RS2000: Subscriptions "Logon Failed"

Hi,
We get an "Logon Failed" message when running subscriptions;
ReportServer service runs using an domain account. Domain account has
run-as-a-service, logon-locally and "impersonate a client after
authentication" and the apprioriate database rights.
What is the "required privilege" (see below) the reportserver is requiring?
Regards,
Erik Tamminga
ReportingServicesService!library!968!03/08/2006-11:19:11:: e ERROR: Throwing
Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
Logon failed., ;
Info:
Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
Logon failed. --> System.Runtime.InteropServices.COMException (0x80070522):
A required privilege is not held by the client.
at System.Runtime.InteropServices.Marshal.ThrowExceptionForHR(Int32
errorCode, IntPtr errorInfo)
at RSRemoteRpcClient.RemoteLogon.GetRemoteImpToken(String pUserName,
String pDomain, String pPassword, Boolean bTryRemote, IntPtr& pImpToken)
at
Microsoft.ReportingServices.Diagnostics.DatasourceRuntimeContext.MakeUserToken(String
userName, String userPwd, String domain)From here:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/rsadmin/htm/drp_deploying_v1_0lmh.asp
Hope it helps
1.. Decide which accounts to use for Report Server services. Reporting
Services requires three accounts:
2.. Report Server Windows service requires an account to log on to the
local system. Microsoft recommends that you use Local System if you are
installing on Windows 2000. For more information about this recommendation,
see Service Account.
3.. Report Server Web service requires an account to log on to the local
system. Because it is an ASP.NET application, it runs using the ASPNET
account. If you are running Windows 2000, you cannot specify a different
account to use during Setup; you must use the account that is defined for
ASP.NET. If you are running Windows Server 2003, the default is Network
Service, but you can choose to run the service as Local System.
4.. Report Server Web service requires an account to log on to the SQL
Server instance that hosts the report server database. You can specify a
domain account, a SQL Server login, or Local System. You can also use the
credentials that the Report Server Web service uses to log on to the system.
For more information, see Report Server Database Setup.
"Erik Tamminga" <agnimmate@.muimetca.ln_revese_the_previous> wrote in message
news:OcR0JGqQGHA.3896@.TK2MSFTNGP15.phx.gbl...
> Hi,
> We get an "Logon Failed" message when running subscriptions;
> ReportServer service runs using an domain account. Domain account has
> run-as-a-service, logon-locally and "impersonate a client after
> authentication" and the apprioriate database rights.
> What is the "required privilege" (see below) the reportserver is
> requiring?
> Regards,
> Erik Tamminga
> ReportingServicesService!library!968!03/08/2006-11:19:11:: e ERROR:
> Throwing
> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
> Logon failed., ;
> Info:
> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
> Logon failed. --> System.Runtime.InteropServices.COMException
> (0x80070522): A required privilege is not held by the client.
> at System.Runtime.InteropServices.Marshal.ThrowExceptionForHR(Int32
> errorCode, IntPtr errorInfo)
> at RSRemoteRpcClient.RemoteLogon.GetRemoteImpToken(String pUserName,
> String pDomain, String pPassword, Boolean bTryRemote, IntPtr& pImpToken)
> at
> Microsoft.ReportingServices.Diagnostics.DatasourceRuntimeContext.MakeUserToken(String
> userName, String userPwd, String domain)
>|||Thanks Beth,
But; RS is able to start, login to the databases. RS WebApplication works as
expected but only the Subscriptions give me a logon failed when they're
scheduled to run. It seems to have something to do with RS not being able to
render the reports using the account used for subscriptions. Any idears on
how to fix this?
Erik
"Beth" <scratchbakery@.msn.com> wrote in message
news:%23ClUKBtQGHA.3916@.TK2MSFTNGP11.phx.gbl...
