SharePoint 2010 and SQL Server Reporting Services – The request failed with HTTP status 401: Unauthorized

This error occurred due to browser issues and Kerberos authentication.

We have a SharePoint 2010 implementation (with Service Pack 1) and SQL Server 2008 R2 Reporting Services (SSRS) environment, with SSRS configured in integrated mode with SharePoint. We have enabled Kerberos authentication for single sign-on to SSRS via SharePoint 2010.

While running some training for the system our users could not open a report using their specially created test accounts. The report was accessing a SharePoint list to access the data. The user account could view the contents of the list without any issues, and had Contributor permission level in the SharePoint site collection. There were a couple of reasons why the reports failed:

  1. The accounts were created in a separate OU and due to a different Internet Explorer configuration via group policy, did not recognise our SharePoint 2010 website as an Intranet location/zone. Internet Explorer will not pass through credentials automatically when not in the Intranet zone, so Kerberos authentication failed.
  2. While fixing this issue, I happened to be using Firefox to test the different training user credentials. As per (1) above, this also failed because Kerberos authentication was not configured. You can configure Firefox to use Kerberos authentication by following these instructions
  3. You will probably not get any log entries in SSRS to try and track this particular error down, but you can use Kerberos logging to see any entries in the event log by following these instructions. Note that a reboot/restart of IIS is *not* required, so it is a good test to check kerberos issues

Hope this helps!

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


%d bloggers like this: