locked
Access blocked to Reports from a remote machine RRS feed

  • Question

  • Hello,

    I encountered blocking issue with SSRS 2008 of a TFS installation.

    Configuration: Windows 2008; SQL+SSAS+SSRS 2008 Developer Edition, SharePoint WSS 3.0 and TFS 2008 on the same machine.
    The server's firewall is off.

    Typical clients: Windows Server 2008 with IE7 or Windows 7 with IE 8.
    All machines are in an enterprise domain.
    Using domain account domain\tfssetup = local Admin.

    The Reporting configuration is standard: 1 site connected to the local SQL instance (containing TFS team reports), service account = domain\tfsreports. Address of the Reporting site: http://tfsserver/Reports.
    I have also a SharePoint site hosted in IIS 7, at http://tfsserver/.

    Accounts domain\tfssetup and domain\admin2 configured as Site administrators and root Content managers on Reporting site.

    I can connect to the Reporting site from the local machine (tfsserver) with any of the accounts listed.
    I cannot connect to the Reporting site from any of the remote clients, through Internet Explorer (the browser keeps prompting me the login form). Other similar services using Windows integrated authentication - like TFS Team Explorer - don't neither have access to Reports.
    I can connect to the Reporting site from any of the remote clients, through Firefox or Safari.
    I can connect to the SharePoint site from any of the remote clients, even through IE.
    I can connect from the same W7 client to another SSRS 2008 installation (which is related to a similar TFS installation on another server).
    I did added http://tfsserver/ as trusted site and intranet site in IE, it doesn't help.


    For me, it's pretty obvious that there is a security issue in SSRS. Unfortunately, SSRS 2008 is very hermetical there.
    Do you have any solution?

    Thank you in advance.


    Marius
    Monday, March 15, 2010 9:44 PM

Answers

  • Hi,

    For those interrested: I changed the SSRS service account from TFSREPORTS to NETWORK SERVICE and it worked like a charm.

    Don't ask me why.


    Marius
    Friday, April 2, 2010 10:57 PM

All replies

  • Hi,

    First of all, have you check virtual directory settings of Report Manger and Report Server? Make sure that Windows Authentication has been enabled there.

    Thanks.
    Yao Jie Tang -Microsoft Online Community
    Wednesday, March 17, 2010 3:53 AM
  • Hi,

    First of all, as I said already, it's SSRS 2008 and not 2005. Therefore, there are no virtual directories available, nor Windows Auth to configure in IIS.

    Sincerely,
    Marius
    Wednesday, March 17, 2010 2:03 PM
  • Hi,

    For those interrested: I changed the SSRS service account from TFSREPORTS to NETWORK SERVICE and it worked like a charm.

    Don't ask me why.


    Marius
    Friday, April 2, 2010 10:57 PM