Showing posts with label domain. Show all posts
Showing posts with label domain. Show all posts

Thursday, March 22, 2012

Access AS from Excel 2007 from outside the domain

I am trying to access an AS DB from outside the domain. I'm using the https://.../msmdpump.dll to specify the server name. Is there a way to qualify the specific AS DB in the supplied server name? Excel allows for both Windows authentication as well as providing username and password, which seems to be a mistake - it appears it uses the same dialog box in creating a connection to AS and DB, so provides the ability to pass l/p. Can I provide a valid Domain login in these fields for connecting to AS? My machine is of course in a different domain then AS - is there a way to pass the remote domains credentials from this machine?

Thanks

If the laptop conaining Excel 2007 is not on the same domain as SSAS or the msmdpump.dll web server, then I would suggest one of two options:

1. Launch Excel with the runas command:

Code Block

C:\WINDOWS\system32\runas.exe /net /user:SSASDomain\username "C:\program files\Microsoft Office\Office12\EXCEL.EXE"

Then connect with "Use Windows Authentication" in Excel.


2. If that's not an acceptable solution, then enable basic security on the msmdpump virtual directory (which is still secure because you're using HTTPS) and connect using "Use the following User Name and Password" in Excel. Note that their password will be stored in the xlsx in clear text and on disk elsewhere on their computer. And if these users can publish to Excel Services, there will be a bunch of other complexities to worry about. (If Excel Services publishing is needed for these users, I would suggest you have them submit their xlsx files to internal IT who can remove the basic security and flip the connections over to Integrated Security before publishing to Excel Services.)

If msmdpump.dll is not on the same server as SSAS, you may have troubles getting #1 to work since Kerberos delegation across domains starting with a connection in Excel isn't possible that I know of. But #2 should work.

As for specifying the database, I believe that is configured on the next screen in the connection wizard in Excel 2007. If you meant "can msmdpump.dll point to several servers?" I think the answer is no. There's a msmdpump.ini which controls which SSAS server it connects to. But you can certainly deploy multiple msmdpump.dll virtual directories.

Keep us posted with your progress or with other lessons learned if you run into some gotchas. Hope the above helps.

