SSRS 2008 Security

Thanks for the tips Matt.  I have tried going through setting up anonymous access as a pre cursor for maybe setting up my own custom authentication problem.  Wasn’t too successful first time but will have another go soon.  I seem to be hitting problems with the actual compiled authentication dll as the instruction aren’t completely clear.

Might have to think about deploying two SSRS servers as at the moment to get around this problem.  According to the tessitura documentation the SSRS paths can be organisation specific.  So might be possible to deploy SSRS on more than one server.  Will need to test this out though!

Thanks

Nick

From: Tessitura Technical Forum [mailto:forums-technical@tessituranetwork.com] On Behalf Of Matt Winchester
Sent: 09 September 2011 19:17
To: Nick Insell
Subject: Re: [Tessitura Technical Forum] SSRS 2008 Security

Yep, Microsoft has done it again.

There are a few elaborate options...see this excerpt: http://searchsystemschannel.techtarget.com/feature/SQL-Server-2008-Reporting-Services-for-Internet-deployment

Also see this: http://blogs.msdn.com/b/jameswu/archive/2008/07/15/anonymous-access-in-sql-rs-2008.aspx

Or

1. Create a new user in Windows 2008 server. (i.e. ReportingServices)
2. Created a classic application pool, and assigned the identity execution to my new ReportingServices account in the server
3. Associated the ReportingServices credential to a browser role inside the report server (http://localhost/Reports) for the report being rendered inside my asp.net application using the report viewer. (Folders above reports are still locked, so no browsing allowed)
4. Disabled prompting for report parameters and disabled default values for parameters (can't render report from portal now)
5. Set default parameter values via the parameter array of my report viewer.
6. associated ASP.Net application to application pool being ran by my ReportingSevices credentials

I have actual done something similar in SSRS 2005 but I created a .NET skin because I wanted more robust parameter functionality for one of my reports. However, this method obviously requires more overhead because you need to deploy a report and an application (the skin). Good Luck.

Hi Guys

I'm hoping to get some advise from about the Setup of SSRS 2008, especially inside consoritia.

We have managed to setup SSRS 2008 and it works great in our main company domain but we have hit a bit of stumbling block when getting other untrusted Domains from accessing it.  In 2005 this was simple as we could just setup anonymous access to the reports through IIS.  In 2008 security is no longer handled by IIS and this is causing us a massive headache.

Has anyone got any suggestions on how to get around this.  I know it is a requriement for version 11 so keen to get setup very soon.

Thanks

Nick

This message was sent automatically to you by www.tessituranetwork.com because you subscribed to the Tessitura Technical Forum. You may reply to this message to post to the Technical forum or visit the site to search, read and post to the forums. In the interest of keeping the forum posts from becoming cluttered, we encourage you to delete previous message text from your reply before sending. Thank you!

Thanks for the tips Matt.  I have tried going through setting up anonymous access as a pre cursor for maybe setting up my own custom authentication problem.  Wasn’t too successful first time but will have another go soon.  I seem to be hitting problems with the actual compiled authentication dll as the instruction aren’t completely clear.

Might have to think about deploying two SSRS servers as at the moment to get around this problem.  According to the tessitura documentation the SSRS paths can be organisation specific.  So might be possible to deploy SSRS on more than one server.  Will need to test this out though!

Thanks

Nick

From: Tessitura Technical Forum [mailto:forums-technical@tessituranetwork.com] On Behalf Of Matt Winchester
Sent: 09 September 2011 19:17
To: Nick Insell
Subject: Re: [Tessitura Technical Forum] SSRS 2008 Security

Yep, Microsoft has done it again.

There are a few elaborate options...see this excerpt: http://searchsystemschannel.techtarget.com/feature/SQL-Server-2008-Reporting-Services-for-Internet-deployment

Also see this: http://blogs.msdn.com/b/jameswu/archive/2008/07/15/anonymous-access-in-sql-rs-2008.aspx

Or

1. Create a new user in Windows 2008 server. (i.e. ReportingServices)
2. Created a classic application pool, and assigned the identity execution to my new ReportingServices account in the server
3. Associated the ReportingServices credential to a browser role inside the report server (http://localhost/Reports) for the report being rendered inside my asp.net application using the report viewer. (Folders above reports are still locked, so no browsing allowed)
4. Disabled prompting for report parameters and disabled default values for parameters (can't render report from portal now)
5. Set default parameter values via the parameter array of my report viewer.
6. associated ASP.Net application to application pool being ran by my ReportingSevices credentials

I have actual done something similar in SSRS 2005 but I created a .NET skin because I wanted more robust parameter functionality for one of my reports. However, this method obviously requires more overhead because you need to deploy a report and an application (the skin). Good Luck.

Hi Guys

I'm hoping to get some advise from about the Setup of SSRS 2008, especially inside consoritia.

We have managed to setup SSRS 2008 and it works great in our main company domain but we have hit a bit of stumbling block when getting other untrusted Domains from accessing it.  In 2005 this was simple as we could just setup anonymous access to the reports through IIS.  In 2008 security is no longer handled by IIS and this is causing us a massive headache.

Has anyone got any suggestions on how to get around this.  I know it is a requriement for version 11 so keen to get setup very soon.

Thanks

Nick

This message was sent automatically to you by www.tessituranetwork.com because you subscribed to the Tessitura Technical Forum. You may reply to this message to post to the Technical forum or visit the site to search, read and post to the forums. In the interest of keeping the forum posts from becoming cluttered, we encourage you to delete previous message text from your reply before sending. Thank you!