Answered by:
Access blocked to Reports from a remote machine

Question
-
Hello,
I encountered blocking issue with SSRS 2008 of a TFS installation.
Configuration: Windows 2008; SQL+SSAS+SSRS 2008 Developer Edition, SharePoint WSS 3.0 and TFS 2008 on the same machine.
The server's firewall is off.
Typical clients: Windows Server 2008 with IE7 or Windows 7 with IE 8.
All machines are in an enterprise domain.
Using domain account domain\tfssetup = local Admin.The Reporting configuration is standard: 1 site connected to the local SQL instance (containing TFS team reports), service account = domain\tfsreports. Address of the Reporting site: http://tfsserver/Reports.
I have also a SharePoint site hosted in IIS 7, at http://tfsserver/.Accounts domain\tfssetup and domain\admin2 configured as Site administrators and root Content managers on Reporting site.
I can connect to the Reporting site from the local machine (tfsserver) with any of the accounts listed.
I cannot connect to the Reporting site from any of the remote clients, through Internet Explorer (the browser keeps prompting me the login form). Other similar services using Windows integrated authentication - like TFS Team Explorer - don't neither have access to Reports.
I can connect to the Reporting site from any of the remote clients, through Firefox or Safari.
I can connect to the SharePoint site from any of the remote clients, even through IE.
I can connect from the same W7 client to another SSRS 2008 installation (which is related to a similar TFS installation on another server).
I did added http://tfsserver/ as trusted site and intranet site in IE, it doesn't help.
For me, it's pretty obvious that there is a security issue in SSRS. Unfortunately, SSRS 2008 is very hermetical there.
Do you have any solution?Thank you in advance.
MariusMonday, March 15, 2010 9:44 PM
Answers
-
Hi,
For those interrested: I changed the SSRS service account from TFSREPORTS to NETWORK SERVICE and it worked like a charm.
Don't ask me why.
Marius- Marked as answer by Marius ZahariaMVP Friday, April 2, 2010 10:57 PM
Friday, April 2, 2010 10:57 PM
All replies
-
Hi,
First of all, have you check virtual directory settings of Report Manger and Report Server? Make sure that Windows Authentication has been enabled there.
Thanks.
Yao Jie Tang -Microsoft Online CommunityWednesday, March 17, 2010 3:53 AM -
Hi,
First of all, as I said already, it's SSRS 2008 and not 2005. Therefore, there are no virtual directories available, nor Windows Auth to configure in IIS.
Sincerely,
MariusWednesday, March 17, 2010 2:03 PM -
Hi,
For those interrested: I changed the SSRS service account from TFSREPORTS to NETWORK SERVICE and it worked like a charm.
Don't ask me why.
Marius- Marked as answer by Marius ZahariaMVP Friday, April 2, 2010 10:57 PM
Friday, April 2, 2010 10:57 PM