locked
Reports not working from Remote Console RRS feed

  • Question

  • Hello Together,

     

    after i installed a System Center Essentials Remote Console today on my vista machine everything seems to work fine except the reports section.

     

    Following error occurs if i switch to the reporting pane:

     

    Error 401 unauthorized

     

    Hinweis: Die folgenden Informationen wurden bei der Ausführung des Vorgangs erfasst. Die Informationen werden möglicherweise verschlüsselt angezeigt, enthalten jedoch Kontext zum Fehler. Die Anwendung wird weiterhin ausgeführt.

    System.Net.WebException: Fehler bei der Anforderung mit HTTP-Status 401: Unauthorized.
       bei System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
       bei System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
       bei Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ReportingService.ReportingService2005.ListChildren(String Item, Boolean Recursive)
       bei Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders(Boolean includeHidden)
       bei Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.ManagementGroupReportFolder.GetSubfolders()
       bei Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingSubtree(TreeNode node, ManagementGroupReportFolder folder)
       bei Microsoft.EnterpriseManagement.Mom.Internal.UI.Reporting.WunderBar.ReportingPage.LoadReportingTreeJob(Object sender, ConsoleJobEventArgs args)

     

     

    I am logged in as a normal user without admin priveliges but i run the essentials console as a domain administrator.

    Thursday, December 4, 2008 11:41 AM

Answers

  •   Hi

    Was able to solve the problem in the meantime:

    - The guy who installed SCE 2007 configured the IIS 6 Application Pools "ReportingServices" and "ReportManager" to run with the sepcific SCE 2007 management domain user account.
    - Have then configured IIS to use this account according KB http://support.microsoft.com/kb/871179/en-us.

    Result: Could access the reporting Website with the browser locally and remote, but was not able to connect to the SCE Server with the SCE management console!

    - Have then deleted the setspn registrations previously created according http://support.microsoft.com/kb/871179/en-us
    - Have reconfigured the IIS 6 application pools "ReportingServices" and "ReportManager" to run with "Network Service"
    - Have run the SQL reporting Service Configuration Utility and reconfigured the "Web Service Identity" to "NT Authority\Network Service"

    Now, SCE 2007 console and SCE 2007 Reporting run on the SCE Server and on remote workstations.

    Franz
    • Proposed as answer by FranzSchenk Friday, December 19, 2008 10:41 AM
    • Marked as answer by Jie-Feng Ren Thursday, December 25, 2008 1:31 AM
    Thursday, December 11, 2008 3:40 PM

All replies

  •  

    Thomas,

    What happens when you log on to the workstation with admin privileges? Do you still get the same error?

    Tim

    Thursday, December 4, 2008 8:12 PM
  • It does not work even if i logon as administrator. Same error occurs.

     

    Friday, December 5, 2008 1:28 PM
  • Hi,

     

    Please look into following  Kb article to chekc the IIS 6.0 application pool:

     

    871179 You receive an "HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials" error message when you try to access a Web site that is part of an IIS 6.0 application pool
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;871179

     

    HTH.

    Monday, December 8, 2008 3:55 AM
  • I followed the Steps in the Resolution-Section of the article, indeed my account for the reports and reportserver application pool on my SCE-Server was a domain-user-account. I did register the SPNs as mentioned in the article but the error still appears.

     

    I noticed that when i run http://mysceserver/reports locally on my SCE-Server i get:

     

    HTTP-Status 400: Bad Request.

     

    But reports from the Essentials-Console on the SCE-Server still work.

    Tuesday, December 9, 2008 8:18 AM
  • Hi,

     

    From the error log, it seems that the problem is related to SRS. Please refer to following KB:

     

    http://support.microsoft.com/kb/922656/en-us

     

    HTH.

    Tuesday, December 9, 2008 10:43 AM
  • The KB fixed the problem on the server but the client with remote console still gets 401 unauthorized.

    Tuesday, December 9, 2008 11:31 AM
  • Hi,

     

    On client, varify if you can browse http://<fqnd of SCE SERVER>/reports correctly. Also, change the account of report application pool to network service to see if it works.

     

    HTH.

    Tuesday, December 9, 2008 12:18 PM
  • I made some tests:

     

    1.)

     

    a.) On my Vista machine as normal user went in IE to http://scesvr001.fms-dc.local/reports

     

    The reports page opens but does not show any reports

     

    b.) On my Vista machine as normal user went in IE to http://scesvr001/reports

     

    The reports page opens but does not show any reports

     

     

    2.)

     

    a.) Open IE as administrator and opened the site http://scesvr001.fms-dc.local/reports

     

    I get a login prompt and after typing my domain admin credentials i can see all of the reports and open them withou any error.

     

    b.) Open IE as administrator and opened the site http://scesvr001/reports

     

    No login prompt and i can see all reports and open them without any error

     

     

    3.) Login as Domain Admin on my Vista machine open SCE-Console and went to reports section i still receive unauthorized 401

     

    4.) Login as Normal User and start SCE-Console as Administrator i still receive unauthorized 401

    Tuesday, December 9, 2008 2:21 PM
  • Hi,

     

    Disable UAC on Windows Vista and attempt to change the account of report application pool to network service to see if it works. Also, you can install remote console on an another client to check if it encounter similar problem.

     

    HTH.

    Wednesday, December 10, 2008 3:38 AM
  • The problem is not Vista related. Have exactely the same behaviour on Windows XP SP2 console.

    - opening http://sceserver/reports on the SCE Server: Opens a Web Site with a list of report
    - opening http://sceserver/reports on the XP SP2 machine : Opens a Web Site without showing any report.

    Thanks in advance for any hints!
    Franz
    Thursday, December 11, 2008 1:22 PM
  •   Hi

    Was able to solve the problem in the meantime:

    - The guy who installed SCE 2007 configured the IIS 6 Application Pools "ReportingServices" and "ReportManager" to run with the sepcific SCE 2007 management domain user account.
    - Have then configured IIS to use this account according KB http://support.microsoft.com/kb/871179/en-us.

    Result: Could access the reporting Website with the browser locally and remote, but was not able to connect to the SCE Server with the SCE management console!

    - Have then deleted the setspn registrations previously created according http://support.microsoft.com/kb/871179/en-us
    - Have reconfigured the IIS 6 application pools "ReportingServices" and "ReportManager" to run with "Network Service"
    - Have run the SQL reporting Service Configuration Utility and reconfigured the "Web Service Identity" to "NT Authority\Network Service"

    Now, SCE 2007 console and SCE 2007 Reporting run on the SCE Server and on remote workstations.

    Franz
    • Proposed as answer by FranzSchenk Friday, December 19, 2008 10:41 AM
    • Marked as answer by Jie-Feng Ren Thursday, December 25, 2008 1:31 AM
    Thursday, December 11, 2008 3:40 PM
  • Thank you Franz, that fixed it for me. I tried to assign the network service account to the report app pools before but i did forget to reconfigure my reporting services to that account.

    So problem is fixed now. Thank you very much for helping me out on this one.

    Friday, December 12, 2008 7:57 AM
  • Its working fine with network service account but when i choose domain service account, it gives same credentials error.
    Any solution while using domain accounts.

    Thanks in advance.

    Friday, May 15, 2009 10:53 AM