'NT AUTHORITY\ANONYMOUS LOGON' - help !!
Hello to all, Can someone please help with the error that I am getting. I came back from holidays and non of our reports are working. I've been told that no one changed anything but I cant say for sure and now its my job to fix it. All reports previously worked and now all data sources are returning the error Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON' I've a feeling KERBEROS is broken but I've run out of ideas to fix it. I've checked the SPNs from the database Server and Report Server and it looks ok. I ran select * from sys.dm_exec_connections from reportserverdb and I'm seeingKERBEROS and NTLM connections in the output. Please help !! Management need their reports :( thank you.
July 11th, 2011 5:48pm

sorry .... I'll add more details .... Here is my datasource details : 1. Data source type : Microsoft SQL Server 2. Connection String : Datasource=Instancename,portnumber;Initial Catalog=Databasename;Integrated Security=True 3. Connect using : Windows Integrated Security
Free Windows Admin Tool Kit Click here and download it now
July 11th, 2011 5:52pm

Hi, Check if the below link helps you. http://www.sqlservercentral.com/Forums/Topic881617-150-1.aspx#bm884781MSBI Developer
July 11th, 2011 5:58pm

Thanks for the link .... I will check it out .... Also. the error log of the Reporting SQL Instance shows this on startup The SQL Server Network Interface library could not register the Service Principal Name (SPN) for the SQL Server service. Error: 0x2098, state: 15. Failure to register an SPN may cause
Free Windows Admin Tool Kit Click here and download it now
July 11th, 2011 6:32pm

Update : I deleted and re-created all SPN's for domain account running sql and domain account running SSRS and now the error I get is A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections. (provider: SQL Network Interfaces, error: 26 - Error Locating Server/Instance Specified) .......
July 12th, 2011 11:30am

Hi ilikefondue, Generally, the error 26 happen when the instance name in the connection string is incorrect, or the user is not allowed to connect to the data source SQL Server due to firewall restriction. In this case, if the data source SQL Server is in the same server of SQL Server Reporting Services, we are able to connect to it from SQL Server Reporting Services report server. However, in other machines, they should not able to connect to SQL Server as firewall restriction. We can try the following steps to fix the issue: 1. If the SQL Server uses static port, please make sure 1433 is opened from firewall. 2. If the SQL Server uses dynamic post, please make sure SQL Server Browser is running, and UDP 1434 is opened from firewall. 3. Make sure the user has the permissions to connect to the SQL Server. 4. If using named instance, make sure the instance name is correct. Finally, for the error, we can find detailed error message from SQL Server error logs. By default, the logs can be found from: C:\Program Files\Microsoft SQL Server\MSSQL10.<Instance>\MSSQL\Log If there is anything unclear, please feel free to ask. Thanks, Sharp Wang Please remember to mark the replies as answers if they help you and unmark them if they provide no help.
Free Windows Admin Tool Kit Click here and download it now
July 13th, 2011 5:01am

Thank you for your comments .... More background .... The reporting Server is on a different server than SQL Server. SQL Server and Reporting Server started up using different domain accounts. The domain accounts and Servers are set for delegation and the Reporting Service account has rights to the reporting databases. I can connect from Report Server to SQL Server : I can log in from the ReportingServer "Server" using SQLCMD and the ReportingServer Service account to SQL Server and I can select data back from ReportServer database. From Reporting Server config manager>database>change database>testconnection : I can make a test connection to the SQL Server Instance. Here are my SPNS (I've changed domain and ou for example) Report Server domain account C:\>setspn -L domain\ReportSVC Registered ServicePrincipalNames for CN=ReportSVC,OU=Service Accounts,OU=abc,DC=def,DC=abc,DC=org: http/reports http/reports.domain.def Server Server domain account C:\> C:\>setspn -L domain\sqlclustsvc Registered ServicePrincipalNames for CN=sqlclustsvc,OU=Service Accounts,OU=abc,DC=def,DC=def,DC=org: MSSQLSvc/server02.abc.def.org:1407 MSSQLSvc/server02.abc.def:SQL2 MSSQLSvc/server02:1407 And here is my authentication type from RSreportserver.config <Authentication> <AuthenticationTypes> <RSWindowsNegotiate/> <RSWindowsKerberos/> <!-- <RSWindowsNTLM/> --> </AuthenticationTypes> I thought I was suffering from double-hop issue but I've checked SPNS, RSreportserver.config, delegation etc. Im still getting Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Any ideas ? thanks
July 13th, 2011 1:15pm

Update : Been working on this issue for days :( I need a fresh pair of eyes on this. If anyone has any ideas, please help. thanks
Free Windows Admin Tool Kit Click here and download it now
July 15th, 2011 12:11pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics