer.ReportingService2005..ctor()
End of inner exception stack trace

at Microsoft.SqlServer.ReportingServices2005.RSConnection.GetSecureMethods()

at Microsoft.ReportingServices.UI.Global.RSWebServiceWrapper.GetSecureMethods()

at Microsoft.SqlServer.ReportingServices2005.RSConnection.IsSecureMethod(String methodname)

at Microsoft.SqlServer.ReportingServices2005.RSConnection.ValidateConnection()

at Microsoft.ReportingServices.UI.ReportingPage.EnsureHttpsLevel(HttpsLevel level)

at Microsoft.ReportingServices.UI.ReportingPage.ReportingPage_Init(Object sender, EventArgs args)

at System.EventHandler.Invoke(Object sender, EventArgs e)

at System.Web.UI.Control.OnInit(EventArgs e)

at System.Web.UI.Page.OnInit(EventArgs e)

at System.Web.UI.Control.InitRecursive(Control namingContainer)

at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
aspnet_wp!ui!1!1/17/2006-15:34:06:: e ERROR: Exception in ShowErrorPage: System.Threading.ThreadAbortException: Thread was being aborted.
at System.Threading.Thread.AbortInternal()
at System.Threading.Thread.Abort(Object stateInfo)
at System.Web.HttpResponse.End()
at System.Web.HttpServerUtility.Transfer(String path, Boolean preserveForm)
at Microsoft.ReportingServices.UI.ReportingPage.ShowErrorPage(String errMsg) at at System.Threading.Thread.AbortInternal()
at System.Threading.Thread.Abort(Object stateInfo)
at System.Web.HttpResponse.End()
at System.Web.HttpServerUtility.Transfer(String path, Boolean preserveForm)
at Microsoft.ReportingServices.UI.ReportingPage.ShowErrorPage(String errMsg)

I confirmed that the rsreportserver.config section that deals with security/authentication looks as follows - this matches another server whose RS is working:

<Security>
<Extension Name="Windows" Type="Microsoft.ReportingServices.Authorization.WindowsAuthorization,Microsoft.ReportingServices.Authorization"/>
</Security>
<Authentication>
<Extension Name="Windows" Type="Microsoft.ReportingServices.Authentication.WindowsAuthentication,Microsoft.ReportingServices.Authorization"/>
</Authentication>

And the web.configs in both ReportManager and ReportServer folders reference the correct authentication extension:

Report Manager web.config:
<authentication mode="Windows" />
<identity impersonate="true" />

Report Server web.config:
<authentication mode="Windows" />
<identity impersonate="true" />

At this point, I'm considering spinning up a second instance of RS to see if there's something more basic broken, but I thought I would ask for any help/pointers on this.

Thank you!

Michael Shorten

Just as a followup, in case someone else searches for this problem and finds my post - we never solved it. We recovered the config files to what they were supposed to be, but things never still worked. We now believe that we somehow deleted a file(s) - given the error message, that seems plausible. We ended up having to completely removed SQL Server and RS from our system, physically deleting the MSSQL and MSSQLRS directories and reinstalling. This time, we backed everything up before working on it and of course, it worked.

Michael S

sql

Authenticating to Native SQL 2005 Web Services

Hi,
In a SOA architecture, is it possible for an Internet (NOT intranet) user
of a Windows Forms app to authenticate with the Native Web Services of SQL
Server 2005 using Windows Integrated Authentication? The users would NOT be
in the same domain or in a trusted domain. If so, could you point me to som
e
configuration instructions please.
Thanks.
--
JohnHello John,
Based on my scope, Integrated Windows Authentication works only in
scenarios where the client computer can contact a domain controller to
validate their credentials or keep a circuit open for point to point
connection to server. In most firewall configurations, this scenario is not
possible and not desirable. Though it is not IIS, the requirement are
similar:
IIS Authentication and Security for Internet Developers
http://msdn.microsoft.com/library/d...-us/dnauth/html
/dnauth_security.asp
264921.KB.EN-US INFO: How IIS Authenticates Browser Clients
http://support.microsoft.com/defaul...KB;EN-US;264921
Internet Information Services 5.0 Authentication Methods
http://www.windowsitpro.com/article...?articleid=8443
IIS 101: The Basics of IIS Authentication
http://www.iisadministrator.com/Art...ArticleID=15843
As for authentication of Web service in SQL 2005, it requests client to
send credential to server directly. Otherwise it fails.
Regards,
Peter Yang
MCSE2000/2003, MCSA, MCDBA
Microsoft Online Partner Support
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
=============
This posting is provided "AS IS" with no warranties, and confers no rights.
| Thread-Topic: Authenticating to Native SQL 2005 Web Services
| thread-index: AcXeqMzup44GBeNiRta2Kazq0yKi6Q==
| X-WBNR-Posting-Host: 71.192.119.68
| From: "examnotes" <Jthayer@.online.nospam>
| Subject: Authenticating to Native SQL 2005 Web Services
| Date: Mon, 31 Oct 2005 21:55:02 -0800
| Lines: 9
| Message-ID: <E83A79C0-D7BB-4C3A-9435-166B06A081FA@.microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.sqlserver.security
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.security:6416
| X-Tomcat-NG: microsoft.public.sqlserver.security
|
| Hi,
| In a SOA architecture, is it possible for an Internet (NOT intranet)
user
| of a Windows Forms app to authenticate with the Native Web Services of
SQL
| Server 2005 using Windows Integrated Authentication? The users would NOT
be
| in the same domain or in a trusted domain. If so, could you point me to
some
| configuration instructions please.
| Thanks.
| --
| John
|

