Is there some setting somewhere that would break this? I have some views
with order by clauses in them that are now totally ignored. I did not write
these...I would never put an order by clause in the view but I also do not
have access to the csharp code that is calling this so I cannot move the
clause into the appropriate place.
This worked fine under SQL2000 -- is there some setting I'm missing?That was an undocumented behavior of SQL Server 2000, and
unfortunately was discovered and was put into use by many. The
problem with undocumented behaviors is that they can change without
warning, with a new release or even a service pack. This one stopped
working with SQL Server 2005.
If you want data returned in a specific order, the ONLY way to be sure
to get it is with an ORDER BY on the (outer) query.
Roy Harvey
Beacon Falls, CT
On Mon, 17 Jul 2006 16:21:32 -0700, "Tim Greenwood" <tim_greenwood AT
yahoo DOT com> wrote:
>Is there some setting somewhere that would break this? I have some views
>with order by clauses in them that are now totally ignored. I did not write
>these...I would never put an order by clause in the view but I also do not
>have access to the csharp code that is calling this so I cannot move the
>clause into the appropriate place.
>This worked fine under SQL2000 -- is there some setting I'm missing?
>|||What you are seeing the the appropriate behavior. A VIEW 'should' not order
data UNLESS it is a necessary part of obtaining the required results, e.g.,
SELECT TOP 5%.
In the past, a VIEW would sometimes, but contrary to 'what should have been'
select the TOP 100% and then ORDER BY as a way to 'kludge' a sorted
resultset. TOP 100 percent and ORDER BY is ignored in SQL 2005.
In SQL 2005, it is the responsibility of the query that accesses the VIEW to
sort the data after the receiving the view resultset.
If the VIEW definitions are in the database (as they should be), you can
easily correct the view definintion. However, as you note, the application
code will have to be corrected in order for the queries to produce properly
sorted results.
This is another illustration of how having all data access operate through
Stored Procedures facilitates 'robustness'. If Stored Procedures were used,
it would be very easy for you to correct the problem.
You have few options.
Contact whoever wrote the code and request/require that it be corrected
since it was not written 'properly' and used unsupported features.
OR,
make a horrendous 'kludge'.
(1) Rename the views, and
(2) Create new stored procedures using the existing VIEW names, and in
those stored procedures, write the proper queries requesting data from the
renamed views and sorting it appropriately. (3) Test, Test, Test, Test, and
then Test.
Hopefully, someone will come up with other suggestions that will make this
outrageous kludge so difficult to stomach that you won't seriously consider
it.
--
Arnie Rowland
"To be successful, your heart must accompany your knowledge."
"Tim Greenwood" <tim_greenwood AT yahoo DOT com> wrote in message
news:%23jUN%23efqGHA.2180@.TK2MSFTNGP05.phx.gbl...
> Is there some setting somewhere that would break this? I have some views
> with order by clauses in them that are now totally ignored. I did not
> write these...I would never put an order by clause in the view but I also
> do not have access to the csharp code that is calling this so I cannot
> move the clause into the appropriate place.
> This worked fine under SQL2000 -- is there some setting I'm missing?
>|||Before everyone fires off on me, the 'horrendous 'kludge' idea was meant to
be tongue in cheek.
The joke sould have never gotten past the 'Test' stage.
--
Arnie Rowland
"To be successful, your heart must accompany your knowledge."
"Arnie Rowland" <arnie@.1568.com> wrote in message
news:el52YxfqGHA.2452@.TK2MSFTNGP03.phx.gbl...
> What you are seeing the the appropriate behavior. A VIEW 'should' not
> order data UNLESS it is a necessary part of obtaining the required
> results, e.g., SELECT TOP 5%.
> In the past, a VIEW would sometimes, but contrary to 'what should have
> been' select the TOP 100% and then ORDER BY as a way to 'kludge' a sorted
> resultset. TOP 100 percent and ORDER BY is ignored in SQL 2005.
> In SQL 2005, it is the responsibility of the query that accesses the VIEW
> to sort the data after the receiving the view resultset.
> If the VIEW definitions are in the database (as they should be), you can
> easily correct the view definintion. However, as you note, the application
> code will have to be corrected in order for the queries to produce
> properly sorted results.
> This is another illustration of how having all data access operate through
> Stored Procedures facilitates 'robustness'. If Stored Procedures were
> used, it would be very easy for you to correct the problem.
> You have few options.
> Contact whoever wrote the code and request/require that it be corrected
> since it was not written 'properly' and used unsupported features.
> OR,
> make a horrendous 'kludge'.
> (1) Rename the views, and
> (2) Create new stored procedures using the existing VIEW names, and in
> those stored procedures, write the proper queries requesting data from the
> renamed views and sorting it appropriately. (3) Test, Test, Test, Test,
> and then Test.
> Hopefully, someone will come up with other suggestions that will make this
> outrageous kludge so difficult to stomach that you won't seriously
> consider it.
> --
> Arnie Rowland
> "To be successful, your heart must accompany your knowledge."
>
> "Tim Greenwood" <tim_greenwood AT yahoo DOT com> wrote in message
> news:%23jUN%23efqGHA.2180@.TK2MSFTNGP05.phx.gbl...
>> Is there some setting somewhere that would break this? I have some views
>> with order by clauses in them that are now totally ignored. I did not
>> write these...I would never put an order by clause in the view but I
>> also do not have access to the csharp code that is calling this so I
>> cannot move the clause into the appropriate place.
>> This worked fine under SQL2000 -- is there some setting I'm missing?
>|||Tim Greenwood wrote:
> Is there some setting somewhere that would break this? I have some views
> with order by clauses in them that are now totally ignored. I did not write
> these...I would never put an order by clause in the view but I also do not
> have access to the csharp code that is calling this so I cannot move the
> clause into the appropriate place.
> This worked fine under SQL2000 -- is there some setting I'm missing?
There is no change in SQL Server 2005. The ordering of rows is
undefined in the case of queries that don't specify ORDER BY. ORDER BY
in the view doesn't affect this.
--
David Portas, SQL Server MVP
Whenever possible please post enough code to reproduce your problem.
Including CREATE TABLE and INSERT statements usually helps.
State what version of SQL Server you are using and specify the content
of any error messages.
SQL Server Books Online:
http://msdn2.microsoft.com/library/ms130214(en-US,SQL.90).aspx
--
Showing posts with label setting. Show all posts
Showing posts with label setting. Show all posts
Friday, March 23, 2012
HELP! ORDER BY in views no longer works in SQL2K5
Is there some setting somewhere that would break this? I have some views
with order by clauses in them that are now totally ignored. I did not write
these...I would never put an order by clause in the view but I also do not
have access to the csharp code that is calling this so I cannot move the
clause into the appropriate place.
This worked fine under SQL2000 -- is there some setting I'm missing?That was an undocumented behavior of SQL Server 2000, and
unfortunately was discovered and was put into use by many. The
problem with undocumented behaviors is that they can change without
warning, with a new release or even a service pack. This one stopped
working with SQL Server 2005.
If you want data returned in a specific order, the ONLY way to be sure
to get it is with an ORDER BY on the (outer) query.
Roy Harvey
Beacon Falls, CT
On Mon, 17 Jul 2006 16:21:32 -0700, "Tim Greenwood" <tim_greenwood AT
yahoo DOT com> wrote:
>Is there some setting somewhere that would break this? I have some views
>with order by clauses in them that are now totally ignored. I did not writ
e
>these...I would never put an order by clause in the view but I also do not
>have access to the csharp code that is calling this so I cannot move the
>clause into the appropriate place.
>This worked fine under SQL2000 -- is there some setting I'm missing?
>|||What you are seeing the the appropriate behavior. A VIEW 'should' not order
data UNLESS it is a necessary part of obtaining the required results, e.g.,
SELECT TOP 5%.
In the past, a VIEW would sometimes, but contrary to 'what should have been'
select the TOP 100% and then ORDER BY as a way to 'kludge' a sorted
resultset. TOP 100 percent and ORDER BY is ignored in SQL 2005.
In SQL 2005, it is the responsibility of the query that accesses the VIEW to
sort the data after the receiving the view resultset.
If the VIEW definitions are in the database (as they should be), you can
easily correct the view definintion. However, as you note, the application
code will have to be corrected in order for the queries to produce properly
sorted results.
This is another illustration of how having all data access operate through
Stored Procedures facilitates 'robustness'. If Stored Procedures were used,
it would be very easy for you to correct the problem.
You have few options.
Contact whoever wrote the code and request/require that it be corrected
since it was not written 'properly' and used unsupported features.
OR,
make a horrendous 'kludge'.
(1) Rename the views, and
(2) Create new stored procedures using the existing VIEW names, and in
those stored procedures, write the proper queries requesting data from the
renamed views and sorting it appropriately. (3) Test, Test, Test, Test, and
then Test.
Hopefully, someone will come up with other suggestions that will make this
outrageous kludge so difficult to stomach that you won't seriously consider
it.
Arnie Rowland
"To be successful, your heart must accompany your knowledge."
"Tim Greenwood" <tim_greenwood AT yahoo DOT com> wrote in message
news:%23jUN%23efqGHA.2180@.TK2MSFTNGP05.phx.gbl...
> Is there some setting somewhere that would break this? I have some views
> with order by clauses in them that are now totally ignored. I did not
> write these...I would never put an order by clause in the view but I also
> do not have access to the csharp code that is calling this so I cannot
> move the clause into the appropriate place.
> This worked fine under SQL2000 -- is there some setting I'm missing?
>|||Before everyone fires off on me, the 'horrendous 'kludge' idea was meant to
be tongue in cheek.
The joke sould have never gotten past the 'Test' stage.
Arnie Rowland
"To be successful, your heart must accompany your knowledge."
"Arnie Rowland" <arnie@.1568.com> wrote in message
news:el52YxfqGHA.2452@.TK2MSFTNGP03.phx.gbl...
> What you are seeing the the appropriate behavior. A VIEW 'should' not
> order data UNLESS it is a necessary part of obtaining the required
> results, e.g., SELECT TOP 5%.
> In the past, a VIEW would sometimes, but contrary to 'what should have
> been' select the TOP 100% and then ORDER BY as a way to 'kludge' a sorted
> resultset. TOP 100 percent and ORDER BY is ignored in SQL 2005.
> In SQL 2005, it is the responsibility of the query that accesses the VIEW
> to sort the data after the receiving the view resultset.
> If the VIEW definitions are in the database (as they should be), you can
> easily correct the view definintion. However, as you note, the application
> code will have to be corrected in order for the queries to produce
> properly sorted results.
> This is another illustration of how having all data access operate through
> Stored Procedures facilitates 'robustness'. If Stored Procedures were
> used, it would be very easy for you to correct the problem.
> You have few options.
> Contact whoever wrote the code and request/require that it be corrected
> since it was not written 'properly' and used unsupported features.
> OR,
> make a horrendous 'kludge'.
> (1) Rename the views, and
> (2) Create new stored procedures using the existing VIEW names, and in
> those stored procedures, write the proper queries requesting data from the
> renamed views and sorting it appropriately. (3) Test, Test, Test, Test,
> and then Test.
> Hopefully, someone will come up with other suggestions that will make this
> outrageous kludge so difficult to stomach that you won't seriously
> consider it.
> --
> Arnie Rowland
> "To be successful, your heart must accompany your knowledge."
>
> "Tim Greenwood" <tim_greenwood AT yahoo DOT com> wrote in message
> news:%23jUN%23efqGHA.2180@.TK2MSFTNGP05.phx.gbl...
>sql
with order by clauses in them that are now totally ignored. I did not write
these...I would never put an order by clause in the view but I also do not
have access to the csharp code that is calling this so I cannot move the
clause into the appropriate place.
This worked fine under SQL2000 -- is there some setting I'm missing?That was an undocumented behavior of SQL Server 2000, and
unfortunately was discovered and was put into use by many. The
problem with undocumented behaviors is that they can change without
warning, with a new release or even a service pack. This one stopped
working with SQL Server 2005.
If you want data returned in a specific order, the ONLY way to be sure
to get it is with an ORDER BY on the (outer) query.
Roy Harvey
Beacon Falls, CT
On Mon, 17 Jul 2006 16:21:32 -0700, "Tim Greenwood" <tim_greenwood AT
yahoo DOT com> wrote:
>Is there some setting somewhere that would break this? I have some views
>with order by clauses in them that are now totally ignored. I did not writ
e
>these...I would never put an order by clause in the view but I also do not
>have access to the csharp code that is calling this so I cannot move the
>clause into the appropriate place.
>This worked fine under SQL2000 -- is there some setting I'm missing?
>|||What you are seeing the the appropriate behavior. A VIEW 'should' not order
data UNLESS it is a necessary part of obtaining the required results, e.g.,
SELECT TOP 5%.
In the past, a VIEW would sometimes, but contrary to 'what should have been'
select the TOP 100% and then ORDER BY as a way to 'kludge' a sorted
resultset. TOP 100 percent and ORDER BY is ignored in SQL 2005.
In SQL 2005, it is the responsibility of the query that accesses the VIEW to
sort the data after the receiving the view resultset.
If the VIEW definitions are in the database (as they should be), you can
easily correct the view definintion. However, as you note, the application
code will have to be corrected in order for the queries to produce properly
sorted results.
This is another illustration of how having all data access operate through
Stored Procedures facilitates 'robustness'. If Stored Procedures were used,
it would be very easy for you to correct the problem.
You have few options.
Contact whoever wrote the code and request/require that it be corrected
since it was not written 'properly' and used unsupported features.
OR,
make a horrendous 'kludge'.
(1) Rename the views, and
(2) Create new stored procedures using the existing VIEW names, and in
those stored procedures, write the proper queries requesting data from the
renamed views and sorting it appropriately. (3) Test, Test, Test, Test, and
then Test.
Hopefully, someone will come up with other suggestions that will make this
outrageous kludge so difficult to stomach that you won't seriously consider
it.
Arnie Rowland
"To be successful, your heart must accompany your knowledge."
"Tim Greenwood" <tim_greenwood AT yahoo DOT com> wrote in message
news:%23jUN%23efqGHA.2180@.TK2MSFTNGP05.phx.gbl...
> Is there some setting somewhere that would break this? I have some views
> with order by clauses in them that are now totally ignored. I did not
> write these...I would never put an order by clause in the view but I also
> do not have access to the csharp code that is calling this so I cannot
> move the clause into the appropriate place.
> This worked fine under SQL2000 -- is there some setting I'm missing?
>|||Before everyone fires off on me, the 'horrendous 'kludge' idea was meant to
be tongue in cheek.
The joke sould have never gotten past the 'Test' stage.
Arnie Rowland
"To be successful, your heart must accompany your knowledge."
"Arnie Rowland" <arnie@.1568.com> wrote in message
news:el52YxfqGHA.2452@.TK2MSFTNGP03.phx.gbl...
> What you are seeing the the appropriate behavior. A VIEW 'should' not
> order data UNLESS it is a necessary part of obtaining the required
> results, e.g., SELECT TOP 5%.
> In the past, a VIEW would sometimes, but contrary to 'what should have
> been' select the TOP 100% and then ORDER BY as a way to 'kludge' a sorted
> resultset. TOP 100 percent and ORDER BY is ignored in SQL 2005.
