Forms Security Extension Sample

Hi,

I have installed the SSRS 2005 Forms based login security extension as per the sample and instructions that come with the product install. I have double checked my work and debugged up to the point explained here.

My user is in the database and I can get to the login page. I have traced the code and can see the user being authenticated properly by server.LogonUser, the authentication cookie being created and placed in the response object, and then the redirect url being set to the reports/pages/folder.aspx. I have employed tcptrace and can see the sqlAuthCookie set in subsequent posts.

Unfortunately the redirect to folder.aspx never happens. I keep returning to UILogon.aspx. I think their is something either wrong with the auth cookie or the web.config in the ReportServer IIS virtual directory. The relevant xml from the web.config is attached below.

I would appreciate any thoughts. I am running on W2K3 SP1. Thanks.

Mitch

<identity impersonate="false" />

<!--<authentication mode="Windows" />-->

<authentication mode="Forms">

<forms loginUrl="logon.aspx" name="sqlAuthCookie" timeout="60" path="/"></forms>

</authentication>

<authorization>

<deny users="?" />

</authorization>

Mitch, are you initially navigating to SSRS by using http://localhost or http://someMachineName?

If you hit your site with http://localhost/reports, you'll see the behavior you're mentioning above: (It's basically a side-effect of the way the code inside the Forms Auth sample is written). Try http://someMachineName/reports instead and see if you have better luck.

|||Thanks, that was it. Now I can proceed with integrating SSRS with IBM Tivoli Access manager!

Forms Authentication...Can it really be done?

I could really use help getting form authentication to work. I have a box with a web site and ReportingServices installed(which if I can get this working will be moved to the DMZ). The databases are on a different machine(which will on on our network).

I have been working with the sample provided with the install and this blog.

http://blogs.msdn.com/bimusings/archive/2005/12/05/500195.aspx

My problem is that I can logon and authenticate but when I call ListChildren() my System.Net.CredentialCache.DefaultCredentials is empty so I get nothing back from the call.

I know that I have a valid cookie because after I logon I can use the Reports and the ReportServer URL's and go directly to those pages.

Can someone tell me what I need to do to make ListChildren() work? Do I still call ListChildren()? Documentation is scarce and would appreciate any help provided.

Thanks

-JW

I was afraid I wouldn't get a response to this.

Can anyone help?

forms authentication problem

I've searched the newgroups, and have found others who had this problem, but
their solutions don't seem
to work for my case:
I installed the forms authentication sample and it works fine on my local
machine. I then installed it
on my production server, and http://machinename/reportserver works fine, but
the ReportManager
http://machinename/reports does not work. I seem to be able to register
users but can't login. Why would
logon.aspx work and not uilogon.aspx? I followed the directions for
setting up the config files to the letter, and am using the machine name
rather than localhost to connect.
Any suggestions?
Vince Nicotina
Thomson Delmar LearningI don't think the example indicates that you must change the web.config to
Forms authentication... That is also where the logon form is named..
--
Wayne Snyder, MCDBA, SQL Server MVP
Mariner, Charlotte, NC
www.mariner-usa.com
(Please respond only to the newsgroups.)
I support the Professional Association of SQL Server (PASS) and it's
community of SQL Server professionals.
www.sqlpass.org
"Vincenet Nicotina" <vincent_no_spam_please_.nicotina@.delmar.com> wrote in
message news:OGnZ6b3aEHA.3944@.tk2msftngp13.phx.gbl...
> I've searched the newgroups, and have found others who had this problem,
but
> their solutions don't seem
> to work for my case:
> I installed the forms authentication sample and it works fine on my local
> machine. I then installed it
> on my production server, and http://machinename/reportserver works fine,
but
> the ReportManager
> http://machinename/reports does not work. I seem to be able to register
> users but can't login. Why would
> logon.aspx work and not uilogon.aspx? I followed the directions for
> setting up the config files to the letter, and am using the machine name
> rather than localhost to connect.
> Any suggestions?
> Vince Nicotina
> Thomson Delmar Learning
>|||The ReportServer web.config is set for Forms, in accordance with the
directions, but the
ReportManager web.config is not (i've read that it doesn't need to be).
I don't really understand how ReportManager and ReportServer interact. Can
anyone explain it?Any other ideas out there? Why do we need to seperate
login boxes anway?
"Wayne Snyder" <wayne.snyder@.mariner-usa.com> wrote in message
news:eF$rYzLbEHA.4032@.TK2MSFTNGP11.phx.gbl...
> I don't think the example indicates that you must change the web.config to
> Forms authentication... That is also where the logon form is named..
> --
> Wayne Snyder, MCDBA, SQL Server MVP
> Mariner, Charlotte, NC
> www.mariner-usa.com
> (Please respond only to the newsgroups.)
> I support the Professional Association of SQL Server (PASS) and it's
> community of SQL Server professionals.
> www.sqlpass.org
>
> "Vincenet Nicotina" <vincent_no_spam_please_.nicotina@.delmar.com> wrote in
> message news:OGnZ6b3aEHA.3944@.tk2msftngp13.phx.gbl...
> > I've searched the newgroups, and have found others who had this problem,
> but
> > their solutions don't seem
> > to work for my case:
> >
> > I installed the forms authentication sample and it works fine on my
local
> > machine. I then installed it
> > on my production server, and http://machinename/reportserver works fine,
> but
> > the ReportManager
> > http://machinename/reports does not work. I seem to be able to register
> > users but can't login. Why would
> > logon.aspx work and not uilogon.aspx? I followed the directions for
> > setting up the config files to the letter, and am using the machine name
> > rather than localhost to connect.
> >
> > Any suggestions?
> >
> > Vince Nicotina
> > Thomson Delmar Learning
> >
> >
>