Access a report from the Internet with no authentication

Is it possible to access a report from the Internet (in a non Windows Domain
context) without supplying any credentials. For instance, a user types in
this URL:
http://www.mydomain.com/ReportServer/Pages/ReportViewer.aspx?%2fMyFolder2%2fMyReport
and he/she woulnd not be prompted by a login dialog, and could simply view
the report.
I tried all sorts of different things (stored credentials in the datasource,
impersonating a user, etc.) from both BIDS and Report Manager, but I can't
seem to make it work. BTW, I can read the report just fine if I supply a
user name and password.
Thank you,
--
Alain Quesnel
alainsansspam@.logiquel.com
www.logiquel.comOn Dec 1, 4:12 pm, "Alain Quesnel" <alainsanss...@.logiquel.com> wrote:
> Is it possible to access a report from the Internet (in a non Windows Domain
> context) without supplying any credentials. For instance, a user types in
> this URL:http://www.mydomain.com/ReportServer/Pages/ReportViewer.aspx?%2fMyFol...
> and he/she woulnd not be prompted by a login dialog, and could simply view
> the report.
> I tried all sorts of different things (stored credentials in the datasource,
> impersonating a user, etc.) from both BIDS and Report Manager, but I can't
> seem to make it work. BTW, I can read the report just fine if I supply a
> user name and password.
> Thank you,
> --
> Alain Quesnel
> alainsanss...@.logiquel.com
> www.logiquel.com
The best option would be to use a report viewer control as part of a
custom ASP.NET application. A less desirable option would be to use
the Reporting Services Web Service to export the report and then allow
the user to view/download the report in that format (i.e., PDF, etc).
This link would help with this option.
http://msdn2.microsoft.com/en-us/library/microsoft.wssux.reportingserviceswebservice.rsexecutionservice2005.reportexecutionservice.render.aspx
Hope this helps.
Regards,
Enrique Martinez
Sr. Software Consultant|||If you are not doing as Enrique is suggesting (i.e. you have your own app
that is being interfaced to) then you have one very poor possibility.
If you make the web sites (via IIS) anonymous this will work. However, you
will then have NO admin capability because everyone is anonymous. You would
need to switch off anonymous access everytime you want to perform any
administrative work.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Alain Quesnel" <alainsansspam@.logiquel.com> wrote in message
news:ehPSPdGNIHA.4480@.TK2MSFTNGP06.phx.gbl...
> Is it possible to access a report from the Internet (in a non Windows
> Domain context) without supplying any credentials. For instance, a user
> types in this URL:
> http://www.mydomain.com/ReportServer/Pages/ReportViewer.aspx?%2fMyFolder2%2fMyReport
> and he/she woulnd not be prompted by a login dialog, and could simply view
> the report.
> I tried all sorts of different things (stored credentials in the
> datasource, impersonating a user, etc.) from both BIDS and Report Manager,
> but I can't seem to make it work. BTW, I can read the report just fine if
> I supply a user name and password.
> Thank you,
> --
> Alain Quesnel
> alainsansspam@.logiquel.com
> www.logiquel.com
>|||Do you know if this would work with MSSQL 2005 Express running on XP Pro? I
tried setting anonymous access on IIS, and when I try to open a report from
the Internet, I'm prompted with a login that has a greyed-out user name
(MachineName\Guest) and an empty password. I'm trying to get rid of the
login altogether.
--
Alain Quesnel
alainsansspam@.logiquel.com
www.logiquel.com
"Bruce L-C [MVP]" <bruce_lcNOSPAM@.hotmail.com> wrote in message
news:OsbHZzbNIHA.1212@.TK2MSFTNGP05.phx.gbl...
> If you are not doing as Enrique is suggesting (i.e. you have your own app
> that is being interfaced to) then you have one very poor possibility.
> If you make the web sites (via IIS) anonymous this will work. However, you
> will then have NO admin capability because everyone is anonymous. You
> would need to switch off anonymous access everytime you want to perform
> any administrative work.
>
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
> "Alain Quesnel" <alainsansspam@.logiquel.com> wrote in message
> news:ehPSPdGNIHA.4480@.TK2MSFTNGP06.phx.gbl...
>> Is it possible to access a report from the Internet (in a non Windows
>> Domain context) without supplying any credentials. For instance, a user
>> types in this URL:
>> http://www.mydomain.com/ReportServer/Pages/ReportViewer.aspx?%2fMyFolder2%2fMyReport
>> and he/she woulnd not be prompted by a login dialog, and could simply
>> view the report.
>> I tried all sorts of different things (stored credentials in the
>> datasource, impersonating a user, etc.) from both BIDS and Report
>> Manager, but I can't seem to make it work. BTW, I can read the report
>> just fine if I supply a user name and password.
>> Thank you,
>> --
>> Alain Quesnel
>> alainsansspam@.logiquel.com
>> www.logiquel.com
>>
>|||Sorry, I don't know the answer to that.
Bruce Loehle-Conger
MVP SQL Server Reporting Services
"Alain Quesnel" <alainsansspam@.logiquel.com> wrote in message
news:efA1J9bNIHA.3852@.TK2MSFTNGP06.phx.gbl...
> Do you know if this would work with MSSQL 2005 Express running on XP Pro?
> I tried setting anonymous access on IIS, and when I try to open a report
> from the Internet, I'm prompted with a login that has a greyed-out user
> name (MachineName\Guest) and an empty password. I'm trying to get rid of
> the login altogether.
> --
> Alain Quesnel
> alainsansspam@.logiquel.com
> www.logiquel.com
>
> "Bruce L-C [MVP]" <bruce_lcNOSPAM@.hotmail.com> wrote in message
> news:OsbHZzbNIHA.1212@.TK2MSFTNGP05.phx.gbl...
>> If you are not doing as Enrique is suggesting (i.e. you have your own app
>> that is being interfaced to) then you have one very poor possibility.
>> If you make the web sites (via IIS) anonymous this will work. However,
>> you will then have NO admin capability because everyone is anonymous. You
>> would need to switch off anonymous access everytime you want to perform
>> any administrative work.
>>
>> --
>> Bruce Loehle-Conger
>> MVP SQL Server Reporting Services
>> "Alain Quesnel" <alainsansspam@.logiquel.com> wrote in message
>> news:ehPSPdGNIHA.4480@.TK2MSFTNGP06.phx.gbl...
>> Is it possible to access a report from the Internet (in a non Windows
>> Domain context) without supplying any credentials. For instance, a user
>> types in this URL:
>> http://www.mydomain.com/ReportServer/Pages/ReportViewer.aspx?%2fMyFolder2%2fMyReport
>> and he/she woulnd not be prompted by a login dialog, and could simply
>> view the report.
>> I tried all sorts of different things (stored credentials in the
>> datasource, impersonating a user, etc.) from both BIDS and Report
>> Manager, but I can't seem to make it work. BTW, I can read the report
>> just fine if I supply a user name and password.
>> Thank you,
>> --
>> Alain Quesnel
>> alainsansspam@.logiquel.com
>> www.logiquel.com
>>
>>
>