> In SQL 2005, it is the responsibility of the query that accesses the VIEW
> to sort the data after the receiving the view resultset.
> If the VIEW definitions are in the database (as they should be), you can
> easily correct the view definintion. However, as you note, the application
> code will have to be corrected in order for the queries to produce
> properly sorted results.
> This is another illustration of how having all data access operate through
> Stored Procedures facilitates 'robustness'. If Stored Procedures were
> used, it would be very easy for you to correct the problem.
> You have few options.
> Contact whoever wrote the code and request/require that it be corrected
> since it was not written 'properly' and used unsupported features.
> OR,
> make a horrendous 'kludge'.
> (1) Rename the views, and
> (2) Create new stored procedures using the existing VIEW names, and in
> those stored procedures, write the proper queries requesting data from the
> renamed views and sorting it appropriately. (3) Test, Test, Test, Test,
> and then Test.
> Hopefully, someone will come up with other suggestions that will make this
> outrageous kludge so difficult to stomach that you won't seriously
> consider it.
> --
> Arnie Rowland
> "To be successful, your heart must accompany your knowledge."
>
> "Tim Greenwood" <tim_greenwood AT yahoo DOT com> wrote in message
> news:%23jUN%23efqGHA.2180@.TK2MSFTNGP05.phx.gbl...
>sql
Monday, March 12, 2012
HELP! Custom authentication WITHOUT a login
Am I missing something when setting up Custom Authentication? We are testing
with the Enterprise version but only in development. We'd LOVE to do it with
the Standard Version so we don't have to buy Enterprise just for web apps.
Bascially, I don't want to require users to login to the report server AFTER
they've already logged in to our web application. I built the custom
authentication sample and had it working fine but when I try and use
logonUser to force credentials in, it still redirect to the login.aspx for
the reportserver.
Also, I don't want to use the SOAP API because our reports need to have a
toolbar
Is it possible to use Custom Forms Authentication with an internet app where
my reportserver is BEHIND the firewall and NOT require the user to log in
directly to the web server' Or is it as simple as moving the Report Server
up onto the exposed IIS server?
Any guidance or sample code would be much appreciated.I am in a very similar situation. If you did find any solution or code
snippet to help you out of this, can you please post it here ? It will be a
great help.
DC
"bteclt" <bteclt@.discussions.microsoft.com> wrote in message
news:3C03F1FF-392E-41DB-856B-1B46969D0CB0@.microsoft.com...
> Am I missing something when setting up Custom Authentication? We are
testing
> with the Enterprise version but only in development. We'd LOVE to do it
with
> the Standard Version so we don't have to buy Enterprise just for web apps.
> Bascially, I don't want to require users to login to the report server
AFTER
> they've already logged in to our web application. I built the custom
> authentication sample and had it working fine but when I try and use
> logonUser to force credentials in, it still redirect to the login.aspx for
> the reportserver.
> Also, I don't want to use the SOAP API because our reports need to have a
> toolbar
> Is it possible to use Custom Forms Authentication with an internet app
where
> my reportserver is BEHIND the firewall and NOT require the user to log in
> directly to the web server' Or is it as simple as moving the Report
Server
> up onto the exposed IIS server?
> Any guidance or sample code would be much appreciated.
>|||DC,
I can tell you this...I've spent days now reading the various forums and
have not found any luck with this. It appears most users are happy with the
SOAP API and reports without toolbars OR are trying to simply secure access
to the Report Manager via a login on the Web. I assume there are people that
want on-demand reports that render in a browser using the Viewer Control or
the Toolbar (and without a secondary login to the report server) but they
don't seem to want to respond to the forums. I've also seen a lot of
frustration from folks simply trying to implement the custom security. I
would have assume Microsoft would have been very interested in making
reporting via the Internet an easy task to implement but it appears they are
happy letting Crystal Reports keep a strong grip on the marketplace. Don't
get me wrong, they/we should be concerned about securing our apps but they
should also not make it required for us to be web developers, network admins
and security specialists and DBA's all at once...just seems like it gets to
the point where frustration wins out and staying with current reporting
solutions (we use Crystal) or searching for others is the best way out. I'll
post back to this forum anything else I find out though! I'd appreciate it
if you could do the same...maybe one of us can crack this
"DC" wrote:
> I am in a very similar situation. If you did find any solution or code
> snippet to help you out of this, can you please post it here ? It will be a
> great help.
> DC
>
> "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> news:3C03F1FF-392E-41DB-856B-1B46969D0CB0@.microsoft.com...
> > Am I missing something when setting up Custom Authentication? We are
> testing
> > with the Enterprise version but only in development. We'd LOVE to do it
> with
> > the Standard Version so we don't have to buy Enterprise just for web apps.
> >
> > Bascially, I don't want to require users to login to the report server
> AFTER
> > they've already logged in to our web application. I built the custom
> > authentication sample and had it working fine but when I try and use
> > logonUser to force credentials in, it still redirect to the login.aspx for
> > the reportserver.
> >
> > Also, I don't want to use the SOAP API because our reports need to have a
> > toolbar
> >
> > Is it possible to use Custom Forms Authentication with an internet app
> where
> > my reportserver is BEHIND the firewall and NOT require the user to log in
> > directly to the web server' Or is it as simple as moving the Report
> Server
> > up onto the exposed IIS server?
> >
> > Any guidance or sample code would be much appreciated.
> >
> >
>
>|||I am sorry about your frustration. This queston has been asked zillion times
in different flavors.
Let's leave RS aside. Your question boils down to:
"If I have two web applications (one Internet-facing and the other behind a
firewall) can a web user access the private web app? And the answer is no.
URL addressability (if this is what you want) relies on direct access to the
Report Server and your Report Server has to be Internet-facing as well. In
addition, since Forms Authentication is cookie-based, all cookie-related
restrictions apply, e.g. cross-domain cookies are not allowed so both apps
have to be on the same domain, when testing don't use localhost, etc.
As a side note, one of things developers including myself appreciate most
about RS is its extensible model. It allows you to extend/replace data,
security, delivery and rendering functionality. Try doing this with
Crystal...
--
Hope this helps.
---
Teo Lachev, MVP [SQL Server], MCSD, MCT
Author: "Microsoft Reporting Services in Action"
Publisher website: http://www.manning.com/lachev
Buy it from Amazon.com: http://shrinkster.com/eq
Home page and blog: http://www.prologika.com/
---
"bteclt" <bteclt@.discussions.microsoft.com> wrote in message
news:D26EE429-EAAF-44C2-9AA4-01F2B6206F39@.microsoft.com...
> DC,
> I can tell you this...I've spent days now reading the various forums and
> have not found any luck with this. It appears most users are happy with
the
> SOAP API and reports without toolbars OR are trying to simply secure
access
> to the Report Manager via a login on the Web. I assume there are people
that
> want on-demand reports that render in a browser using the Viewer Control
or
> the Toolbar (and without a secondary login to the report server) but they
> don't seem to want to respond to the forums. I've also seen a lot of
> frustration from folks simply trying to implement the custom security. I
> would have assume Microsoft would have been very interested in making
> reporting via the Internet an easy task to implement but it appears they
are
> happy letting Crystal Reports keep a strong grip on the marketplace.
Don't
> get me wrong, they/we should be concerned about securing our apps but they
> should also not make it required for us to be web developers, network
admins
> and security specialists and DBA's all at once...just seems like it gets
to
> the point where frustration wins out and staying with current reporting
> solutions (we use Crystal) or searching for others is the best way out.
I'll
> post back to this forum anything else I find out though! I'd appreciate
it
> if you could do the same...maybe one of us can crack this
>
> "DC" wrote:
> > I am in a very similar situation. If you did find any solution or code
> > snippet to help you out of this, can you please post it here ? It will
be a
> > great help.