> From here:
> http://msdn.microsoft.com/library/default.asp?url=/library/en-us/rsadmin/htm/drp_deploying_v1_0lmh.asp
> Hope it helps
> 1.. Decide which accounts to use for Report Server services. Reporting
> Services requires three accounts:
> 2.. Report Server Windows service requires an account to log on to the
> local system. Microsoft recommends that you use Local System if you are
> installing on Windows 2000. For more information about this
> recommendation, see Service Account.
> 3.. Report Server Web service requires an account to log on to the local
> system. Because it is an ASP.NET application, it runs using the ASPNET
> account. If you are running Windows 2000, you cannot specify a different
> account to use during Setup; you must use the account that is defined for
> ASP.NET. If you are running Windows Server 2003, the default is Network
> Service, but you can choose to run the service as Local System.
> 4.. Report Server Web service requires an account to log on to the SQL
> Server instance that hosts the report server database. You can specify a
> domain account, a SQL Server login, or Local System. You can also use the
> credentials that the Report Server Web service uses to log on to the
> system. For more information, see Report Server Database Setup.
> "Erik Tamminga" <agnimmate@.muimetca.ln_revese_the_previous> wrote in
> message news:OcR0JGqQGHA.3896@.TK2MSFTNGP15.phx.gbl...
>> Hi,
>> We get an "Logon Failed" message when running subscriptions;
>> ReportServer service runs using an domain account. Domain account has
>> run-as-a-service, logon-locally and "impersonate a client after
>> authentication" and the apprioriate database rights.
>> What is the "required privilege" (see below) the reportserver is
>> requiring?
>> Regards,
>> Erik Tamminga
>> ReportingServicesService!library!968!03/08/2006-11:19:11:: e ERROR:
>> Throwing
>> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
>> Logon failed., ;
>> Info:
>> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
>> Logon failed. --> System.Runtime.InteropServices.COMException
>> (0x80070522): A required privilege is not held by the client.
>> at System.Runtime.InteropServices.Marshal.ThrowExceptionForHR(Int32
>> errorCode, IntPtr errorInfo)
>> at RSRemoteRpcClient.RemoteLogon.GetRemoteImpToken(String pUserName,
>> String pDomain, String pPassword, Boolean bTryRemote, IntPtr& pImpToken)
>> at
>> Microsoft.ReportingServices.Diagnostics.DatasourceRuntimeContext.MakeUserToken(String
>> userName, String userPwd, String domain)
>|||Hi Erik,
i think for the subscription to work you need to have Credentials stored
securely in the report server. Subscription will not work for reports which
dont have this stored credentials. When you run the report it will work, but
subscription will not work. The reason is DataSources for that report does
not have stored credentials i.e it has either have windows credential or no
credential. in order that reports have subscrpiton enabled you have to check
the "Credentials stored securely in the report server" and enter the user
name and pwd. you can either enter a sql login or windows login based on the
authentication type. and finally click Apply button to store it. Then do the
subscrpion it will work.
Bava
"Erik Tamminga" wrote:
> Thanks Beth,
> But; RS is able to start, login to the databases. RS WebApplication works as
> expected but only the Subscriptions give me a logon failed when they're
> scheduled to run. It seems to have something to do with RS not being able to
> render the reports using the account used for subscriptions. Any idears on
> how to fix this?
> Erik
> "Beth" <scratchbakery@.msn.com> wrote in message
> news:%23ClUKBtQGHA.3916@.TK2MSFTNGP11.phx.gbl...
> > From here:
> > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/rsadmin/htm/drp_deploying_v1_0lmh.asp
> > Hope it helps
> > 1.. Decide which accounts to use for Report Server services. Reporting
> > Services requires three accounts:
> > 2.. Report Server Windows service requires an account to log on to the
> > local system. Microsoft recommends that you use Local System if you are
> > installing on Windows 2000. For more information about this
> > recommendation, see Service Account.
