Access a report from the Internet with no authentication

Is it possible to access a report from the Internet (in a non Windows Domain
context) without supplying any credentials. For instance, a user types in
this URL:
http://www.mydomain.com/ReportServer/Pages/ReportViewer.aspx?%2fMyFolder2%2fMyReport
and he/she woulnd not be prompted by a login dialog, and could simply view
the report.
I tried all sorts of different things (stored credentials in the datasource,
impersonating a user, etc.) from both BIDS and Report Manager, but I can't
seem to make it work. BTW, I can read the report just fine if I supply a
user name and password.
Thank you,
--
Alain Quesnel
alainsansspam@.logiquel.com
www.logiquel.comOn Dec 1, 4:12 pm, "Alain Quesnel" <alainsanss...@.logiquel.com> wrote:
> Is it possible to access a report from the Internet (in a non Windows Domain
> context) without supplying any credentials. For instance, a user types in
> this URL:http://www.mydomain.com/ReportServer/Pages/ReportViewer.aspx?%2fMyFol...
> and he/she woulnd not be prompted by a login dialog, and could simply view
> the report.
> I tried all sorts of different things (stored credentials in the datasource,
> impersonating a user, etc.) from both BIDS and Report Manager, but I can't
> seem to make it work. BTW, I can read the report just fine if I supply a
> user name and password.
> Thank you,
> --
> Alain Quesnel
> alainsanss...@.logiquel.com
> www.logiquel.com
The best option would be to use a report viewer control as part of a
custom ASP.NET application. A less desirable option would be to use
the Reporting Services Web Service to export the report and then allow
the user to view/download the report in that format (i.e., PDF, etc).
This link would help with this option.
http://msdn2.microsoft.com/en-us/library/microsoft.wssux.reportingserviceswebservice.rsexecutionservice2005.reportexecutionservice.render.aspx
Hope this helps.
Regards,
Enrique Martinez
Sr. Software Consultant|||If you are not doing as Enrique is suggesting (i.e. you have your own app
that is being interfaced to) then you have one very poor possibility.
If you make the web sites (via IIS) anonymous this will work. However, you
will then have NO admin capability because everyone is anonymous. You would
need to switch off anonymous access everytime you want to perform any
administrative work.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Alain Quesnel" <alainsansspam@.logiquel.com> wrote in message
news:ehPSPdGNIHA.4480@.TK2MSFTNGP06.phx.gbl...
> Is it possible to access a report from the Internet (in a non Windows
> Domain context) without supplying any credentials. For instance, a user
> types in this URL:
> http://www.mydomain.com/ReportServer/Pages/ReportViewer.aspx?%2fMyFolder2%2fMyReport
> and he/she woulnd not be prompted by a login dialog, and could simply view
> the report.
> I tried all sorts of different things (stored credentials in the
> datasource, impersonating a user, etc.) from both BIDS and Report Manager,
> but I can't seem to make it work. BTW, I can read the report just fine if
> I supply a user name and password.
> Thank you,
> --
> Alain Quesnel
> alainsansspam@.logiquel.com
> www.logiquel.com
>|||Do you know if this would work with MSSQL 2005 Express running on XP Pro? I
tried setting anonymous access on IIS, and when I try to open a report from
the Internet, I'm prompted with a login that has a greyed-out user name
(MachineName\Guest) and an empty password. I'm trying to get rid of the