> >
> > DC
> >
> >
> > "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> > news:3C03F1FF-392E-41DB-856B-1B46969D0CB0@.microsoft.com...
> > > Am I missing something when setting up Custom Authentication? We are
> > testing
> > > with the Enterprise version but only in development. We'd LOVE to do
it
> > with
> > > the Standard Version so we don't have to buy Enterprise just for web
apps.
> > >
> > > Bascially, I don't want to require users to login to the report server
> > AFTER
> > > they've already logged in to our web application. I built the custom
> > > authentication sample and had it working fine but when I try and use
> > > logonUser to force credentials in, it still redirect to the login.aspx
for
> > > the reportserver.
> > >
> > > Also, I don't want to use the SOAP API because our reports need to
have a
> > > toolbar
> > >
> > > Is it possible to use Custom Forms Authentication with an internet app
> > where
> > > my reportserver is BEHIND the firewall and NOT require the user to log
in
> > > directly to the web server' Or is it as simple as moving the Report
> > Server
> > > up onto the exposed IIS server?
> > >
> > > Any guidance or sample code would be much appreciated.
> > >
> > >
> >
> >
> >|||Teo,
Ok, if I follow your post here and my configuration is as follows:
a) SRS running on Default Web site in Production IIS envirnonment with
custom security dll set up as prescribed in the Microsoft Forms
Authentication Sample
b) Production web site (in this case on the exact same server as SRS) that
uses a Forms based authentication (ie. we have users table in MSSQL that is
checked with a login stored procedure based on click event from submit button
on web login page)
c) Production MSSQL DB is behind firewall and is connected through the web app
d) hyperlinks on the menu to individual SQL Reports
I want to run the SQL Reports in an on-demand format from the clicks on the
hyperlinks (in other words, click link, report opens with the toolbar on top
or preferably in the VIEWER control). Remember, I DON'T want to use the SOAP
API becuase I need the toolbars.
What's the best method to :
1) Instantiate the credentials into the report from the web app (I can hard
code these in the app based on the roles etc I set up in the user store from
the custom authentication sample)
2) Open the report without requiring a login to the report server (ie. login
automatically based on the credentials passed in step one). Specifically, I
HAVE TO have the toolbar on top or in a perfect world I'd like to use the
viewer
Any samples or links to examples would be GREAT!!! As an aside, we primarily
use vb.net in our code behinds so that is preferred but any solutions (C# or
VB) would save us in a big way. (And FYI - I have your book and have read
the section about doing this but it talks mostly about having users login to
the UIlogon.aspx and that's what I am trying to avoid...can this be done?)
Thanks in Advance!
BTE
"Teo Lachev [MVP]" wrote:
> I am sorry about your frustration. This queston has been asked zillion times
> in different flavors.
> Let's leave RS aside. Your question boils down to:
> "If I have two web applications (one Internet-facing and the other behind a
> firewall) can a web user access the private web app? And the answer is no.
> URL addressability (if this is what you want) relies on direct access to the
> Report Server and your Report Server has to be Internet-facing as well. In
> addition, since Forms Authentication is cookie-based, all cookie-related
> restrictions apply, e.g. cross-domain cookies are not allowed so both apps
> have to be on the same domain, when testing don't use localhost, etc.
> As a side note, one of things developers including myself appreciate most
> about RS is its extensible model. It allows you to extend/replace data,
> security, delivery and rendering functionality. Try doing this with
> Crystal...
> --
> Hope this helps.
> ---
> Teo Lachev, MVP [SQL Server], MCSD, MCT
> Author: "Microsoft Reporting Services in Action"
> Publisher website: http://www.manning.com/lachev
> Buy it from Amazon.com: http://shrinkster.com/eq
> Home page and blog: http://www.prologika.com/
> ---
> "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> news:D26EE429-EAAF-44C2-9AA4-01F2B6206F39@.microsoft.com...
> > DC,
> > I can tell you this...I've spent days now reading the various forums and
> > have not found any luck with this. It appears most users are happy with
> the
> > SOAP API and reports without toolbars OR are trying to simply secure
> access
> > to the Report Manager via a login on the Web. I assume there are people
> that
> > want on-demand reports that render in a browser using the Viewer Control
> or
> > the Toolbar (and without a secondary login to the report server) but they
> > don't seem to want to respond to the forums. I've also seen a lot of
> > frustration from folks simply trying to implement the custom security. I
> > would have assume Microsoft would have been very interested in making
> > reporting via the Internet an easy task to implement but it appears they
> are
> > happy letting Crystal Reports keep a strong grip on the marketplace.
> Don't
> > get me wrong, they/we should be concerned about securing our apps but they
> > should also not make it required for us to be web developers, network
> admins
> > and security specialists and DBA's all at once...just seems like it gets
> to
> > the point where frustration wins out and staying with current reporting
> > solutions (we use Crystal) or searching for others is the best way out.
> I'll
> > post back to this forum anything else I find out though! I'd appreciate
> it
> > if you could do the same...maybe one of us can crack this
> >
> >
> >
> > "DC" wrote:
> >
> > > I am in a very similar situation. If you did find any solution or code
> > > snippet to help you out of this, can you please post it here ? It will
> be a
> > > great help.
> > >
> > > DC
> > >
> > >
> > > "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> > > news:3C03F1FF-392E-41DB-856B-1B46969D0CB0@.microsoft.com...
> > > > Am I missing something when setting up Custom Authentication? We are
> > > testing
> > > > with the Enterprise version but only in development. We'd LOVE to do
> it
> > > with
> > > > the Standard Version so we don't have to buy Enterprise just for web
> apps.
> > > >
> > > > Bascially, I don't want to require users to login to the report server
> > > AFTER
> > > > they've already logged in to our web application. I built the custom
> > > > authentication sample and had it working fine but when I try and use
> > > > logonUser to force credentials in, it still redirect to the login.aspx
> for
> > > > the reportserver.
> > > >
> > > > Also, I don't want to use the SOAP API because our reports need to
> have a
> > > > toolbar
> > > >
> > > > Is it possible to use Custom Forms Authentication with an internet app
> > > where
> > > > my reportserver is BEHIND the firewall and NOT require the user to log
> in
> > > > directly to the web server' Or is it as simple as moving the Report
> > > Server
> > > > up onto the exposed IIS server?
> > > >
> > > > Any guidance or sample code would be much appreciated.
> > > >
> > > >
> > >
> > >
> > >
>
>|||Please find my comments inline.
--
Hope this helps.
---
Teo Lachev, MVP [SQL Server], MCSD, MCT
Author: "Microsoft Reporting Services in Action"
Publisher website: http://www.manning.com/lachev
Buy it from Amazon.com: http://shrinkster.com/eq
Home page and blog: http://www.prologika.com/
---
"bteclt" <bteclt@.discussions.microsoft.com> wrote in message
news:92AF49BE-22E1-4C01-B177-F802D3D5193C@.microsoft.com...
> Teo,
> Ok, if I follow your post here and my configuration is as follows:
> a) SRS running on Default Web site in Production IIS envirnonment with
> custom security dll set up as prescribed in the Microsoft Forms
> Authentication Sample
> b) Production web site (in this case on the exact same server as SRS) that
> uses a Forms based authentication (ie. we have users table in MSSQL that
is
> checked with a login stored procedure based on click event from submit
button
> on web login page)
> c) Production MSSQL DB is behind firewall and is connected through the web
app
> d) hyperlinks on the menu to individual SQL Reports
> I want to run the SQL Reports in an on-demand format from the clicks on
the
> hyperlinks (in other words, click link, report opens with the toolbar on
top
> or preferably in the VIEWER control). Remember, I DON'T want to use the
SOAP
> API becuase I need the toolbars.
