Installing reporting services on another machine

[williey]

What is the best practice for installing reporting services?
We had reporting services installed on a separate server from sql server. IIS is on the same server as reporting services.

Using Windows Authentication, the web app ran into a problem with double-hop issue when trying to bring up a report on reporting server.

Has anyone encounter this issue? What is the recommendation design? We are trying to architect everything using Windows Authentication.

------------------------------------------
There are 10 kinds of people in this world. One that understands binary and the other one that does not.

 

[mrdenny]

The recommended option is to have Reporting Services on another machine.

If you want to use Windows Auth you need to use basic authentication on the web server, not integrated auth. This will get you around the double hop issue.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

 

[williey]

So there no way around this limitation. We have Microsoft on the phone and they could not figure it out.


------------------------------------------
There are 10 kinds of people in this world. One that understands binary and the other one that does not.

 

[mrdenny]

No there is no way around the double hoop limitation. It's a basic security principal of NTLM.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com

 

[Catadmin]

FYI: I heard this problem was fixed with SSRS 2005, but we haven't tried implementing it yet.

Which makes me curious. What version of reporting services are you using?



Catadmin - MCDBA, MCSA
"No, no. Yes. No, I tried that. Yes, both ways. No, I don't know. No again. Are there any more questions?"
-- Xena, "Been There, Done That"

 

[williey]

We are using SQL Server Reporting Services 2005. For the time being we are using sql authentication to keep moving ahead.



------------------------------------------
There are 10 kinds of people in this world. One that understands binary and the other one that does not.

 

[mrdenny]

It all depends on how the security on the web server is handled as to if it's fixed. The double hop issue isn't a SQL Server or IIS issue. It's an NTLM security consideration.

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

--Anything is possible. All it takes is a little research. (Me)

http://www.mrdenny.com