0

Reporting services on my site always asks for username and password. I want to set it as domain users are never asked for username / password so I'll have a single-sign on. The Reports Application in IIS is set to have Windows Authentication.

Usually the users access the reports by IP address of the Reporting Server :

http://192.168.1.2/Reports

Can someone enumerate the options I should check ?

Thank you

Paul
  • 714
  • 2
  • 6
  • 19

2 Answers2

1

How is Reporting services authenticating to the back-end database? What database type (SQL Server, Oracle, MySQL, etc.) is it connecting to?

If you're connecting to a SQL Server, using the requesting user's credentials, you'll need to setup Kerberos authentication to avoid the "double-hop" issue. This will also involve setting up the appropriate SPNs within AD.

Perform some research, and verify that this is what you wish to do in your environment.

Evan M.
  • 842
  • 9
  • 16
  • The connection to the back-end SQL server is done by using a datasource which has user credentials specified. Anyway this user prompting should occur when I'm trying to access the report itself .. I'm still stuck for now at the folder page accessing (IIS settings) – Paul Jan 20 '10 at 15:00
0

In the IIS management console, in the properties for the "Reports" virtual directory, on the "Directory Security" tab, click the "Edit..." button for the "Anonymous access and authentication" settings. Ensure that "Integrated Windows Authentication" is the only option checked off.

DCNYAM
  • 1,039
  • 7
  • 14
  • having users authenticate by default with IUSR guest account won't do because I have access set up for domain users – Paul Jan 20 '10 at 14:59
  • Don't use anonymous access, but you need to go to the anonymous access page to enable Windows Authentication for the report manager. Having Windows Authentication enabled on the Report manager allows users to be authenticated using their windows credentials. Those credentials are then used by the report manager to control report authorization. – DCNYAM Jan 20 '10 at 17:44
  • Silly question: Are you on a domain, or are the computers all in a workgroup? – Evan M. Jan 21 '10 at 00:14