Reports problem 401 Unauthorized error

Hi all
My reports used to work on a 3 server installation until recently. The only
thing that has happened (as far as I know) is a powercut at our offices when
the servers shut down rather unceremoniously. I suspect this may be a red
herring though.

I have a test CRM server that I just installed and it too gets an error
accessing the reports (and cannot access the systems settings either (same
as production server)).

I have set up the new test CRM web server to have full delegation for any
service (this was previously in place for the production server and the
reporting server), but I am still unable to get anywhere. the URL is the
registry is correct and pointing to the correct reporting server.

I have fixed this once before, but cannot remember how. Can anyone help
please?

Thanks Saira

Darren
Fri May 09 13:59:06 CDT 2008

Hi Saira,

I believed it's the famous double hop kerbero issue. This link might
be helpful to you in resolving this issue.

http://blog.sonomapartners.com/2007/04/kerberos_and_de.html

Darren Liu, Microsoft CRM MVP
Crowe
http://www.crowecrm.com

On May 9, 10:37=A0am, "Saira" <sa...@5d.com> wrote:
> Hi all
> My reports used to work on a 3 server installation until recently. The onl=
y
> thing that has happened (as far as I know) is a powercut at our offices wh=
en
> the servers shut down rather unceremoniously. I suspect this may be a red
> herring though.
>
> I have a test CRM server that I just installed and it too gets an error
> accessing the reports (and cannot access the systems settings either (same=

> as production server)).
>
> I have set up the new test CRM web server to have full delegation for any
> service (this was previously in place for the production server and the
> reporting server), but I am still unable to get anywhere. the URL is the
> registry is correct and pointing to the correct reporting server.
>
> I have fixed this once before, but cannot remember how. =A0Can anyone help=

> please?
>
> Thanks Saira

Saira
Mon May 12 05:28:37 CDT 2008

I would have thought so too, but if the web server and the report server are
both set up for delegation i don't think it is (unless I am missing
something else)

"Darren Liu" <darrenliu@gmail.com> wrote in message
news:6ed0e769-2c7d-4eb7-84c9-503c68d25540@k37g2000hsf.googlegroups.com...
Hi Saira,

I believed it's the famous double hop kerbero issue. This link might
be helpful to you in resolving this issue.

http://blog.sonomapartners.com/2007/04/kerberos_and_de.html

Darren Liu, Microsoft CRM MVP
Crowe
http://www.crowecrm.com

On May 9, 10:37 am, "Saira" <sa...@5d.com> wrote:
> Hi all
> My reports used to work on a 3 server installation until recently. The
> only
> thing that has happened (as far as I know) is a powercut at our offices
> when
> the servers shut down rather unceremoniously. I suspect this may be a red
> herring though.
>
> I have a test CRM server that I just installed and it too gets an error
> accessing the reports (and cannot access the systems settings either (same
> as production server)).
>
> I have set up the new test CRM web server to have full delegation for any
> service (this was previously in place for the production server and the
> reporting server), but I am still unable to get anywhere. the URL is the
> registry is correct and pointing to the correct reporting server.
>
> I have fixed this once before, but cannot remember how. Can anyone help
> please?
>
> Thanks Saira

PaulS
Mon May 12 17:42:04 CDT 2008

I think Darren is on the right track. I had the same problem, but couldn't
find a delegation problem. This tool helped me out:

http://blogs.iis.net/bretb/archive/2008/03/27/How-to-Use-DelegConfig.aspx

The tool has an autofix option, but it didn't work for me. I wound up using
adsiedit to clean out the SPN problem.

Paul

"Saira" wrote:

> I would have thought so too, but if the web server and the report server are
> both set up for delegation i don't think it is (unless I am missing
> something else)
>
> "Darren Liu" <darrenliu@gmail.com> wrote in message
> news:6ed0e769-2c7d-4eb7-84c9-503c68d25540@k37g2000hsf.googlegroups.com...
> Hi Saira,
>
> I believed it's the famous double hop kerbero issue. This link might
> be helpful to you in resolving this issue.
>
> http://blog.sonomapartners.com/2007/04/kerberos_and_de.html
>
> Darren Liu, Microsoft CRM MVP
> Crowe
> http://www.crowecrm.com
>
> On May 9, 10:37 am, "Saira" <sa...@5d.com> wrote:
> > Hi all
> > My reports used to work on a 3 server installation until recently. The
> > only
> > thing that has happened (as far as I know) is a powercut at our offices
> > when
> > the servers shut down rather unceremoniously. I suspect this may be a red
> > herring though.
> >
> > I have a test CRM server that I just installed and it too gets an error
> > accessing the reports (and cannot access the systems settings either (same
> > as production server)).
> >
> > I have set up the new test CRM web server to have full delegation for any
> > service (this was previously in place for the production server and the
> > reporting server), but I am still unable to get anywhere. the URL is the
> > registry is correct and pointing to the correct reporting server.
> >
> > I have fixed this once before, but cannot remember how. Can anyone help
> > please?
> >
> > Thanks Saira
>
>
>

Saira
Tue May 13 11:31:24 CDT 2008

Thanks to both of you.
I triple checked all aspects of the delegation and found that a previus
networks admin had changed some of the accounts that the services run
under - not helpful. Am now testing to see whether the reports run properly.

