How do i change SSRS authentication to a service account from a person account?

Question

I have set up a SQL Express 2012 Reporting Service as follows :-
In the RS Configuration Manager :-
Use Build in A/c ---> Local System
SSL Certificate ----> Blank.
Execution account ----> Blank
In the Report Manager, New Role Assignment section
BUILTIN\Administrator ---> Content Manager
MyDomainName\MyUserID ----> (All actions)
NT AUTHORITY\IUSR ----> (All actions)
In the web.config of the ASP.NET accessing this Report server
ReportServerUsername ----> UserName of a person in the domain
ReportServerPassword -----> Password of this person in the domain
ReportServerDomainname -----> Domain name
In the rsreportservice.config file in the Program Files/ReportingServer
<AuthenticationTypes>
<RSWindowsNegotiate/>
<RSWindowsNTLM/>
</AuthenticationTypes>
In the ASPX.cs page which calls the Reports in the ReportServer
creating instance of Report Server Credentials as follows :-
IReportServerCredentials irsc = new CustomReportCredentials(strReportServerUsername, sstrReportServerPassword, strReportServerDomainname); rpt.ServerReport.ReportServerCredentials = irsc;
The CustomReportCredentials Class is as follows
public class CustomReportCredentials : IReportServerCredentials { private readonly string _userName; private readonly string _passWord; private readonly string _domainName;
public CustomReportCredentials(string userName, string passWord, string domainName)
_userName = userName;
_passWord = passWord;
_domainName = domainName;
public System.Security.Principal.WindowsIdentity ImpersonationUser
get { return null; }
public ICredentials NetworkCredentials
get { return new NetworkCredential(_userName, _passWord, _domainName); }
public bool GetFormsCredentials(out Cookie authCookie, out string user,
out string password, out string authority)
authCookie = null;
user = password = authority = null;
return false;
My question :- Since i dont want the Windows UserName and Password of the user to be the authenticating identity, and replace it with NT AUTHORITY\IUSR, how do i do it ? If i replace User name in Web.config with NT AUTHORITY\IUSR and password = "".
i get 401.
Chak

Answer 1

Hi chakira,
If I understood correctly, you want the NT AUTHORITY\IUSR to be able to access SQL Server Reporting Service(SSRS).
For security concerns, it is not suggested. Enable NT AUTHORITY\IUSR the access to SSRS means everyone can access the SSRS. Please don't use it in production environment!
Anyway, if you would still like to know how to do it, please follow these steps:
Remove the credential set to rpt.ServerReport. It means the following two lines code can be commented. Without a explicit credential, the default credential "NT AUTHORITY\IUSR" will be used.
IReportServerCredentials irsc = new CustomReportCredentials(strReportServerUsername, sstrReportServerPassword, strReportServerDomainname); rpt.ServerReport.ReportServerCredentials = irsc;
Enable anonymous access for SSRS, follow by this article:
http://blogs.msdn.com/b/jameswu/archive/2008/07/15/anonymous-access-in-sql-rs-2008.aspx
Here is the disclaimer again:
DO NOT USE ANONYMOUS AUTH!
NEVER USE IT IN PRODUCTION ENVIRONMENT!
Thanks,
Jinchun Chen