> What's the best method to :
> 1) Instantiate the credentials into the report from the web app (I can
hard
> code these in the app based on the roles etc I set up in the user store
from
> the custom authentication sample)
Teo: There is only one way. You can the RS LogonUser SOAP API and pass the
user credientials. LogonUser in turns calls
IAuthenticationExtension.LogonUser in your custom security extension.
> 2) Open the report without requiring a login to the report server (ie.
login
> automatically based on the credentials passed in step one). Specifically,
I
> HAVE TO have the toolbar on top or in a perfect world I'd like to use the
> viewer
>
Teo: Same as above. Once LogonUser is called and
IAuthenticationExtension.LogonUser returns true (user is authenticated), the
Report Server will proceed by issuing an authentication ticket in the form
of a cookie (just like ASP.NET Forms Authentication does). From there, as
long as the cookie is passed back, the Report Server will treat the user is
authenticated and won't prompt the user to log in again.
> Any samples or links to examples would be GREAT!!! As an aside, we
primarily
> use vb.net in our code behinds so that is preferred but any solutions (C#
or
> VB) would save us in a big way. (And FYI - I have your book and have read
> the section about doing this but it talks mostly about having users login
to
> the UIlogon.aspx and that's what I am trying to avoid...can this be done?)
>
Teo: Thanks for purchasing my book. I tend to disagree with you though.
Chapter 15 (15.4.1) explains how RS custom security can be integrated with a
web application similar to your scenario. It leverages the enchanced version
of the Report Viewer I wrote but the concept is the same. Remember,
UILogon.aspx is for the Report Manager, Logon.aspx is what the Report Server
uses to prompt the user, Login.aspx is the custom login page inside my
application.
I wrote a two-part article about Forms Authentication which goes into more
details than my book does including role-membership, troubleshooting, etc.
It will be published by SQL Server Magazine in the February and March 2005
issues I think. I hope my article will help demistifying RS custom security.
> Thanks in Advance!
> BTE
> "Teo Lachev [MVP]" wrote:
> > I am sorry about your frustration. This queston has been asked zillion
times
> > in different flavors.
> >
> > Let's leave RS aside. Your question boils down to:
> >
> > "If I have two web applications (one Internet-facing and the other
behind a
> > firewall) can a web user access the private web app? And the answer is
no.
> > URL addressability (if this is what you want) relies on direct access to
the
> > Report Server and your Report Server has to be Internet-facing as well.
In
> > addition, since Forms Authentication is cookie-based, all cookie-related
> > restrictions apply, e.g. cross-domain cookies are not allowed so both
apps
> > have to be on the same domain, when testing don't use localhost, etc.
> >
> > As a side note, one of things developers including myself appreciate
most
> > about RS is its extensible model. It allows you to extend/replace data,
> > security, delivery and rendering functionality. Try doing this with
> > Crystal...
> > --
> > Hope this helps.
> >
> > ---
> > Teo Lachev, MVP [SQL Server], MCSD, MCT
> > Author: "Microsoft Reporting Services in Action"
> > Publisher website: http://www.manning.com/lachev
> > Buy it from Amazon.com: http://shrinkster.com/eq
> > Home page and blog: http://www.prologika.com/
> > ---
> >
> > "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> > news:D26EE429-EAAF-44C2-9AA4-01F2B6206F39@.microsoft.com...
> > > DC,
> > > I can tell you this...I've spent days now reading the various forums
and
> > > have not found any luck with this. It appears most users are happy
with
> > the
> > > SOAP API and reports without toolbars OR are trying to simply secure
> > access
> > > to the Report Manager via a login on the Web. I assume there are
people
> > that
> > > want on-demand reports that render in a browser using the Viewer
Control
> > or
> > > the Toolbar (and without a secondary login to the report server) but
they
> > > don't seem to want to respond to the forums. I've also seen a lot of
> > > frustration from folks simply trying to implement the custom security.
I
> > > would have assume Microsoft would have been very interested in making
> > > reporting via the Internet an easy task to implement but it appears
they
> > are
> > > happy letting Crystal Reports keep a strong grip on the marketplace.
> > Don't
> > > get me wrong, they/we should be concerned about securing our apps but
they
> > > should also not make it required for us to be web developers, network
> > admins
> > > and security specialists and DBA's all at once...just seems like it
gets
> > to
> > > the point where frustration wins out and staying with current
reporting
> > > solutions (we use Crystal) or searching for others is the best way
out.
> > I'll
> > > post back to this forum anything else I find out though! I'd
appreciate
> > it
> > > if you could do the same...maybe one of us can crack this
> > >
> > >
> > >
> > > "DC" wrote:
> > >
> > > > I am in a very similar situation. If you did find any solution or
code
> > > > snippet to help you out of this, can you please post it here ? It
will
> > be a
> > > > great help.
> > > >
> > > > DC
> > > >
> > > >
> > > > "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> > > > news:3C03F1FF-392E-41DB-856B-1B46969D0CB0@.microsoft.com...
> > > > > Am I missing something when setting up Custom Authentication? We
are
> > > > testing
> > > > > with the Enterprise version but only in development. We'd LOVE to
do
> > it
> > > > with
> > > > > the Standard Version so we don't have to buy Enterprise just for
web
> > apps.
> > > > >
> > > > > Bascially, I don't want to require users to login to the report
server
> > > > AFTER
> > > > > they've already logged in to our web application. I built the
custom
> > > > > authentication sample and had it working fine but when I try and
use
> > > > > logonUser to force credentials in, it still redirect to the
login.aspx
> > for
> > > > > the reportserver.
> > > > >
> > > > > Also, I don't want to use the SOAP API because our reports need to
> > have a
> > > > > toolbar
> > > > >
> > > > > Is it possible to use Custom Forms Authentication with an internet
app
> > > > where
> > > > > my reportserver is BEHIND the firewall and NOT require the user to
log
> > in
> > > > > directly to the web server' Or is it as simple as moving the
Report
> > > > Server
> > > > > up onto the exposed IIS server?
> > > > >
> > > > > Any guidance or sample code would be much appreciated.
> > > > >
> > > > >
> > > >
> > > >
> > > >
> >
> >
> >
with the Enterprise version but only in development. We'd LOVE to do it with
the Standard Version so we don't have to buy Enterprise just for web apps.
Bascially, I don't want to require users to login to the report server AFTER
they've already logged in to our web application. I built the custom
authentication sample and had it working fine but when I try and use
logonUser to force credentials in, it still redirect to the login.aspx for
the reportserver.
Also, I don't want to use the SOAP API because our reports need to have a
toolbar
Is it possible to use Custom Forms Authentication with an internet app where
my reportserver is BEHIND the firewall and NOT require the user to log in
directly to the web server' Or is it as simple as moving the Report Server
up onto the exposed IIS server?
Any guidance or sample code would be much appreciated.I am in a very similar situation. If you did find any solution or code
snippet to help you out of this, can you please post it here ? It will be a
great help.
DC
"bteclt" <bteclt@.discussions.microsoft.com> wrote in message
news:3C03F1FF-392E-41DB-856B-1B46969D0CB0@.microsoft.com...
> Am I missing something when setting up Custom Authentication? We are
testing
> with the Enterprise version but only in development. We'd LOVE to do it
with
> the Standard Version so we don't have to buy Enterprise just for web apps.
> Bascially, I don't want to require users to login to the report server
AFTER
> they've already logged in to our web application. I built the custom
> authentication sample and had it working fine but when I try and use
> logonUser to force credentials in, it still redirect to the login.aspx for
> the reportserver.
> Also, I don't want to use the SOAP API because our reports need to have a
> toolbar
> Is it possible to use Custom Forms Authentication with an internet app
where
> my reportserver is BEHIND the firewall and NOT require the user to log in
> directly to the web server' Or is it as simple as moving the Report
Server
> up onto the exposed IIS server?