> > 3.. Report Server Web service requires an account to log on to the local
> > system. Because it is an ASP.NET application, it runs using the ASPNET
> > account. If you are running Windows 2000, you cannot specify a different
> > account to use during Setup; you must use the account that is defined for
> > ASP.NET. If you are running Windows Server 2003, the default is Network
> > Service, but you can choose to run the service as Local System.
> > 4.. Report Server Web service requires an account to log on to the SQL
> > Server instance that hosts the report server database. You can specify a
> > domain account, a SQL Server login, or Local System. You can also use the
> > credentials that the Report Server Web service uses to log on to the
> > system. For more information, see Report Server Database Setup.
> > "Erik Tamminga" <agnimmate@.muimetca.ln_revese_the_previous> wrote in
> > message news:OcR0JGqQGHA.3896@.TK2MSFTNGP15.phx.gbl...
> >> Hi,
> >>
> >> We get an "Logon Failed" message when running subscriptions;
> >>
> >> ReportServer service runs using an domain account. Domain account has
> >> run-as-a-service, logon-locally and "impersonate a client after
> >> authentication" and the apprioriate database rights.
> >>
> >> What is the "required privilege" (see below) the reportserver is
> >> requiring?
> >>
> >> Regards,
> >>
> >> Erik Tamminga
> >>
> >> ReportingServicesService!library!968!03/08/2006-11:19:11:: e ERROR:
> >> Throwing
> >> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
> >> Logon failed., ;
> >> Info:
> >> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
> >> Logon failed. --> System.Runtime.InteropServices.COMException
> >> (0x80070522): A required privilege is not held by the client.
> >> at System.Runtime.InteropServices.Marshal.ThrowExceptionForHR(Int32
> >> errorCode, IntPtr errorInfo)
> >> at RSRemoteRpcClient.RemoteLogon.GetRemoteImpToken(String pUserName,
> >> String pDomain, String pPassword, Boolean bTryRemote, IntPtr& pImpToken)
> >> at
> >> Microsoft.ReportingServices.Diagnostics.DatasourceRuntimeContext.MakeUserToken(String
> >> userName, String userPwd, String domain)
> >>
> >
> >
>
>|||Hi,
Thanks for the reply, but all of my data sources already use stored
credentials (sql-server's sa user, ..., yeah I know ...). So I still think
it has something to do with the win2000 environment and rs supplied
credentials. Have another look at the reported error, it talks about
impersonation, tokens and the windows user/password/domain combo wich are
not used by SQL authenticating data sources.
Regads,
Erik
"Bava Mani" <BavaMani@.discussions.microsoft.com> wrote in message
news:5F64E059-6709-4881-85ED-D9612700BB3B@.microsoft.com...
> Hi Erik,
> i think for the subscription to work you need to have Credentials stored
> securely in the report server. Subscription will not work for reports
> which
> dont have this stored credentials. When you run the report it will work,
> but
> subscription will not work. The reason is DataSources for that report does
> not have stored credentials i.e it has either have windows credential or
> no
> credential. in order that reports have subscrpiton enabled you have to
> check
> the "Credentials stored securely in the report server" and enter the user
> name and pwd. you can either enter a sql login or windows login based on
> the
> authentication type. and finally click Apply button to store it. Then do
> the
> subscrpion it will work.
> Bava
> "Erik Tamminga" wrote:
>> Thanks Beth,
>> But; RS is able to start, login to the databases. RS WebApplication works
>> as
>> expected but only the Subscriptions give me a logon failed when they're
>> scheduled to run. It seems to have something to do with RS not being able
>> to
>> render the reports using the account used for subscriptions. Any idears
>> on
>> how to fix this?
>> Erik
>> "Beth" <scratchbakery@.msn.com> wrote in message
>> news:%23ClUKBtQGHA.3916@.TK2MSFTNGP11.phx.gbl...
