Use NT authentication to logon SQL Server

[heidi88]

ODBC connection is set up to use NT authentication to access SQL Server database. When I publish a Crystal report in Crystal Enterprise and preview it using NT logon i.e. company\user in 'Database Logon' screen, got error "can not open SQL Server".

Do I have to use SQL Server authentication to be able to access SQL database in CE?

I'd really appreciate your help!!!

 

[SurfingGecko]

Try running the Page Server under a Domain/admin account and see if this helps. Could be that the PS is being denied access to the DSN.

May also want to have a look at this KBase --

http://support.crystaldecisions.com/library/kbase/articles/c2011626.asp

Cheers,

SurfingGecko

http://www.surfinggeckosoftware.com

Home of Crystal Ease

 

[DanENW]

A comment on SurfingGecko's post.

If you read the KBase article correctly you need a simple domain account, not a domain admin; however, the account should also be a local admin on the server(s) where the CE services (PS, JS, WCS, etc) run.

 

[SurfingGecko]

Correct and good point.

I typically set up an account and make it a domain/admin as it takes rights almost completely out of the mix. The Local admin still will/may not have enough rights in the domain to access something. Could be 6 months down the road and you would have to troubeshoot all over again.



Cheers,

SurfingGecko

http://www.surfinggeckosoftware.com

Home of Crystal Ease

 

[DanENW]

We started running with a domain admin account and SI7 4 years ago, 2 years ago we dropped the domain admin accound for security reasons. Our network admins were less than comfortable with the loose power of the Seagate Info system running with a domain admin account and in excess of 60 servers on our network. We have not had any problems using a simple domain account which is also a local admin. As rights to other servers are required the specific rights are granted to the account to keep everything moving smoothly.

 

[heidi88]

Thank you so much for all your help.

It's working now. I used a generic domain account and configure Page server and job server to run under this account.

Thanks again!

 

[SurfingGecko]

Excellent

Cheers,

SurfingGecko

http://www.surfinggeckosoftware.com

Home of Crystal Ease

 

[kellington]

I read these suggestions and got similar from Crystal support. However, this option negates any user security already established in the database. We have stored procs as sources that use the connecting user information to determine what data they can see.

Crystal has said that the basic ePortfolio app would need to be customized to do a connection, create the record set and pass that as an ADO connection to the report.

Question: Does anyone have sample ASP code to do this?

 

[SurfingGecko]

I understand your point kellington and I do not think you are alone. This is one reason, why I kind of recommend creating a domain user and then assign this user the rights. Agreed it is a bit (well a lot in some cases) of a pain.

I have used the CD feedback system to submit enhancement on this. Not knowing if it gets in, but it is a thought.

Depending on your verison of CR you could have a look at the following

http://support.crystaldecisions.com/communityCS/FilesAndUpdates/aspxmps85.exe.asp

http://support.crystaldecisions.com/communityCS/FilesAndUpdates/aspxmps8.exe.asp

Cheers,

SurfingGecko

http://www.surfinggeckosoftware.com

Home of Crystal Ease

 

[meonnet]

Heidi88--I have a question for you. you said "It's working now. I used a generic domain account and configure Page server and job server to run under this account."

here is my challenge. we need to use NT authentication on SQL server for CE9. my ODBC connection is configured for NT authentication. i am running my PS RJS RAS with a domain userID with access to resources. but when i preview the report in CE, i get a login prompt again and again.

sql log in works perfect on the report while using CR or even on CE.
so... my question. can i use the NT longin of the user to access data in MSSQL. i want to enforce the security i set up in MSSQL with roles.
thank you!

 

[heidi88]

Sure, you can use NT login to access data in MSSQL. When you create a user account in MSSQL, you have option to use NT authentication or SQL authentication. After you add a user using NT login, add the user to user-defined role(s).

 

[meonnet]

i am having the problem that you had before. "ODBC connection is set up to use NT authentication to access SQL Server database. When I publish a Crystal report in Crystal Enterprise and preview it using NT logon i.e. company\user in 'Database Logon' screen, got error "can not open SQL Server".

Do I have to use SQL Server authentication to be able to access SQL database in CE?"

right now, I can let a domain user i.e. mycompany\userID gets access to CE. the user can also view, schedule reports based on the permission i set up on the report object for this user thru CE. the problem i am having is: my ODBC connection is using SQL Server authentication. what i want is: setting up my ODBC connection with Windows NT authentication using the network login ID i.e. the ID of the user who is logging on CE and viewing the report. Basically, for every user accessing a report, this particular report is using the user's NT login to access data thru ODBC. in this way, i can enforce the roles i have in DB. if a user is accessing a report and that report contains a view, table or any DB object that the user does NOT have access, then the report should fail. pls, tell me you understand my situatioin or else, i need to work on my english.



the problem is, the reports i am hosting on CE use hard coded sql authentication.