> Any guidance or sample code would be much appreciated.
>|||DC,
I can tell you this...I've spent days now reading the various forums and
have not found any luck with this. It appears most users are happy with the
SOAP API and reports without toolbars OR are trying to simply secure access
to the Report Manager via a login on the Web. I assume there are people that
want on-demand reports that render in a browser using the Viewer Control or
the Toolbar (and without a secondary login to the report server) but they
don't seem to want to respond to the forums. I've also seen a lot of
frustration from folks simply trying to implement the custom security. I
would have assume Microsoft would have been very interested in making
reporting via the Internet an easy task to implement but it appears they are
happy letting Crystal Reports keep a strong grip on the marketplace. Don't
get me wrong, they/we should be concerned about securing our apps but they
should also not make it required for us to be web developers, network admins
and security specialists and DBA's all at once...just seems like it gets to
the point where frustration wins out and staying with current reporting
solutions (we use Crystal) or searching for others is the best way out. I'll
post back to this forum anything else I find out though! I'd appreciate it
if you could do the same...maybe one of us can crack this
"DC" wrote:
> I am in a very similar situation. If you did find any solution or code
> snippet to help you out of this, can you please post it here ? It will be a
> great help.
> DC
>
> "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> news:3C03F1FF-392E-41DB-856B-1B46969D0CB0@.microsoft.com...
> > Am I missing something when setting up Custom Authentication? We are
> testing
> > with the Enterprise version but only in development. We'd LOVE to do it
> with
> > the Standard Version so we don't have to buy Enterprise just for web apps.
> >
> > Bascially, I don't want to require users to login to the report server
> AFTER
> > they've already logged in to our web application. I built the custom
> > authentication sample and had it working fine but when I try and use
> > logonUser to force credentials in, it still redirect to the login.aspx for
> > the reportserver.
> >
> > Also, I don't want to use the SOAP API because our reports need to have a
> > toolbar
> >
> > Is it possible to use Custom Forms Authentication with an internet app
> where
> > my reportserver is BEHIND the firewall and NOT require the user to log in
> > directly to the web server' Or is it as simple as moving the Report
> Server
> > up onto the exposed IIS server?
> >
> > Any guidance or sample code would be much appreciated.
> >
> >
>
>|||I am sorry about your frustration. This queston has been asked zillion times
in different flavors.
Let's leave RS aside. Your question boils down to:
"If I have two web applications (one Internet-facing and the other behind a
firewall) can a web user access the private web app? And the answer is no.
URL addressability (if this is what you want) relies on direct access to the
Report Server and your Report Server has to be Internet-facing as well. In
addition, since Forms Authentication is cookie-based, all cookie-related
restrictions apply, e.g. cross-domain cookies are not allowed so both apps
have to be on the same domain, when testing don't use localhost, etc.
As a side note, one of things developers including myself appreciate most
about RS is its extensible model. It allows you to extend/replace data,
security, delivery and rendering functionality. Try doing this with
Crystal...
--
Hope this helps.
---
Teo Lachev, MVP [SQL Server], MCSD, MCT
Author: "Microsoft Reporting Services in Action"
Publisher website: http://www.manning.com/lachev
Buy it from Amazon.com: http://shrinkster.com/eq
Home page and blog: http://www.prologika.com/
---
"bteclt" <bteclt@.discussions.microsoft.com> wrote in message
news:D26EE429-EAAF-44C2-9AA4-01F2B6206F39@.microsoft.com...
> DC,
> I can tell you this...I've spent days now reading the various forums and
> have not found any luck with this. It appears most users are happy with
the
> SOAP API and reports without toolbars OR are trying to simply secure
access
> to the Report Manager via a login on the Web. I assume there are people
that
> want on-demand reports that render in a browser using the Viewer Control
or
> the Toolbar (and without a secondary login to the report server) but they
> don't seem to want to respond to the forums. I've also seen a lot of
> frustration from folks simply trying to implement the custom security. I
> would have assume Microsoft would have been very interested in making
> reporting via the Internet an easy task to implement but it appears they
are
> happy letting Crystal Reports keep a strong grip on the marketplace.
Don't
> get me wrong, they/we should be concerned about securing our apps but they
> should also not make it required for us to be web developers, network
admins
> and security specialists and DBA's all at once...just seems like it gets
to
> the point where frustration wins out and staying with current reporting
> solutions (we use Crystal) or searching for others is the best way out.
I'll
> post back to this forum anything else I find out though! I'd appreciate
it
> if you could do the same...maybe one of us can crack this
>
> "DC" wrote:
> > I am in a very similar situation. If you did find any solution or code
> > snippet to help you out of this, can you please post it here ? It will
be a
> > great help.
> >
> > DC
> >
> >
> > "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> > news:3C03F1FF-392E-41DB-856B-1B46969D0CB0@.microsoft.com...
> > > Am I missing something when setting up Custom Authentication? We are
> > testing
> > > with the Enterprise version but only in development. We'd LOVE to do
it
> > with
> > > the Standard Version so we don't have to buy Enterprise just for web
apps.
> > >
> > > Bascially, I don't want to require users to login to the report server
> > AFTER
> > > they've already logged in to our web application. I built the custom
> > > authentication sample and had it working fine but when I try and use
> > > logonUser to force credentials in, it still redirect to the login.aspx
for
> > > the reportserver.
> > >
> > > Also, I don't want to use the SOAP API because our reports need to
have a
> > > toolbar
> > >
> > > Is it possible to use Custom Forms Authentication with an internet app
> > where
> > > my reportserver is BEHIND the firewall and NOT require the user to log
in
> > > directly to the web server' Or is it as simple as moving the Report
> > Server
> > > up onto the exposed IIS server?
> > >
> > > Any guidance or sample code would be much appreciated.
> > >
> > >
> >
> >
> >|||Teo,
Ok, if I follow your post here and my configuration is as follows:
a) SRS running on Default Web site in Production IIS envirnonment with
custom security dll set up as prescribed in the Microsoft Forms
Authentication Sample
b) Production web site (in this case on the exact same server as SRS) that
uses a Forms based authentication (ie. we have users table in MSSQL that is
checked with a login stored procedure based on click event from submit button
on web login page)
c) Production MSSQL DB is behind firewall and is connected through the web app
d) hyperlinks on the menu to individual SQL Reports
I want to run the SQL Reports in an on-demand format from the clicks on the
hyperlinks (in other words, click link, report opens with the toolbar on top
or preferably in the VIEWER control). Remember, I DON'T want to use the SOAP
API becuase I need the toolbars.
What's the best method to :
1) Instantiate the credentials into the report from the web app (I can hard
code these in the app based on the roles etc I set up in the user store from
the custom authentication sample)
2) Open the report without requiring a login to the report server (ie. login
automatically based on the credentials passed in step one). Specifically, I
HAVE TO have the toolbar on top or in a perfect world I'd like to use the
viewer
Any samples or links to examples would be GREAT!!! As an aside, we primarily
use vb.net in our code behinds so that is preferred but any solutions (C# or
VB) would save us in a big way. (And FYI - I have your book and have read
the section about doing this but it talks mostly about having users login to
the UIlogon.aspx and that's what I am trying to avoid...can this be done?)
Thanks in Advance!
BTE
"Teo Lachev [MVP]" wrote:
> I am sorry about your frustration. This queston has been asked zillion times
> in different flavors.
> Let's leave RS aside. Your question boils down to:
> "If I have two web applications (one Internet-facing and the other behind a
> firewall) can a web user access the private web app? And the answer is no.