login altogether.
--
Alain Quesnel
alainsansspam@.logiquel.com
www.logiquel.com
"Bruce L-C [MVP]" <bruce_lcNOSPAM@.hotmail.com> wrote in message
news:OsbHZzbNIHA.1212@.TK2MSFTNGP05.phx.gbl...
> If you are not doing as Enrique is suggesting (i.e. you have your own app
> that is being interfaced to) then you have one very poor possibility.
> If you make the web sites (via IIS) anonymous this will work. However, you
> will then have NO admin capability because everyone is anonymous. You
> would need to switch off anonymous access everytime you want to perform
> any administrative work.
>
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
> "Alain Quesnel" <alainsansspam@.logiquel.com> wrote in message
> news:ehPSPdGNIHA.4480@.TK2MSFTNGP06.phx.gbl...
>> Is it possible to access a report from the Internet (in a non Windows
>> Domain context) without supplying any credentials. For instance, a user
>> types in this URL:
>> http://www.mydomain.com/ReportServer/Pages/ReportViewer.aspx?%2fMyFolder2%2fMyReport
>> and he/she woulnd not be prompted by a login dialog, and could simply
>> view the report.
>> I tried all sorts of different things (stored credentials in the
>> datasource, impersonating a user, etc.) from both BIDS and Report
>> Manager, but I can't seem to make it work. BTW, I can read the report
>> just fine if I supply a user name and password.
>> Thank you,
>> --
>> Alain Quesnel
>> alainsansspam@.logiquel.com
>> www.logiquel.com
>>
>|||Sorry, I don't know the answer to that.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Alain Quesnel" <alainsansspam@.logiquel.com> wrote in message
news:efA1J9bNIHA.3852@.TK2MSFTNGP06.phx.gbl...
> Do you know if this would work with MSSQL 2005 Express running on XP Pro?
> I tried setting anonymous access on IIS, and when I try to open a report
> from the Internet, I'm prompted with a login that has a greyed-out user
> name (MachineName\Guest) and an empty password. I'm trying to get rid of
> the login altogether.
> --
> Alain Quesnel
> alainsansspam@.logiquel.com
> www.logiquel.com
>
> "Bruce L-C [MVP]" <bruce_lcNOSPAM@.hotmail.com> wrote in message
> news:OsbHZzbNIHA.1212@.TK2MSFTNGP05.phx.gbl...
>> If you are not doing as Enrique is suggesting (i.e. you have your own app
>> that is being interfaced to) then you have one very poor possibility.
>> If you make the web sites (via IIS) anonymous this will work. However,
>> you will then have NO admin capability because everyone is anonymous. You
>> would need to switch off anonymous access everytime you want to perform
>> any administrative work.
>>
>> --
>> Bruce Loehle-Conger
>> MVP SQL Server Reporting Services
>> "Alain Quesnel" <alainsansspam@.logiquel.com> wrote in message
>> news:ehPSPdGNIHA.4480@.TK2MSFTNGP06.phx.gbl...
>> Is it possible to access a report from the Internet (in a non Windows
>> Domain context) without supplying any credentials. For instance, a user
>> types in this URL:
>> http://www.mydomain.com/ReportServer/Pages/ReportViewer.aspx?%2fMyFolder2%2fMyReport
>> and he/she woulnd not be prompted by a login dialog, and could simply
>> view the report.
>> I tried all sorts of different things (stored credentials in the
>> datasource, impersonating a user, etc.) from both BIDS and Report
>> Manager, but I can't seem to make it work. BTW, I can read the report
>> just fine if I supply a user name and password.
>> Thank you,
>> --
>> Alain Quesnel
>> alainsansspam@.logiquel.com
>> www.logiquel.com
>>
>>
>

