Permissions

The Report Manager will not show on a client machine unless I logon with the local machine administrator account of the report server. The logon credentials that I am using, on the client, is in the administrators group of the local machine of the server.

I am only able to author and view reports when physically logged on to the machine with the report server. The same credentials that were used on client machine are used when logging on to the server machine. I have granted as much permission to the user account as possible unless I am missing something in the report server.

It seems like a related permission issue happens when trying to run Report Builder. I get a better error message when running Report Builder(See Below). To be sure I have given explicit server administrator to the client logon. Furthermore I have given content manager rights to the client logon for a model and a report.

The client machine has framework 2.0 installed.

Here is the error produced when attempting to run the Report Builder.

PLATFORM VERSION INFO
Windows : 5.1.2600.131072 (Win32NT)
Common Language Runtime : 2.0.50727.42
System.Deployment.dll : 2.0.50727.42 (RTM.050727-4200)
mscorwks.dll : 2.0.50727.42 (RTM.050727-4200)
dfdll.dll : 2.0.50727.42 (RTM.050727-4200)
dfshim.dll : 2.0.50727.42 (RTM.050727-4200)

SOURCES
Deployment url : http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application

ERROR SUMMARY
Below is a summary of the errors, details of these errors are listed later in the log.
* Activation of http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application resulted in exception. Following failure messages were detected:
+ Downloading http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application did not succeed.
+ The remote server returned an error: (401) Unauthorized.
+ The target principal name is incorrect

COMPONENT STORE TRANSACTION FAILURE SUMMARY
No transaction error was detected.

WARNINGS
There were no warnings during this operation.

OPERATION PROGRESS STATUS
* [1/23/2006 1:55:22 PM] : Activation of http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application has started.

ERROR DETAILS
Following errors were detected during this operation.
* [1/23/2006 1:55:22 PM] System.Deployment.Application.DeploymentDownloadException (Unknown subtype)
- Downloading http://{Server Name:port number}/ReportServer/ReportBuilder/ReportBuilder.application did not succeed.
- Source: System.Deployment
- Stack trace:
at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
at System.Deployment.Application.SystemNetDownloader.DownloadAllFiles()
at System.Deployment.Application.FileDownloader.Download(SubscriptionState subState)
at System.Deployment.Application.DownloadManager.DownloadManifestAsRawFile(Uri& sourceUri, String targetPath, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestDirectBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options)
at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut)
at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)
Inner Exception
System.Net.WebException
- The remote server returned an error: (401) Unauthorized.
- Source: System
- Stack trace:
at System.Net.HttpWebRequest.GetResponse()
at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
Inner Exception
System.ComponentModel.Win32Exception
- The target principal name is incorrect
- Source: System
- Stack trace:
at System.Net.NTAuthentication.GetOutgoingBlob(Byte[] incomingBlob, Boolean throwOnError, SecurityStatus& statusCode)
at System.Net.NTAuthentication.GetOutgoingBlob(String incomingBlob)
at System.Net.NegotiateClient.DoAuthenticate(String challenge, WebRequest webRequest, ICredentials credentials, Boolean preAuthenticate)
at System.Net.NegotiateClient.Authenticate(String challenge, WebRequest webRequest, ICredentials credentials)
at System.Net.AuthenticationManager.Authenticate(String challenge, WebRequest request, ICredentials credentials)
at System.Net.AuthenticationState.AttemptAuthenticate(HttpWebRequest httpWebRequest, ICredentials authInfo)
at System.Net.HttpWebRequest.CheckResubmitForAuth()
at System.Net.HttpWebRequest.CheckResubmit(Exception& e)

COMPONENT STORE TRANSACTION DETAILS
No transaction information is available.

reading the other posts about permissions leads me to believe that the permissions problem has to do with the number of hops from the client to the server processes. I have not fixed the problem but I am sure this is what it is.

I am still not sure about one thing. Since windows auth. is used, is it possible that the web service and the front end are picking up on the credentials when running it from the server machine? Alternatively, when running it from the client, kerberos auth. must be used to pass the credentials from the front end to the web service.

|||I am getting the same error trying to donwnload the report builder to any client. Works fine with a server\local account but not with a network account. I added myself to the local Server\SQLServer2005SQLBrowserUser & Server\SQLServer2005SQLReportServerUser groups with no avail.