>> > From here:
>> > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/rsadmin/htm/drp_deploying_v1_0lmh.asp
>> > Hope it helps
>> > 1.. Decide which accounts to use for Report Server services. Reporting
>> > Services requires three accounts:
>> > 2.. Report Server Windows service requires an account to log on to the
>> > local system. Microsoft recommends that you use Local System if you are
>> > installing on Windows 2000. For more information about this
>> > recommendation, see Service Account.
>> > 3.. Report Server Web service requires an account to log on to the
>> > local
>> > system. Because it is an ASP.NET application, it runs using the ASPNET
>> > account. If you are running Windows 2000, you cannot specify a
>> > different
>> > account to use during Setup; you must use the account that is defined
>> > for
>> > ASP.NET. If you are running Windows Server 2003, the default is Network
>> > Service, but you can choose to run the service as Local System.
>> > 4.. Report Server Web service requires an account to log on to the SQL
>> > Server instance that hosts the report server database. You can specify
>> > a
>> > domain account, a SQL Server login, or Local System. You can also use
>> > the
>> > credentials that the Report Server Web service uses to log on to the
>> > system. For more information, see Report Server Database Setup.
>> > "Erik Tamminga" <agnimmate@.muimetca.ln_revese_the_previous> wrote in
>> > message news:OcR0JGqQGHA.3896@.TK2MSFTNGP15.phx.gbl...
>> >> Hi,
>> >>
>> >> We get an "Logon Failed" message when running subscriptions;
>> >>
>> >> ReportServer service runs using an domain account. Domain account has
>> >> run-as-a-service, logon-locally and "impersonate a client after
>> >> authentication" and the apprioriate database rights.
>> >>
>> >> What is the "required privilege" (see below) the reportserver is
>> >> requiring?
>> >>
>> >> Regards,
>> >>
>> >> Erik Tamminga
>> >>
>> >> ReportingServicesService!library!968!03/08/2006-11:19:11:: e ERROR:
>> >> Throwing
>> >> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
>> >> Logon failed., ;
>> >> Info:
>> >> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
>> >> Logon failed. --> System.Runtime.InteropServices.COMException
>> >> (0x80070522): A required privilege is not held by the client.
>> >> at System.Runtime.InteropServices.Marshal.ThrowExceptionForHR(Int32
>> >> errorCode, IntPtr errorInfo)
>> >> at RSRemoteRpcClient.RemoteLogon.GetRemoteImpToken(String pUserName,
>> >> String pDomain, String pPassword, Boolean bTryRemote, IntPtr&
>> >> pImpToken)
>> >> at
>> >> Microsoft.ReportingServices.Diagnostics.DatasourceRuntimeContext.MakeUserToken(String
>> >> userName, String userPwd, String domain)
>> >>
>> >
>> >
>>|||Hi,
Are you using any custom dataset extension or custom assemblie?
why cant you give a domain\windowuser and pwd and click the check box below
"Use as Windows credentials when connecting to the data source" in the
datasource and try running the report. see if its work.
Bava
"Erik Tamminga" wrote:
> Hi,
> Thanks for the reply, but all of my data sources already use stored
> credentials (sql-server's sa user, ..., yeah I know ...). So I still think
> it has something to do with the win2000 environment and rs supplied
> credentials. Have another look at the reported error, it talks about
> impersonation, tokens and the windows user/password/domain combo wich are
> not used by SQL authenticating data sources.
> Regads,
> Erik
> "Bava Mani" <BavaMani@.discussions.microsoft.com> wrote in message
> news:5F64E059-6709-4881-85ED-D9612700BB3B@.microsoft.com...
> > Hi Erik,
> > i think for the subscription to work you need to have Credentials stored
> > securely in the report server. Subscription will not work for reports
> > which
> > dont have this stored credentials. When you run the report it will work,
> > but
> > subscription will not work. The reason is DataSources for that report does
> > not have stored credentials i.e it has either have windows credential or
> > no
> > credential. in order that reports have subscrpiton enabled you have to
> > check
> > the "Credentials stored securely in the report server" and enter the user
> > name and pwd. you can either enter a sql login or windows login based on
> > the
> > authentication type. and finally click Apply button to store it. Then do
> > the
> > subscrpion it will work.