> URL addressability (if this is what you want) relies on direct access to the
> Report Server and your Report Server has to be Internet-facing as well. In
> addition, since Forms Authentication is cookie-based, all cookie-related
> restrictions apply, e.g. cross-domain cookies are not allowed so both apps
> have to be on the same domain, when testing don't use localhost, etc.
> As a side note, one of things developers including myself appreciate most
> about RS is its extensible model. It allows you to extend/replace data,
> security, delivery and rendering functionality. Try doing this with
> Crystal...
> --
> Hope this helps.
> ---
> Teo Lachev, MVP [SQL Server], MCSD, MCT
> Author: "Microsoft Reporting Services in Action"
> Publisher website: http://www.manning.com/lachev
> Buy it from Amazon.com: http://shrinkster.com/eq
> Home page and blog: http://www.prologika.com/
> ---
> "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> news:D26EE429-EAAF-44C2-9AA4-01F2B6206F39@.microsoft.com...
> > DC,
> > I can tell you this...I've spent days now reading the various forums and
> > have not found any luck with this. It appears most users are happy with
> the
> > SOAP API and reports without toolbars OR are trying to simply secure
> access
> > to the Report Manager via a login on the Web. I assume there are people
> that
> > want on-demand reports that render in a browser using the Viewer Control
> or
> > the Toolbar (and without a secondary login to the report server) but they
> > don't seem to want to respond to the forums. I've also seen a lot of
> > frustration from folks simply trying to implement the custom security. I
> > would have assume Microsoft would have been very interested in making
> > reporting via the Internet an easy task to implement but it appears they
> are
> > happy letting Crystal Reports keep a strong grip on the marketplace.
> Don't
> > get me wrong, they/we should be concerned about securing our apps but they
> > should also not make it required for us to be web developers, network
> admins
> > and security specialists and DBA's all at once...just seems like it gets
> to
> > the point where frustration wins out and staying with current reporting
> > solutions (we use Crystal) or searching for others is the best way out.
> I'll
> > post back to this forum anything else I find out though! I'd appreciate
> it
> > if you could do the same...maybe one of us can crack this
> >
> >
> >
> > "DC" wrote:
> >
> > > I am in a very similar situation. If you did find any solution or code
> > > snippet to help you out of this, can you please post it here ? It will
> be a
> > > great help.
> > >
> > > DC
> > >
> > >
> > > "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> > > news:3C03F1FF-392E-41DB-856B-1B46969D0CB0@.microsoft.com...
> > > > Am I missing something when setting up Custom Authentication? We are
> > > testing
> > > > with the Enterprise version but only in development. We'd LOVE to do
> it
> > > with
> > > > the Standard Version so we don't have to buy Enterprise just for web
> apps.
> > > >
> > > > Bascially, I don't want to require users to login to the report server
> > > AFTER
> > > > they've already logged in to our web application. I built the custom
> > > > authentication sample and had it working fine but when I try and use
> > > > logonUser to force credentials in, it still redirect to the login.aspx
> for
> > > > the reportserver.
> > > >
> > > > Also, I don't want to use the SOAP API because our reports need to
> have a
> > > > toolbar
> > > >
> > > > Is it possible to use Custom Forms Authentication with an internet app
> > > where
> > > > my reportserver is BEHIND the firewall and NOT require the user to log
> in
> > > > directly to the web server' Or is it as simple as moving the Report
> > > Server
> > > > up onto the exposed IIS server?
> > > >
> > > > Any guidance or sample code would be much appreciated.
> > > >
> > > >
> > >
> > >
> > >
>
>|||Please find my comments inline.
--
Hope this helps.
---
Teo Lachev, MVP [SQL Server], MCSD, MCT
Author: "Microsoft Reporting Services in Action"
Publisher website: http://www.manning.com/lachev
Buy it from Amazon.com: http://shrinkster.com/eq
Home page and blog: http://www.prologika.com/
---
"bteclt" <bteclt@.discussions.microsoft.com> wrote in message
news:92AF49BE-22E1-4C01-B177-F802D3D5193C@.microsoft.com...
> Teo,
> Ok, if I follow your post here and my configuration is as follows:
> a) SRS running on Default Web site in Production IIS envirnonment with
> custom security dll set up as prescribed in the Microsoft Forms
> Authentication Sample
> b) Production web site (in this case on the exact same server as SRS) that
> uses a Forms based authentication (ie. we have users table in MSSQL that
is
> checked with a login stored procedure based on click event from submit
button
> on web login page)
> c) Production MSSQL DB is behind firewall and is connected through the web
app
> d) hyperlinks on the menu to individual SQL Reports
> I want to run the SQL Reports in an on-demand format from the clicks on
the
> hyperlinks (in other words, click link, report opens with the toolbar on
top
> or preferably in the VIEWER control). Remember, I DON'T want to use the
SOAP
> API becuase I need the toolbars.
> What's the best method to :
> 1) Instantiate the credentials into the report from the web app (I can
hard
> code these in the app based on the roles etc I set up in the user store
from
> the custom authentication sample)
Teo: There is only one way. You can the RS LogonUser SOAP API and pass the
user credientials. LogonUser in turns calls
IAuthenticationExtension.LogonUser in your custom security extension.
> 2) Open the report without requiring a login to the report server (ie.
login
> automatically based on the credentials passed in step one). Specifically,
I
> HAVE TO have the toolbar on top or in a perfect world I'd like to use the
> viewer
>
Teo: Same as above. Once LogonUser is called and
IAuthenticationExtension.LogonUser returns true (user is authenticated), the
Report Server will proceed by issuing an authentication ticket in the form
of a cookie (just like ASP.NET Forms Authentication does). From there, as
long as the cookie is passed back, the Report Server will treat the user is
authenticated and won't prompt the user to log in again.
> Any samples or links to examples would be GREAT!!! As an aside, we
primarily
> use vb.net in our code behinds so that is preferred but any solutions (C#
or
> VB) would save us in a big way. (And FYI - I have your book and have read
> the section about doing this but it talks mostly about having users login
to
> the UIlogon.aspx and that's what I am trying to avoid...can this be done?)
>
Teo: Thanks for purchasing my book. I tend to disagree with you though.
Chapter 15 (15.4.1) explains how RS custom security can be integrated with a
web application similar to your scenario. It leverages the enchanced version
of the Report Viewer I wrote but the concept is the same. Remember,
UILogon.aspx is for the Report Manager, Logon.aspx is what the Report Server
uses to prompt the user, Login.aspx is the custom login page inside my
application.
I wrote a two-part article about Forms Authentication which goes into more
details than my book does including role-membership, troubleshooting, etc.
It will be published by SQL Server Magazine in the February and March 2005
issues I think. I hope my article will help demistifying RS custom security.
> Thanks in Advance!
> BTE
> "Teo Lachev [MVP]" wrote:
> > I am sorry about your frustration. This queston has been asked zillion
times
> > in different flavors.
> >
> > Let's leave RS aside. Your question boils down to:
> >
> > "If I have two web applications (one Internet-facing and the other
behind a
> > firewall) can a web user access the private web app? And the answer is
no.
> > URL addressability (if this is what you want) relies on direct access to
the
> > Report Server and your Report Server has to be Internet-facing as well.
In
> > addition, since Forms Authentication is cookie-based, all cookie-related
> > restrictions apply, e.g. cross-domain cookies are not allowed so both
apps
> > have to be on the same domain, when testing don't use localhost, etc.
> >
> > As a side note, one of things developers including myself appreciate
most
> > about RS is its extensible model. It allows you to extend/replace data,
> > security, delivery and rendering functionality. Try doing this with
> > Crystal...
> > --
> > Hope this helps.
