When I try to create a Pover View report over my .bism connection I get following error:
Original XML
rsCannotRetrieveModel400An error
occurred while loading the model for the item or data source
'http://localhost/rpl/model.bism'. Verify that the connection
information is correct and that you have permissions to access the
data source.http://go.microsoft.com/fwlink/?LinkId=20476&EvtSrc=Microsoft.ReportingServices.Diagnostics.Utilities.ErrorStrings&EvtID=rsCannotRetrieveModel&ProdName=Microsoft%20SQL%20Server%20Reporting%20Services&ProdVer=11.0.2100.60Microsoft SQL
Server Reporting Services11.0.2100.60127OsIndependent1033ReportingServicesLibraryAn error
occurred while loading the model for the item or data source
'http://localhost/rpl/Model.bism'. Verify that the connection
information is correct and that you have permissions to access the
data
source.Microsoft.ReportingServices.ProcessingCoreCannot
impersonate user for data source
'TemporaryDataSource'.Microsoft.ReportingServices.ServiceRuntimeCannot
convert claims identity to windows
token.Microsoft.SharePointCould
not retrieve a valid Windows
identity.mscorlibAccess
is
denied.
Readable version
rsCannotRetrieveModel400An error occurred while loading the model for the item or data source 'http://localhost/rpl/model.bism'.
Verify that the connection information is correct and that you have permissions to access the data source.http://go.microsoft.com/fwlink/?LinkId=20476&EvtSrc=Microsoft.ReportingServices.Diagnostics.Utilities.ErrorStrings&EvtID=rsCannotRetrieveModel&ProdName=Microsoft%20SQL%20Server%20Reporting%20Services&ProdVer=11.0.2100.60
Microsoft SQL Server Reporting Services11.0.2100.60127OsIndependent1033ReportingServicesLibrary
An error occurred while loading the model for the item or data source 'http://localhost/rpl/Model.bism'.
Verify that the connection information is correct and that you have permissions to access the data source.Microsoft.ReportingServices.
ProcessingCoreCannot impersonate user for data source 'TemporaryDataSource'.
Microsoft.ReportingServices.
ServiceRuntimeCannot convert claims identity to windows token.Microsoft.SharePointCould not retrieve a valid Windows identity.mscorlib
Access is denied
Microsoft SQL Server Reporting Services11.0.2100.60127OsIndependent1033ReportingServicesLibrary
An error occurred while loading the model for the item or data source 'http://localhost/rpl/Model.bism'.
Verify that the connection information is correct and that you have permissions to access the data source.Microsoft.ReportingServices.
ProcessingCoreCannot impersonate user for data source 'TemporaryDataSource'.
Microsoft.ReportingServices.
ServiceRuntimeCannot convert claims identity to windows token.Microsoft.SharePointCould not retrieve a valid Windows identity.mscorlib
Access is denied
I am using SQL Server 2012 RTM, Sharepoint 2010, Windows Server 2008 R2 Enterprise with service pack 1. All SQL, Analysis Services and Sharepoint windows services run with the same domain account which is also administrator in local machine. That domain account is god in both SQL and Analysis Services. It also farm admin in sharepoint and all sharepoint services uses that account. IIS aplication pools run with that account too. I can connect by any other client like SQL Management Studio. What is wrong with Power View connection? Please help!
In SharePoint central administration, Navigate to Application Management -> Manage Services on the Server. Stop the service "Claims to Windows Token Service" and restart IIS. Should fix your problem.
Related
I am trying to install the Reporting role In SCCM but I have a lot of issues while trying to connect to the reporting server because I dont know about SQL :( ..
The reporting role is installed in a diferent server than the sccm and is working fine, there is acces to the https and http urls.
I have dissabled the firewall in both server for testing purposes but I am getting a message that says the conection string is not valid.
I have tested setting up the reporting database name or the SCCM database name but y cant get along the error.
When install a Reporting Services point on a remote Site System, you need to be sure that the Report server must host SQL Reporting Service. Reporting Services connects to the Configuration Manager site database to retrieve data that is returned when you run reports. So in your screenshot above:
Site Database Server Name: Your site database Server Name (If not default instance, specify instance name)
Database Name: Your site Server database Name
Typically the wizard automatically retrieves the site database server FQDN and SQL database name.
Reporting Services Server Instance: Reporting service instance Name on remote server
User Name: Specify a account that Reporting Service use to connect to Site Database to retrieve data.
If you go through Microsoft Website, you'll get full detailed step by step guide at: InstallReportingServicesPoint
Context
I have an Oracle 11g database instance and a SQL Server 2012 instance installed on 2 different servers in the same domain. The Oracle database is configured to accept connection with Integrated Security (ie. Active Directory authentication). SQL Server has the Reporting Services feature installed and configured. Reporting Services will connect to Oracle database using the Oracle .NET data provider from Microsoft.
Issue
When creating a data connection to the database in Visual Studio I have no problem to connect to the Oracle database using Integrated Security. I configured the connection with this connection string:
Data Source=INSTANCE_NAME;Integrated Security=True;Unicode=True
But whenever I try to create a data source in Reporting Services from the SSRS website, from Report Builder or from BIDS, I am getting a login error:
ORA-01017: invalid username/password; logon denied
I tried copying the exact same connection string but the result is always the same. It looks like Reporting Services is ignoring the Integrated Security=True option for an unknown reason.
