Using the Trusted Account for Reporting services in Moss 2007 integrated mode

we have following. 

live / dev / test          ---     environments

live , dev work intended sql reporting services 2008 
-      running sharepoint 2007 sp2  in integrated mode.   

test, mirrors live , dev. has issue when trying use trusted account in central administration integrate reporting services. error if use windows authentication works.

error below suggested troubleshooting have gone through our sql team link take recommend step trouble shooting. 

5.3 “an unexpected error occurred while connecting report server. verify report server available , configured sharepoint integrated mode” http://msdn.microsoft.com/en-us/library/ee384252(v=sql.100).aspx

we can see there access issues on reporting logs.

library!reportserver_0-4!1344!05/24/2012-16:57:43:: e error: throwing microsoft.reportingservices.diagnostics.utilities.accessdeniedexception: , microsoft.reportingservices.diagnostics.utilities.accessdeniedexception: permissions granted user 'domain\user' insufficient performing operation.;

we have tried high level access accounts sql , sharepoint admin right same result.

the environments have lot of customisations, in effort refine troubleshooting of issue setup "vanilla"  farm the correlating versions of software live , dev. found replicate issue. 

**central admin hosted on reporting services server

0: setup windows 2003 ent 32bit r2 vm  (host name: xxxxxxx01)
-      run liveupdate on base install 
-      install .net 2.0 
-      install .net 3.5 (sp1)
-      iis 6
-      (disableloopback added registry)   


1: install sql 2008 ent rtm  (10.00.1600.22)
-      reporting services selected 
-      database engine 
-      basic management tools
-      full text 
o      reporting services installed not configured @ point.

2: install sharepoint 2007 ent sp 2
-      installed complete install.
-      psconfig run
-      ca setup on port 12345
-      created new farm 
-      (all databases on sql instance test01 provided sql team have been tagged vb_xxxxx (** vanilla build)
-      setup services 
-      setup ssp
-      added mail server 
-      created 3 web apps 
o      1 (port:80) basic team site collection
o      2 (port:4321) ssp administration host
o      3 (port:4322 sites host 
*** default (zone) left hostname mapping 


3: install rssharepoint.msi 
-      rssharepoint skipca=1
-      rscustomaction /i
o      successfully installed

4: configure rs
-      set services account domain\sqlaccount
-      set sites
-      backup encryption key/create one
sp
-      under ca grant db access rs 
-      set service url 
-      ***issue***

windows authentication mode works , trusted account mode gives error. when trying set data connection or trying run reports. 

 

hi magnetac,

based on scenario, issue can caused when kerberos authentication has been set correctly , delegation in double hop scenario succeed, reporting services integration has been set trusted account rather windows authentication. causes sharepoint continue impersonate logged-on user when contacting reporting services; when reporting services compares application pool account user account making request, not equal.

to work around issue, please see “5.5 permissions granted user 'domain\user' insufficient performing operation” section of following article:
http://msdn.microsoft.com/en-us/library/ee384252(v=sql.100).aspx

regards,
mike yin

SQL Server  >  SQL Server Reporting Services, Power View