> >
> > Bava
> >
> > "Erik Tamminga" wrote:
> >
> >> Thanks Beth,
> >>
> >> But; RS is able to start, login to the databases. RS WebApplication works
> >> as
> >> expected but only the Subscriptions give me a logon failed when they're
> >> scheduled to run. It seems to have something to do with RS not being able
> >> to
> >> render the reports using the account used for subscriptions. Any idears
> >> on
> >> how to fix this?
> >>
> >> Erik
> >>
> >> "Beth" <scratchbakery@.msn.com> wrote in message
> >> news:%23ClUKBtQGHA.3916@.TK2MSFTNGP11.phx.gbl...
> >> > From here:
> >> > http://msdn.microsoft.com/library/default.asp?url=/library/en-us/rsadmin/htm/drp_deploying_v1_0lmh.asp
> >> > Hope it helps
> >> > 1.. Decide which accounts to use for Report Server services. Reporting
> >> > Services requires three accounts:
> >> > 2.. Report Server Windows service requires an account to log on to the
> >> > local system. Microsoft recommends that you use Local System if you are
> >> > installing on Windows 2000. For more information about this
> >> > recommendation, see Service Account.
> >> > 3.. Report Server Web service requires an account to log on to the
> >> > local
> >> > system. Because it is an ASP.NET application, it runs using the ASPNET
> >> > account. If you are running Windows 2000, you cannot specify a
> >> > different
> >> > account to use during Setup; you must use the account that is defined
> >> > for
> >> > ASP.NET. If you are running Windows Server 2003, the default is Network
> >> > Service, but you can choose to run the service as Local System.
> >> > 4.. Report Server Web service requires an account to log on to the SQL
> >> > Server instance that hosts the report server database. You can specify
> >> > a
> >> > domain account, a SQL Server login, or Local System. You can also use
> >> > the
> >> > credentials that the Report Server Web service uses to log on to the
> >> > system. For more information, see Report Server Database Setup.
> >> > "Erik Tamminga" <agnimmate@.muimetca.ln_revese_the_previous> wrote in
> >> > message news:OcR0JGqQGHA.3896@.TK2MSFTNGP15.phx.gbl...
> >> >> Hi,
> >> >>
> >> >> We get an "Logon Failed" message when running subscriptions;
> >> >>
> >> >> ReportServer service runs using an domain account. Domain account has
> >> >> run-as-a-service, logon-locally and "impersonate a client after
> >> >> authentication" and the apprioriate database rights.
> >> >>
> >> >> What is the "required privilege" (see below) the reportserver is
> >> >> requiring?
> >> >>
> >> >> Regards,
> >> >>
> >> >> Erik Tamminga
> >> >>
> >> >> ReportingServicesService!library!968!03/08/2006-11:19:11:: e ERROR:
> >> >> Throwing
> >> >> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
> >> >> Logon failed., ;
> >> >> Info:
> >> >> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException:
> >> >> Logon failed. --> System.Runtime.InteropServices.COMException
> >> >> (0x80070522): A required privilege is not held by the client.
> >> >> at System.Runtime.InteropServices.Marshal.ThrowExceptionForHR(Int32
> >> >> errorCode, IntPtr errorInfo)
> >> >> at RSRemoteRpcClient.RemoteLogon.GetRemoteImpToken(String pUserName,
> >> >> String pDomain, String pPassword, Boolean bTryRemote, IntPtr&
> >> >> pImpToken)
> >> >> at
> >> >> Microsoft.ReportingServices.Diagnostics.DatasourceRuntimeContext.MakeUserToken(String
> >> >> userName, String userPwd, String domain)
> >> >>
> >> >
> >> >
> >>
> >>
> >>
>
>