> >
> > ---
> > Teo Lachev, MVP [SQL Server], MCSD, MCT
> > Author: "Microsoft Reporting Services in Action"
> > Publisher website: http://www.manning.com/lachev
> > Buy it from Amazon.com: http://shrinkster.com/eq
> > Home page and blog: http://www.prologika.com/
> > ---
> >
> > "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> > news:D26EE429-EAAF-44C2-9AA4-01F2B6206F39@.microsoft.com...
> > > DC,
> > > I can tell you this...I've spent days now reading the various forums
and
> > > have not found any luck with this. It appears most users are happy
with
> > the
> > > SOAP API and reports without toolbars OR are trying to simply secure
> > access
> > > to the Report Manager via a login on the Web. I assume there are
people
> > that
> > > want on-demand reports that render in a browser using the Viewer
Control
> > or
> > > the Toolbar (and without a secondary login to the report server) but
they
> > > don't seem to want to respond to the forums. I've also seen a lot of
> > > frustration from folks simply trying to implement the custom security.
I
> > > would have assume Microsoft would have been very interested in making
> > > reporting via the Internet an easy task to implement but it appears
they
> > are
> > > happy letting Crystal Reports keep a strong grip on the marketplace.
> > Don't
> > > get me wrong, they/we should be concerned about securing our apps but
they
> > > should also not make it required for us to be web developers, network
> > admins
> > > and security specialists and DBA's all at once...just seems like it
gets
> > to
> > > the point where frustration wins out and staying with current
reporting
> > > solutions (we use Crystal) or searching for others is the best way
out.
> > I'll
> > > post back to this forum anything else I find out though! I'd
appreciate
> > it
> > > if you could do the same...maybe one of us can crack this
> > >
> > >
> > >
> > > "DC" wrote:
> > >
> > > > I am in a very similar situation. If you did find any solution or
code
> > > > snippet to help you out of this, can you please post it here ? It
will
> > be a
> > > > great help.
> > > >
> > > > DC
> > > >
> > > >
> > > > "bteclt" <bteclt@.discussions.microsoft.com> wrote in message
> > > > news:3C03F1FF-392E-41DB-856B-1B46969D0CB0@.microsoft.com...
> > > > > Am I missing something when setting up Custom Authentication? We
are
> > > > testing
> > > > > with the Enterprise version but only in development. We'd LOVE to
do
> > it
> > > > with
> > > > > the Standard Version so we don't have to buy Enterprise just for
web
> > apps.
> > > > >
> > > > > Bascially, I don't want to require users to login to the report
server
> > > > AFTER
> > > > > they've already logged in to our web application. I built the
custom
> > > > > authentication sample and had it working fine but when I try and
use
> > > > > logonUser to force credentials in, it still redirect to the
login.aspx
> > for
> > > > > the reportserver.
> > > > >
> > > > > Also, I don't want to use the SOAP API because our reports need to
> > have a
> > > > > toolbar
> > > > >
> > > > > Is it possible to use Custom Forms Authentication with an internet
app
> > > > where
> > > > > my reportserver is BEHIND the firewall and NOT require the user to
log
> > in
> > > > > directly to the web server' Or is it as simple as moving the
Report
> > > > Server
> > > > > up onto the exposed IIS server?
> > > > >
> > > > > Any guidance or sample code would be much appreciated.
> > > > >
> > > > >
> > > >
> > > >
> > > >
> >
> >
> >
Friday, March 9, 2012
HELP! cant figure this one out!
I'm in desperate need of help. I'm setting up an intranet portal using DNN. I added an event calendar module, but whenever I try to add events to it, the system rejects it with a nasty Sql exception saying the conversion from char to datetime produced an out of bounds result.
The string the table uses to convert to datetime is (I have not modified it, the module is exactly as it came when i downloaded)
(convert(varchar,getdate(),101))
The whole stack trace for the error is:
Stack Trace:
[SqlException: La conversin del tipo de datos char a datetime produjo un valor datetime fuera de intervalo.]
System.Data.SqlClient.SqlCommand.ExecuteReader(Com mandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream) +642
System.Data.SqlClient.SqlCommand.ExecuteReader() +11
DotNetNuke.AVCalendarDB.Save() +1067
DotNetNuke.AVCalendarEdit.updateButton_Click(Objec t sender, EventArgs e) +3367
System.Web.UI.WebControls.LinkButton.OnClick(Event Args e) +108
System.Web.UI.WebControls.LinkButton.System.Web.UI .IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +57
System.Web.UI.Page.RaisePostBackEvent(IPostBackEve ntHandler sourceControl, String eventArgument) +18
System.Web.UI.Page.RaisePostBackEvent(NameValueCol lection postData) +138
System.Web.UI.Page.ProcessRequestMain() +1263
At first I thought it could be a language issue (DNN and the module are in english and my system runs XP Pro in Spanish) but I discarded it since it didn't work when I installed XP Pro in english
Any ideas?? I would really appreciate your help
Best regards from Chile
Javier L.What is this?
[SqlException: La conversin del tipo de datos char a datetime produjo un valor datetime fuera de intervalo.]|||Originally posted by gyuan
What is this?
[SqlException: La conversin del tipo de datos char a datetime produjo un valor datetime fuera de intervalo.]
The conversion from char to datetime produced a value outside the range of a datetime.
This is caused when you have a string value that cannot possibly be date ( 31 Feb 2004) or a time 66:00:00. You need to check the data is coherent.|||Put VARCHAR(10) instead of just VARCHAR. But I don't think this is the line that it's barking at...|||Did you try this on your Query Analyzer?
select convert(varchar(20), getdate(), 101)|||Based on the error message you got
The conversion from char to datetime produced a value outside the range of a datetime.
the problem is not in the code
convert(varchar(20),getdate(),101)
The string the table uses to convert to datetime is (I have not modified it, the module is exactly as it came when i downloaded)
(convert(varchar,getdate(),101))
The whole stack trace for the error is:
Stack Trace:
[SqlException: La conversin del tipo de datos char a datetime produjo un valor datetime fuera de intervalo.]
System.Data.SqlClient.SqlCommand.ExecuteReader(Com mandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream) +642
System.Data.SqlClient.SqlCommand.ExecuteReader() +11
DotNetNuke.AVCalendarDB.Save() +1067
DotNetNuke.AVCalendarEdit.updateButton_Click(Objec t sender, EventArgs e) +3367
System.Web.UI.WebControls.LinkButton.OnClick(Event Args e) +108
System.Web.UI.WebControls.LinkButton.System.Web.UI .IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +57
System.Web.UI.Page.RaisePostBackEvent(IPostBackEve ntHandler sourceControl, String eventArgument) +18
System.Web.UI.Page.RaisePostBackEvent(NameValueCol lection postData) +138
System.Web.UI.Page.ProcessRequestMain() +1263
At first I thought it could be a language issue (DNN and the module are in english and my system runs XP Pro in Spanish) but I discarded it since it didn't work when I installed XP Pro in english
Any ideas?? I would really appreciate your help
Best regards from Chile
Javier L.What is this?
[SqlException: La conversin del tipo de datos char a datetime produjo un valor datetime fuera de intervalo.]|||Originally posted by gyuan
What is this?
[SqlException: La conversin del tipo de datos char a datetime produjo un valor datetime fuera de intervalo.]
The conversion from char to datetime produced a value outside the range of a datetime.
This is caused when you have a string value that cannot possibly be date ( 31 Feb 2004) or a time 66:00:00. You need to check the data is coherent.|||Put VARCHAR(10) instead of just VARCHAR. But I don't think this is the line that it's barking at...|||Did you try this on your Query Analyzer?
select convert(varchar(20), getdate(), 101)|||Based on the error message you got
The conversion from char to datetime produced a value outside the range of a datetime.
the problem is not in the code
convert(varchar(20),getdate(),101)
Subscribe to:
Posts (Atom)