Forms Authentication Not Working

I have installed SQL Server September CTP (Full Install) on a Windows 2003
Server with IIS 6 setup with SSL. I have also installed Visual Studio 2005
(Full Install).
I installed the custom security extension example that comes with the server
install and the AdventureWorks sample reports.
When I login to the web-based Report Manager I get the following error:
Key cannot be null. Parameter name: key
The error message is displayed on an rs manager like interface with no links.
I followed the instructions that came with the Custom security extension to
the tee. I have tried several different configurations including non-SSL and
nothing works.
Does anyone know what this error pertains to or has ANYONE been able to get
Forms Authentication work AT ALL? Microsoft is not responding to any of our
posts so I guess it's up to us.
Thanks in advance.I am having the same problem with the final release version. Did you ever
resolve this issue?
"Zach" wrote:
> I have installed SQL Server September CTP (Full Install) on a Windows 2003
> Server with IIS 6 setup with SSL. I have also installed Visual Studio 2005
> (Full Install).
> I installed the custom security extension example that comes with the server
> install and the AdventureWorks sample reports.
> When I login to the web-based Report Manager I get the following error:
> Key cannot be null. Parameter name: key
> The error message is displayed on an rs manager like interface with no links.
> I followed the instructions that came with the Custom security extension to
> the tee. I have tried several different configurations including non-SSL and
> nothing works.
> Does anyone know what this error pertains to or has ANYONE been able to get
> Forms Authentication work AT ALL? Microsoft is not responding to any of our
> posts so I guess it's up to us.
> Thanks in advance.

Forms Authentication

I have installed and implemented the Security Extension for forms
authentication. I am trying to get the reportviewer control to show me the
requested report and with the toolbar. When I make a call to my server's
reporting server, I get resource not found. The request looks like this -
http://servername/reportserver?/AdHoc/Test/Testing
This is where the proplem resides. Can anyone help me. I am under a tight
deadline for a project and have spen over 50 hours trying to get this stuff
to work.
Thanks,
bspannStrange behavior , but just try to see if the Item is
actually available on the Report Server.
Just go to the link http://servername/reportserver and
follow the folder path you have specified and see if the
item is present!
>--Original Message--
>I have installed and implemented the Security Extension
for forms
>authentication. I am trying to get the reportviewer
control to show me the
>requested report and with the toolbar. When I make a
call to my server's
>reporting server, I get resource not found. The request
looks like this -
>http://servername/reportserver?/AdHoc/Test/Testing
>This is where the proplem resides. Can anyone help me.
I am under a tight
>deadline for a project and have spen over 50 hours trying
to get this stuff
>to work.
>Thanks,
>bspann
>.
>|||I solved my problem. Here are the details. Hopefully this will help other
people as well. The application that I am working on at the moment has it's
own form authentication. We wanted to integrate RS with our app. So we
followed the instructions from microsoft. We left out things in regards to
salting passwords since we do that in our framework. I could get reports
rendered from the soap API but we really wanted the toolbar. After reading
the discussion group, I found that the toolbar is not supported in the Soap
API (GRRRRRRRRRR). After I calmed down from cursing RS development team's
name, I proceded to use the reportviewer control. That is when I was getting
the weird behavior. So I placed a simple aspx form in the ReportServer
directory called logon.aspx that just redirected to our applicaitons logon
page. That was not working. Then, an ephifany occured. I went back to the
Logon.aspx page and change the following code.
<% Page.Response.Redirect("http://servername/appname/logon.aspx") %>
to
<%
System.Web.Security.FormsAuthentication.RedirectFromLoginPage(System.Web.HttpContext.Current.User.Identity.Name, false); %>
That took care of all my issues. Now everything is working just fine.
Thanks,
bspann
"Ravi" wrote:
> Strange behavior , but just try to see if the Item is
> actually available on the Report Server.
> Just go to the link http://servername/reportserver and
> follow the folder path you have specified and see if the
> item is present!
> >--Original Message--
> >I have installed and implemented the Security Extension
> for forms
> >authentication. I am trying to get the reportviewer
> control to show me the
> >requested report and with the toolbar. When I make a
> call to my server's
> >reporting server, I get resource not found. The request
> looks like this -
> >http://servername/reportserver?/AdHoc/Test/Testing
> >This is where the proplem resides. Can anyone help me.
> I am under a tight
> >deadline for a project and have spen over 50 hours trying
> to get this stuff
> >to work.
> >
> >Thanks,
> >
> >bspann
> >.
> >
>