Notes
The same issue occurs with SQL Server 2008 R2.
Oracle .NET data provider from Oracle cannot be used with Reporting Services.
I finally found what was the problem. When you need to pass credentials that needs to be transmitted to another server (Client -> SSRS -> DB), the default authentication system (NTLM) won't be enough because it can't perform double hop authentication. You need to give the rights to the report server to delegate authentication through Kerberos on the DC. So that means that you also have to enable RSWindowsNegotiate as the default authentication system for your report server and that you define SPNs for SSRS and its service account.
More details can be found here: https://serverfault.com/q/378096/85935
Our custom SharePoint site uses a standard connection string (in web.config) to a remote sql server using a sql server authentication. I need to know if it is possible to change this connection to use a SharePoint service account instead of a sql server account. If so, how do specify the service account in the connection string and how do you create a login and user for an sp service account when that user does not exist on the sql server machine and nor is it available on Active Directory.
Update:
I think I need to use integrated security in the connection string and run db calls within SPSecurity.RunWithElevatedPrivileges block. If i use this as a delegate, what sp account will the code be executed under and how do i assign a sql server login to a sharepoint account on a remote machine. Any links to sample code or articles explaining this process would be helpful.
Thanks.
From the SQL Server side, you should create a domain account for Sharepoint in AD. Then you log in to SQL Server via Management Studio (SQL2005 or later), on the left hand side click on security tab, and add a new login - you'll enter the domain Sharepoint service account, and give it the relevant permissions to the databases it needs to access.
For the Sharepoint side, you probably can edit web.config but there must be a Sharepoint admin tool to take care of this properly.
I have installed Team Foundation Server 2010 (basic configuration) on a Windows Server 2003 without any problems. But when I go to administer the Team Foundation Server Administration Console, I get the error when in the press "Administer Security" or "Group Membership"
Server was Unable to process request. ---> Team Foundation services are not available from the server. Technical information (for administrator): The request colud note asking Processed Because the application is configured correctly note. No host service is available for the request.
If I try to go to http://localhost:8080/tfs, an I Get Runtime Error
In the Event Viewer I get following errors each time I try to do anything
Failue Aud - MSSQL$SQLEXPRESS - Login failed for user 'SAG-S01\ASPNET'. Reason: Failed to open the explicitly specified database. [CLIENT: ]
Error - TFS Services - Exception Message: TF246017: Team Foundation Server could not connect to the database. Verify that the server that is hosting the database is operational, and that network problems are not blocking communication with the server. (type DatabaseConnectionException)
You could start investigating by starting the SQL Server Management Studio and navigate to the SQLExpress instance on your data tier. See if the Tfs databases are running and whether the ASPNET user has access rights for the database.
Now I found where the problem was. It was set in the IIS server that TFS would run with .NET 1.1 instead of 4.0
It's weird. Can you check that you can access the database via Sql Server Management Studio.
If you can access with local system account or sa user; you have to deep dive form TFS - SQL Server connections. May be your user doesn't grant to connect SQL. Please try first, connect via Management Studio.
I have an analysis services cube in SQL server 2005 which I'm connecting to via an excel front end.
When I connect via one user its fine, but when I log on to the same machine as another user I get an error in my excel spreadhseet - "user...does not have access to the [Cube name] database"
Obviously the first user has the correct permissions, but how do I set up analysis services to allow other users to join the party?
Login to the machine with an account that is an administrator (Domain\CubeAdmin) on the cube. Connect to the cube in BIDS (run devenv.exe and open Analysis Services Database).
Under Roles, create a reader role and in the Membership tab, add the user account (Domain\NewUser).
All this will only work if the SSAS Server Administrator gives the Domain\NewUser access to the server.
The Windows user accounts that you are trying to access SQL Analysis Services with need to be added to the Roles in the Cube that would allow the permissions you want.
If you are connecting over HTTP using msmdpump.dll through IIS you need to turn on Authentication for that site and allow the Windows user account to access the site.
If the IIS site using msmdpump is on another machine and you aren't using a domain then the accounts would need to exist on both servers with the same password.
I know this is old but for other's reference, I had to repair the MS Office install to resolve a connectivity issue with SSAS. The user was added to the role, but the error "Cannot connect to server" was displayed when connecting.
Raj has already answered the initial question... You need users to be set up with at least read access to your SSAS instance.
However, the error "Cannot connect to server" does not necessarily mean it's an authentication issue, it actually doesn't mean much. I've seen this error on Excel 2007 on various occasions, where the underlying error could be anything, this is just a generic error from Excel.
Several aspects that caused problems on my end were (things to check):
User has access to the web site (if not using anonymous auth)
ADOMD and OLEDB for Analysis Services are installed locally (correct version)
User propagated to SSAS has read access to instance (are you using ApplicationPoolIdentity?)
Handler mapping (script mapping for *.dll) is set up
For a complete guide of how to set up HTTP access for SSAS check:
Microsoft - Configure HTTP Access to SSAS via IIS
Cheers