AttachDbFilename, |DataDirectory| and SQL Server 2005 June CTP Relative Paths

Hello,

I am using "AttachDbFilename" to connect to a June CTP SQLExpress database. I have a windows forms application that has the following connection string (which works fine at the moment):

"Data Source=.\SQLEXPRESS;AttachDbFilename='|DataDirectory|test.mdf';Integrated Security=True;User Instance=True"

However, I would like to make my connection string:

"Data Source=.\SQLEXPRESS;AttachDbFilename='|DataDirectory|..\..\Database\test.mdf';Integrated Security=True;User Instance=True"

But no matter what combination I try (including not using DataDirectory at all), I cannot seem to open the database using the relative path.

Can someone please assist/clarify?

Thanks,
Sean H.

Hi,

DataDirectory is specifically restricted to only allow access to files in the directory pointed to by the DataDirectory value or any of its subdirectories, but not directories up in the chain.

This is to prevent security issues such as those common in older web servers where you could navigate the server file-system by doing something like http://www.mywebsite.com/..\..\..\etc\passwords

-pablo|||When you say "the directory pointed to by the DataDirectory value " what exactly is that? In other words, what is this value and where can I set/change it?

Thanks - Daniel|||

you can change:

AppDomain.CurrentDomain.setData(“DataDirectory”,”C:\newPath\”);

AttachDbFilename, |DataDirectory| and SQL Server 2005 June CTP Relative Paths

Hello,

I am using "AttachDbFilename" to connect to a June CTP SQLExpress database. I have a windows forms application that has the following connection string (which works fine at the moment):

"Data Source=.\SQLEXPRESS;AttachDbFilename='|DataDirectory|test.mdf';Integrated Security=True;User Instance=True"

However, I would like to make my connection string:

"Data Source=.\SQLEXPRESS;AttachDbFilename='|DataDirectory|..\..\Database\test.mdf';Integrated Security=True;User Instance=True"

But no matter what combination I try (including not using DataDirectory at all), I cannot seem to open the database using the relative path.

Can someone please assist/clarify?

Thanks,
Sean H.

Hi,

DataDirectory is specifically restricted to only allow access to files in the directory pointed to by the DataDirectory value or any of its subdirectories, but not directories up in the chain.

This is to prevent security issues such as those common in older web servers where you could navigate the server file-system by doing something like http://www.mywebsite.com/..\..\..\etc\passwords

-pablo|||When you say "the directory pointed to by the DataDirectory value " what exactly is that? In other words, what is this value and where can I set/change it?

Thanks - Daniel|||

you can change:

AppDomain.CurrentDomain.setData(“DataDirectory”,”C:\newPath\”);

AttachDbFilename, |DataDirectory| and SQL Server 2005 June CTP Relative Paths

Hello,

I am using "AttachDbFilename" to connect to a June CTP SQLExpress database. I have a windows forms application that has the following connection string (which works fine at the moment):

"Data Source=.\SQLEXPRESS;AttachDbFilename='|DataDirectory|test.mdf';Integrated Security=True;User Instance=True"

However, I would like to make my connection string:

"Data Source=.\SQLEXPRESS;AttachDbFilename='|DataDirectory|..\..\Database\test.mdf';Integrated Security=True;User Instance=True"

But no matter what combination I try (including not using DataDirectory at all), I cannot seem to open the database using the relative path.

Can someone please assist/clarify?

Thanks,
Sean H.

Hi,

DataDirectory is specifically restricted to only allow access to files in the directory pointed to by the DataDirectory value or any of its subdirectories, but not directories up in the chain.

This is to prevent security issues such as those common in older web servers where you could navigate the server file-system by doing something like http://www.mywebsite.com/..\..\..\etc\passwords

-pablo|||When you say "the directory pointed to by the DataDirectory value " what exactly is that? In other words, what is this value and where can I set/change it?

Thanks - Daniel|||

you can change:

AppDomain.CurrentDomain.setData(“DataDirectory”,”C:\newPath\”);