Monday, March 19, 2012

Accesing SQL Server with clients

i have a MS Windows 2003 Enterprise Edition but i don't have PDC installed so i don't have a domain in the LAN, i installed SQL Server 2000 on this server, but the clients ( MSDE 2000 ) can not se the SQL server.
My cuestion is , i have to install a pdc and then mount SQL server , and add the clients to the domain
"Jaxon" wrote:

> I am sure there are tons of white papers on this, but I dont suspect that
> you'll experience any huge hurdles.
> MSDE is essentially a throttled down version of the SQL Server Engine.
> "Because it is fully compatible with other editions of SQL Server,
> developers can easily target both SQL Server and MSDE 2000 with the same
> core code base. This provides a seamless upgrade path from MSDE 2000 to SQL
> Server if an application grows beyond the storage and scalability limits of
> MSDE 2000."
>
> http://www.microsoft.com/sql/msde/pr...o/overview.asp
>
>
> Greg Jackson
> PDX, Oregon
>
>
MSDE doesn't have network access enabled by default. Enable using svrnetcn.exe.
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Visual FoxPro programmer" <VisualFoxProprogrammer@.discussions.microsoft.com> wrote in message
news:927CFF5D-751E-4040-AF0D-B3896E64D68C@.microsoft.com...
> i have a MS Windows 2003 Enterprise Edition but i don't have PDC installed so i don't have a
domain in the LAN, i installed SQL Server 2000 on this server, but the clients ( MSDE 2000 ) can not
se the SQL server.
> My cuestion is , i have to install a pdc and then mount SQL server , and add the clients to the
domain[vbcol=seagreen]
>
> "Jaxon" wrote:

Accesing SQL Server with clients

i have a MS Windows 2003 Enterprise Edition but i don't have PDC installed s
o i don't have a domain in the LAN, i installed SQL Server 2000 on this serv
er, but the clients ( MSDE 2000 ) can not se the SQL server.
My cuestion is , i have to install a pdc and then mount SQL server , and add
the clients to the domain
"Jaxon" wrote:

> I am sure there are tons of white papers on this, but I dont suspect that
> you'll experience any huge hurdles.
> MSDE is essentially a throttled down version of the SQL Server Engine.
> "Because it is fully compatible with other editions of SQL Server,
> developers can easily target both SQL Server and MSDE 2000 with the same
> core code base. This provides a seamless upgrade path from MSDE 2000 to SQ
L
> Server if an application grows beyond the storage and scalability limits o
f
> MSDE 2000."
>
> http://www.microsoft.com/sql/msde/p...fo/overview.asp
>
>
> Greg Jackson
> PDX, Oregon
>
>MSDE doesn't have network access enabled by default. Enable using svrnetcn.e
xe.
Tibor Karaszi, SQL Server MVP
http://www.karaszi.com/sqlserver/default.asp
http://www.solidqualitylearning.com/
"Visual FoxPro programmer" <VisualFoxProprogrammer@.discussions.microsoft.com
> wrote in message
news:927CFF5D-751E-4040-AF0D-B3896E64D68C@.microsoft.com...
> i have a MS Windows 2003 Enterprise Edition but i don't have PDC installed so i do
n't have a
domain in the LAN, i installed SQL Server 2000 on this server, but the clien
ts ( MSDE 2000 ) can not
se the SQL server.
> My cuestion is , i have to install a pdc and then mount SQL server , and add the c
lients to the
domain[vbcol=seagreen]
>
> "Jaxon" wrote:
>

Accesing Reports from outside the domain

How do I set it up so that people who are inside my local network, but
outside my domain to get access to my reports.
Any thoughts would be great
JeffCan't you just add the individuals to the security of the report...
e.g. DOMAIN1\User
I have reports with 3 or 4 different domain users having access.
Craig
"JeffreyWowk" <JeffreyWowk@.discussions.microsoft.com> wrote in message
news:78D313D8-0C25-4BB9-8AB5-A4BB3E4438DE@.microsoft.com...
> How do I set it up so that people who are inside my local network, but
> outside my domain to get access to my reports.
> Any thoughts would be great
> Jeff