Hi, I am having a problem where I get an rsInternalError when trying to add new system role assignment in SQL 2000 / Reporting Services 2000. After further inspection of the RS log files (reportserverwebapp log file) I see the following: System.Data.SqlClient.SqlException: SQL Server does not exist or access denied. at ReportingServicesCustomSecurity.DataAccess.ReturnConnection(String server) at ReportingServicesCustomSecurity.AuthenticationExtension.IsValidPrincipalName(String principalName) As you can see I am using a custom sercurity DLL file to allow my application to communicate with Reporting Services using forms authentication. This seems to be working well as I can access the Reporting Services home page and I can for example change the reporting services name in site settings and create new folders under the home directory in Reporting services. So the RS web app does seem to be communicating with the reportserver DB. It's just whenever I try to add a new role assignment I get the rsInternalError and I can't figure out why this is! Why would I get access denied after successfully logging in to RS using forms auth? Any help on this issue would be much appreciated. Thanks in advance. Phil.

Hello jbusselman, Thank you for your question. I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience. Thank you for your understanding and support. Regards, Bin Long TechNet Subscriber Supportin forum If you have any feedback on our support, please contact tnmff@microsoft.comPlease remember to mark the replies as answers if they help and unmark them if they provide no help.

Hello jbusselman, Did you make some changes to your database? Regards, Swetha G | Microsoft Online Community Support Get or Request Code Sample from Microsoft Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Hi, I'm not sure why you think my username is jbusselman did you reply to the wrong post maybe? I am still trying to fix this problem. I think it is an environment specific problem where my custom security DLL is simply unable to access my application's database across the network. At the point when I try to assign a new security role in reporting services, I think the ReportServer uses the custom security DLL to verify that the user name exists in my application. The custom security DLL takes the username as input and attempts to connect to my application's database to confirm if the user name exists in the application's user table. I think it is this step of trying to connect to my application's database that is failing. I think this might be due to a network or firewall issue. Thanks for any suggestions anyone has on this issue. Phil.

Hi, I'm not sure why you think my username is jbusselman did you reply to the wrong post maybe? I am still trying to fix this problem. I think it is an environment specific problem where my custom security DLL is simply unable to access my application's database across the network. At the point when I try to assign a new security role in reporting services, I think the ReportServer uses the custom security DLL to verify that the user name exists in my application. The custom security DLL takes the username as input and attempts to connect to my application's database to confirm if the user name exists in the application's user table. I think it is this step of trying to connect to my application's database that is failing. I think this might be due to a network or firewall issue. Thanks for any suggestions anyone has on this issue. Phil.

Hello Phil, I apologize for the wrong addressing. Coming to your problem, the IsValidPrincipalName and Verify User methods are used to determine whether a user name is valid. The IsValidPrincipalName method simply calls the VerifyUser method to perform this task. The VerifyUser method looks for the user name in the user store database. If the user name is found in the table, it is valid. The VerifyUser method is called by a method in the AuthorizationExtension class. This is done to validate the user name in a configuration file. The IsValidPrincipal-Name method is called from Reporting Services whenever you create a new role assignment. This is done to validate the user name entered for that role assignment, before the assignment is saved in the ReportServer catalog. From the exception stack it looks like the IsValidPrincipalName method in the custom extension is trying to access a data provider and receiving the error. 1. You can check the connection string to the custom security user storage database to make that that is correct. Is that database accessible from the Report Server machine? You can test this using a .UDL connection file. 2. You can also run a SQL Profiler trace on the user storage database to find out if the validation request is querying the database. A trace could also tell you what account is trying to access the database to perform the query. Regards, Swetha G | Microsoft Online Community Support Get or Request Code Sample from Microsoft Please remember to mark the replies as answers if they help and unmark them if they provide no help. Swetha

Hi Swetha, Thanks for your reply and useful information. I am currently waiting to find out the result of the first test you suggest: 1. You can check the connection string to the custom security user storage database to make that that is correct. Is that database accessible from the Report Server machine? You can test this using a .UDL connection file. Is it also a valid test to try and connect to this database using SQL Query analyser on the report server machine? I'm hoping that this also results in the same access denied error and I can then take steps to troubleshoot the connectivity problem. Many Thanks, Phil.