Access 2000 connection failing to SQL Server2000

Hi guys,
I have an Access .adp project which is connecting to a SQL Server 2000 database. I am using Windows NT authentication.
When I open my access project I get an error message indicating that the stored procedure called from my start up form could not be executed. The problem is that the connection does not appear to have created.
In the main menu I click File and select Connection
The server is correctly selected in the drop down list on the pop up screen.
I click on 'Test Connection' and the I get a message indicating success. Now my project is connected and I can continue through the other forms and reports, executing stored procedures and getting records in my reports.
Any ideas on why the project is not connecting on start up, and why simply testing the connection appears to resolve the problem?
Has it something to do with DNS?First of what is the SP level on SQL server and what is the exact error message?

Accesing data from many applications.

Hi, I have a server running sql server 2000 sp3. In this sql server we
use windows authentication to allow users to use the applications that
were developed in house.
At this moment we have some users that are using excel to get data from
databases but we dont want they do that, because we cant control the
data they are getting.
We want to restrict that all users can get data only using the
applications that are developed in house.
Do you know if in sql server I can restrict wich applications can be
connected to sql server and wich not'
I need to continue using windows authentication.
Thanks a lot for your help.
*** Sent via Developersdex http://www.codecomments.com ***On Feb 24, 11:28 am, MariaGuzman <mar...@.devdex.com> wrote:
> Hi, I have a server running sql server 2000 sp3. In this sql server we
> use windows authentication to allow users to use the applications that
> were developed in house.
> At this moment we have some users that are using excel to get data from
> databases but we don=B4t want they do that, because we can=B4t control the
> data they are getting.
> We want to restrict that all users can get data only using the
> applications that are developed in house.
> Do you know if in sql server I can restrict wich applications can be
> connected to sql server and wich not'
> I need to continue using windows authentication.
> Thanks a lot for your help.
> *** Sent via Developersdexhttp://www.codecomments.com***
If a user has permission to connect they can.
See SQL Server 2005 Books Online topic:
Application Roles|||MariaGuzman (marisa@.devdex.com) writes:
> Hi, I have a server running sql server 2000 sp3. In this sql server we
> use windows authentication to allow users to use the applications that
> were developed in house.
> At this moment we have some users that are using excel to get data from
> databases but we dont want they do that, because we cant control the
> data they are getting.
> We want to restrict that all users can get data only using the
> applications that are developed in house.
> Do you know if in sql server I can restrict wich applications can be
> connected to sql server and wich not'
I assume here that your applications are not using stored procedures,
but generate SQL statements in the client. Because if the applications
are using stored procedures (with no dynamic SQL in them), the answer
would be trivial. Just revoke all direct table access. It's sufficient
that users have EXEC permissions on the stored procedure.
If your applications are not using stored procedures, it's of course
a major task to rewrite them. Using application roles as Steve suggested
is a possible solution. It still requires the application to be rewritten,
because once the user has logged in, the application must issue
"sp_setapprole". Note also that if you schemes that requires you
to know the name of the current database user, this will break with
application role.
Note also that application role with two-tier solution is not real
security. The password for the application must be hidden somewhere,
but whereever you hide it, a skilled user will be able to find it.
Erland Sommarskog, SQL Server MVP, esquel@.sommarskog.se
Books Online for SQL Server 2005 at
http://www.microsoft.com/technet/pr...oads/books.mspx
Books Online for SQL Server 2000 at
http://www.microsoft.com/sql/prodin...ions/books.mspx

About SQL Login

Hi all
Does someone know a strored procedure or any t-sql that lets you know wheter a login is windows or sql authentication ?You can query the following tables:
sysusers for users and syslogins for logins.
You will find columns like issqluser or issqluser.
This columns will inform you if the user (login) is windows or sql user (login).

About server authentication

Hi,
I've enabled the SQL Server and Windows Authentication mode, and then I
restarted the SQL server. My ASP.NET program can be access the server, but I
found that I cannot login the SQL server using Microsoft SQL Server
Management Studio.
I checked the ERRORLOG on my server, which shows following information. I'm
sure my password is correct.
Logon Error: 18456, Severity: 14, State: 8.
Logon Login failed for user 'sa'. [CLIENT: <named pipe>]
Logon Error: 18456, Severity: 14, State: 8.
Logon Login failed for user 'sa'. [CLIENT: <local machine>]
Error: 18456, Severity: 14, State: 8.
Login failed for user 'sa'. [CLIENT: 192.168.200.1]
Any suggestion for it?
Many thanks~
Yes, I'm using SQL Server 2005, and enabled the "sa" account.
"Tibor Karaszi" <tibor_please.no.email_karaszi@.hotmail.nomail.com> wrote in
message news:%23eA$s%23yWHHA.1396@.TK2MSFTNGP05.phx.gbl...
> Are you on 2005? If so, is the "sa" account disabled?
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
>
> "Daatmor" <daatmor@.mail.hongkong.com> wrote in message
> news:OBphWWyWHHA.4028@.TK2MSFTNGP04.phx.gbl...
>

About server authentication

Hi,
I've enabled the SQL Server and Windows Authentication mode, and then I
restarted the SQL server. My ASP.NET program can be access the server, but I
found that I cannot login the SQL server using Microsoft SQL Server
Management Studio.
I checked the ERRORLOG on my server, which shows following information. I'm
sure my password is correct.
Logon Error: 18456, Severity: 14, State: 8.
Logon Login failed for user 'sa'. [CLIENT: <named pipe>]
Logon Error: 18456, Severity: 14, State: 8.
Logon Login failed for user 'sa'. [CLIENT: <local machine>]
Error: 18456, Severity: 14, State: 8.
Login failed for user 'sa'. [CLIENT: 192.168.200.1]
Any suggestion for it?
Many thanks~Are you on 2005? If so, is the "sa" account disabled?
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Daatmor" <daatmor@.mail.hongkong.com> wrote in message news:OBphWWyWHHA.4028@.TK2MSFTNGP04.phx.gbl...
> Hi,
> I've enabled the SQL Server and Windows Authentication mode, and then I restarted the SQL server.
> My ASP.NET program can be access the server, but I found that I cannot login the SQL server using
> Microsoft SQL Server Management Studio.
> I checked the ERRORLOG on my server, which shows following information. I'm sure my password is
> correct.
> Logon Error: 18456, Severity: 14, State: 8.
> Logon Login failed for user 'sa'. [CLIENT: <named pipe>]
> Logon Error: 18456, Severity: 14, State: 8.
> Logon Login failed for user 'sa'. [CLIENT: <local machine>]
> Error: 18456, Severity: 14, State: 8.
> Login failed for user 'sa'. [CLIENT: 192.168.200.1]
> Any suggestion for it?
> Many thanks~
>|||Yes, I'm using SQL Server 2005, and enabled the "sa" account.
"Tibor Karaszi" <tibor_please.no.email_karaszi@.hotmail.nomail.com> wrote in
message news:%23eA$s%23yWHHA.1396@.TK2MSFTNGP05.phx.gbl...
> Are you on 2005? If so, is the "sa" account disabled?
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
>
> "Daatmor" <daatmor@.mail.hongkong.com> wrote in message
> news:OBphWWyWHHA.4028@.TK2MSFTNGP04.phx.gbl...
>> Hi,
>> I've enabled the SQL Server and Windows Authentication mode, and then I
>> restarted the SQL server. My ASP.NET program can be access the server,
>> but I found that I cannot login the SQL server using Microsoft SQL Server
>> Management Studio.
>> I checked the ERRORLOG on my server, which shows following information.
>> I'm sure my password is correct.
>> Logon Error: 18456, Severity: 14, State: 8.
>> Logon Login failed for user 'sa'. [CLIENT: <named pipe>]
>> Logon Error: 18456, Severity: 14, State: 8.
>> Logon Login failed for user 'sa'. [CLIENT: <local machine>]
>> Error: 18456, Severity: 14, State: 8.
>> Login failed for user 'sa'. [CLIENT: 192.168.200.1]
>> Any suggestion for it?
>> Many thanks~
>|||Next step would be to change the password for sa to something known, I guess.
--
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Daatmor" <daatmor@.mail.hongkong.com> wrote in message news:ORVoiO6WHHA.1432@.TK2MSFTNGP02.phx.gbl...
> Yes, I'm using SQL Server 2005, and enabled the "sa" account.
>
> "Tibor Karaszi" <tibor_please.no.email_karaszi@.hotmail.nomail.com> wrote in message
> news:%23eA$s%23yWHHA.1396@.TK2MSFTNGP05.phx.gbl...
>> Are you on 2005? If so, is the "sa" account disabled?
>> --
>> Tibor Karaszi, SQL Server MVP
>> http://www.karaszi.com/sqlserver/default.asp
>> http://www.solidqualitylearning.com/
>>
>> "Daatmor" <daatmor@.mail.hongkong.com> wrote in message
>> news:OBphWWyWHHA.4028@.TK2MSFTNGP04.phx.gbl...
>> Hi,
>> I've enabled the SQL Server and Windows Authentication mode, and then I restarted the SQL
>> server. My ASP.NET program can be access the server, but I found that I cannot login the SQL
>> server using Microsoft SQL Server Management Studio.
>> I checked the ERRORLOG on my server, which shows following information. I'm sure my password is
>> correct.
>> Logon Error: 18456, Severity: 14, State: 8.
>> Logon Login failed for user 'sa'. [CLIENT: <named pipe>]
>> Logon Error: 18456, Severity: 14, State: 8.
>> Logon Login failed for user 'sa'. [CLIENT: <local machine>]
>> Error: 18456, Severity: 14, State: 8.
>> Login failed for user 'sa'. [CLIENT: 192.168.200.1]
>> Any suggestion for it?
>> Many thanks~
>>
>

About server authentication

Hi,
I've enabled the SQL Server and Windows Authentication mode, and then I
restarted the SQL server. My ASP.NET program can be access the server, but I
found that I cannot login the SQL server using Microsoft SQL Server
Management Studio.
I checked the ERRORLOG on my server, which shows following information. I'm
sure my password is correct.
Logon Error: 18456, Severity: 14, State: 8.
Logon Login failed for user 'sa'. [CLIENT: <named pipe>]
Logon Error: 18456, Severity: 14, State: 8.
Logon Login failed for user 'sa'. [CLIENT: <local machine>]
Error: 18456, Severity: 14, State: 8.
Login failed for user 'sa'. [CLIENT: 192.168.200.1]
Any suggestion for it?
Many thanks~Are you on 2005? If so, is the "sa" account disabled?
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Daatmor" <daatmor@.mail.hongkong.com> wrote in message news:OBphWWyWHHA.4028@.TK2MSFTNGP04.ph
x.gbl...
> Hi,
> I've enabled the SQL Server and Windows Authentication mode, and then I re
started the SQL server.
> My ASP.NET program can be access the server, but I found that I cannot log
in the SQL server using
> Microsoft SQL Server Management Studio.
> I checked the ERRORLOG on my server, which shows following information. I'
m sure my password is
> correct.
> Logon Error: 18456, Severity: 14, State: 8.
> Logon Login failed for user 'sa'. [CLIENT: <named pipe>]
> Logon Error: 18456, Severity: 14, State: 8.
> Logon Login failed for user 'sa'. [CLIENT: <local machine>]
> Error: 18456, Severity: 14, State: 8.
> Login failed for user 'sa'. [CLIENT: 192.168.200.1]
> Any suggestion for it?
> Many thanks~
>|||Yes, I'm using SQL Server 2005, and enabled the "sa" account.
"Tibor Karaszi" <tibor_please.no.email_karaszi@.hotmail.nomail.com> wrote in
message news:%23eA$s%23yWHHA.1396@.TK2MSFTNGP05.phx.gbl...
> Are you on 2005? If so, is the "sa" account disabled?
> --
> Tibor Karaszi, SQL Server MVP
> http://www.karaszi.com/sqlserver/default.asp
> http://www.solidqualitylearning.com/
>
> "Daatmor" <daatmor@.mail.hongkong.com> wrote in message
> news:OBphWWyWHHA.4028@.TK2MSFTNGP04.phx.gbl...
>|||Next step would be to change the password for sa to something known, I guess
.
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Daatmor" <daatmor@.mail.hongkong.com> wrote in message news:ORVoiO6WHHA.1432@.TK2MSFTNGP02.ph
x.gbl...
> Yes, I'm using SQL Server 2005, and enabled the "sa" account.
>
> "Tibor Karaszi" <tibor_please.no.email_karaszi@.hotmail.nomail.com> wrote i
n message
> news:%23eA$s%23yWHHA.1396@.TK2MSFTNGP05.phx.gbl...
>

About Endpoints

When I constructed my endpoint:

CREATE ENDPOINT MyNewEndPoint
STATE = STARTED
AS HTTP
(
PATH = '/MyEndpoint',
AUTHENTICATION = (INTEGRATED),
PORTS = (CLEAR),
SITE = 'arkansas'
)
FOR SOAP
(
WEBMETHOD 'GetSession'
(NAME='MyDB.dbo.spGetSession'),
BATCHES = DISABLED,
WSDL = DEFAULT,
DATABASE = 'MyDB',
NAMESPACE = 'http://MyDB/MyEndpoint'
)

the site is hardcoded. But, when I'm getting ready to deploy I'll need the site to be my production site. Is there an easier way to accomplish this then to edit the script each time before delpoyment?

TIA,
Dave C.

Hi Dave,

I assume you have some kind of a setup script or procedure? If that's the case, you could do this:

(a) Create the endpoint always with the hardcoded script above

(b) Bootstrap a small script execution with an ALTER ENDPOINT statement. For instance use SQLCMD.EXE like this:

SQLCMD.EXE -E -S. -Q"ALTER ENDPOINT MyNewEndPoint..."

or -of course- you could simply create the endpoint this way.

HTH,
Jivko Dobrev - MSFT
--
This posting is provided "AS IS" with no warranties, and confers no rights.

About Endpoints

When I constructed my endpoint:

CREATE ENDPOINT MyNewEndPoint
STATE = STARTED
AS HTTP
(
PATH = '/MyEndpoint',
AUTHENTICATION = (INTEGRATED),
PORTS = (CLEAR),
SITE = 'arkansas'
)
FOR SOAP
(
WEBMETHOD 'GetSession'
(NAME='MyDB.dbo.spGetSession'),
BATCHES = DISABLED,
WSDL = DEFAULT,
DATABASE = 'MyDB',
NAMESPACE = 'http://MyDB/MyEndpoint'
)

the site is hardcoded. But, when I'm getting ready to deploy I'll need the site to be my production site. Is there an easier way to accomplish this then to edit the script each time before delpoyment?

TIA,
Dave C.

Hi Dave,

I assume you have some kind of a setup script or procedure? If that's the case, you could do this:

(a) Create the endpoint always with the hardcoded script above

(b) Bootstrap a small script execution with an ALTER ENDPOINT statement. For instance use SQLCMD.EXE like this:

SQLCMD.EXE -E -S. -Q"ALTER ENDPOINT MyNewEndPoint..."

or -of course- you could simply create the endpoint this way.

HTH,
Jivko Dobrev - MSFT
--
This posting is provided "AS IS" with no warranties, and confers no rights.