Monday, October 7, 2013

SSRS:Deployment - fixing Rsaccess denied

------------------------------------------------------------------------------------------------------------------------


Refer the Source Video:Deploying SSRS reports 2008,R2 and 2012


------------------------------------------------------------------------------------------------------------------------


Summary:

1. In the "Reporting Services Configuration Manager" 

"Report Manager Url" <- using the url the user can see the report.

"Web Service Url" <- location where report is deployed.

(copy this "Web Service Url"  and in the report design solution explorer , properties,

, in the Target Url , paste it  & deploy the report)


2.For "fixing Rsaccess" , in the IE  options , in 
i.advanced tab "Windows authentication" selected, 
ii.in "local intranet" security see the "Automatic log using current user & password" is checked.



------------------------------------------------------------------------------------------------------------------------

SolutionExplorer:Shared Data Sources(...rds):Shared DataSets:Reports(...rds)

Report Server Url - Webservice report url - allow to deply to that location

Report Manager Url - allow to use the report

1.Program->SQL Server Management Studio-
Analysis Services
Configuration Tools
-Reporting Services Configuration Manager
-SQL Server Configuration Manager
-SQL Server Error & Usuage Reporting
SQL Server Installation Center
Data Quality Services

-Reporting Services Configuration Manager
scr1:Server Name: Report Server Instance:SQL2012
scr2:-Service Account -Web Service URL -Database -Report Manager URL
-Email Settings -Execution Account -Encryption Keys -Scal-out Deployment
Current Report Server: SQL Server Instance,InstanceID,..Server Database Name:ReportServer$SQL2012,....
2.Check first the "Report Manager URL" , gives the error message
User ... does not have required permissions.Verify that sufficient permissions have been
granted and Windows Account Control(UAC) restrictions has been addressed.

[UAC thinks this user is not part of "Administrator Group". Even for users when they enter windows userid, password or active directory userid,password , ..]
a)Certain options to set in IE brower settings:Tools->Internet Options-Advanced chk:(checked) Enable Integrated Windows Authentication : Security tab:local intranet:sites:advance:localhostname appears
Security:CustomLevel:chk:Checked:Automatic logon with current username & password, close IE Start Program:IE:Run as administrator:Open the Report Manager URL

b)-Reporting Services Configuration Manager-Web Service URL (copy the Webservice Report URL)
Go to BIDS(Microsoft Visual Studio)(where we deploy our report):Open the report-Project(right click) -Properties:TargetServerURL:paste the Webservice Report URL :Right Click on Project:Choose Deploy
IE Start Program:IE:Run as administrator:Open the Report Manager URL , refresh it would show the report.

------------------------------------------------------------------------------------------------------------------------

Refer the Source Video:Report Deployment

------------------------------------------------------------------------------------------------------------------------

Summary:

1.In the "project" properties , Target Url is  the "Report manager url" , get that from configuration tool and paste it. Then deploy it.

2.In the report manager after deploying the report, when one click on "Data Source",

generally a  "domain\administrator" specified and the , check the "windows credential" to be used.

The user when try to run the report it uses the "administrator" account , that has access to the
report server.


------------------------------------------------------------------------------------------------------------------------

HR Reports (Project)
-Shared Data Sources
   -dsetAdventureWorks
-Reports

1."DataSource" & "Report" need to be deployed to the Server.
2.If you right click on "Shared Data Sources" & right click "Deploy" , it won't work as the Project "HR Reports" ( to point to the Server in Question).
a.Right Click on "HR Reports" , choose properties
Configuration Properties
Deployment
OverwriteDataSources:False{ if the shared DataSource,connection parameter changed,difficult}
TargetDataSourceFolder : Data Sources
TargetReportFolder: HR Reports
TargetServerURL:
(http://Servername/reportServer) - //localhost:8081/reportServer)
note1:{ instead of localhost if there is ServerName then will be used in TargetServerURL)
note2:In a Server,multiple Services are running , port80 generally WebService,so in configuration
setting 8081 as Report Server.
b.Highlight the  Project "HR Reports" , "Deploy" - it builds the project.One can indivially choose
"DataSources" and Reports to deploy too.
c.To verify: Goto Report Server:http://localhost:8081/Reports/Pages/Folder.aspx
See on the screen : Data Source      HR Reports
i.Click on "Data Source" -
in Connectstring - if test server mentioned change to point to right one, Catalog (<- Database)
Name:
Description:
Data Source Type:
Connection string: Data Source=..;Initial Catalog=AdventureWorks
Connect using:
-Credential supplied by the user running the report
    Display the following text to prompt user for a user name & password
    Use as windows credentials when connecting to the data source
-Credentials stored securely in the report server
  User name:    Password:
   -Use as Windows credentials when connecting to the data source
   -Impersonate the authenticated user after a connection has been made to the data source
-Windows integrated security
-Credentials are not required {Unsecure}
notes1:
{-Windows integrated security
Administor can run.Windows Integrated but another user  wonot be able to}
notes2:
{-Credentials stored securely in the report server
User name: domain\administrator Password:
-Use as Windows credentials when connecting to the data source
Any user having windows credential will go via. domain\administrator
 }
Apply Move Generate Model Delete

------------------------------------------------------------------------------------------------------------------------

Refer the Source Video:Reporting Services - Configuration

------------------------------------------------------------------------------------------------------------------------

Summary:

1. In the configuration tool , "service account" , better to specify a active directory account.

2.WebService url , Report manager url

note:
2005  the port 80 runs the iis web servive.
2008  there is not iis (port used is 8081), it has it's own web service as this has clustering mechanism which is when
one server down another runs the report. 
3.Database: create the report database where report will reside.

4.Email account: domain\someaccount -> reports are emailed

5.Execution account: use an "active directory" account when jobs run it uses it.

6.scale-out Deployment: add a server
   

------------------------------------------------------------------------------------------------------------------------

start-programs

Report Server Mode: Native
But for share point to be change.

Service Account:
Use built-in account:Local System
Use another account:
For one active directory account to cater to all servicces.

2005:
2008:clustering[Fault torlance - one goes down other can start,end](not use IIS )

Web Service URL:8081
   80 - Web Service running
   21- FTP
   25-Mail
   SSL Certificate

Database:For Share Point , change

Email Setting:
     Use SMTP

Execution Account:
     For schduling (active directory)

Encryption Keys:
   sensitive information (
     Backup the key

Scale-out Deployment;
   Clustering

------------------------------------------------------------------------------------------------------------------------

No comments:

Post a Comment