"Paul S." <PaulS@discussions.microsoft.com> wrote in message
news:63C518DA-6D74-4725-A00D-97C0528337F2@microsoft.com...
>I think Darren is on the right track. I had the same problem, but couldn't
> find a delegation problem. This tool helped me out:
>
> http://blogs.iis.net/bretb/archive/2008/03/27/How-to-Use-DelegConfig.aspx
>
> The tool has an autofix option, but it didn't work for me. I wound up
> using
> adsiedit to clean out the SPN problem.
>
> Paul
>
> "Saira" wrote:
>
>> I would have thought so too, but if the web server and the report server
>> are
>> both set up for delegation i don't think it is (unless I am missing
>> something else)
>>
>> "Darren Liu" <darrenliu@gmail.com> wrote in message
>> news:6ed0e769-2c7d-4eb7-84c9-503c68d25540@k37g2000hsf.googlegroups.com...
>> Hi Saira,
>>
>> I believed it's the famous double hop kerbero issue. This link might
>> be helpful to you in resolving this issue.
>>
>> http://blog.sonomapartners.com/2007/04/kerberos_and_de.html
>>
>> Darren Liu, Microsoft CRM MVP
>> Crowe
>> http://www.crowecrm.com
>>
>> On May 9, 10:37 am, "Saira" <sa...@5d.com> wrote:
>> > Hi all
>> > My reports used to work on a 3 server installation until recently. The
>> > only
>> > thing that has happened (as far as I know) is a powercut at our offices
>> > when
>> > the servers shut down rather unceremoniously. I suspect this may be a
>> > red
>> > herring though.
>> >
>> > I have a test CRM server that I just installed and it too gets an error
>> > accessing the reports (and cannot access the systems settings either
>> > (same
>> > as production server)).
>> >
>> > I have set up the new test CRM web server to have full delegation for
>> > any
>> > service (this was previously in place for the production server and the
>> > reporting server), but I am still unable to get anywhere. the URL is
>> > the
>> > registry is correct and pointing to the correct reporting server.
>> >
>> > I have fixed this once before, but cannot remember how. Can anyone help
>> > please?
>> >
>> > Thanks Saira
>>
>>
>>

Saira
Tue May 13 12:11:51 CDT 2008

I uploaded my custom report and am now getting this odd error
"Enter a user name and password to access the data source:
"
I'm not really sure where it is coming from. I have checked the databases
(one has a stored proc and the other the report) and these look fine - do
you have any clues as to where i need to look - i assume it is something to
do with the report itself?
Thanks

"Paul S." <PaulS@discussions.microsoft.com> wrote in message
news:63C518DA-6D74-4725-A00D-97C0528337F2@microsoft.com...
>I think Darren is on the right track. I had the same problem, but couldn't
> find a delegation problem. This tool helped me out:
>
> http://blogs.iis.net/bretb/archive/2008/03/27/How-to-Use-DelegConfig.aspx
>
> The tool has an autofix option, but it didn't work for me. I wound up
> using
> adsiedit to clean out the SPN problem.
>
> Paul
>
> "Saira" wrote:
>
>> I would have thought so too, but if the web server and the report server
>> are
>> both set up for delegation i don't think it is (unless I am missing
>> something else)
>>
>> "Darren Liu" <darrenliu@gmail.com> wrote in message
>> news:6ed0e769-2c7d-4eb7-84c9-503c68d25540@k37g2000hsf.googlegroups.com...
>> Hi Saira,
>>
>> I believed it's the famous double hop kerbero issue. This link might
>> be helpful to you in resolving this issue.
>>
>> http://blog.sonomapartners.com/2007/04/kerberos_and_de.html
>>
>> Darren Liu, Microsoft CRM MVP
>> Crowe
>> http://www.crowecrm.com
>>
>> On May 9, 10:37 am, "Saira" <sa...@5d.com> wrote:
>> > Hi all
>> > My reports used to work on a 3 server installation until recently. The
>> > only
>> > thing that has happened (as far as I know) is a powercut at our offices
>> > when
>> > the servers shut down rather unceremoniously. I suspect this may be a
>> > red
>> > herring though.
>> >
>> > I have a test CRM server that I just installed and it too gets an error
>> > accessing the reports (and cannot access the systems settings either
>> > (same
>> > as production server)).
>> >
>> > I have set up the new test CRM web server to have full delegation for
>> > any
>> > service (this was previously in place for the production server and the
>> > reporting server), but I am still unable to get anywhere. the URL is
>> > the
>> > registry is correct and pointing to the correct reporting server.
>> >
>> > I have fixed this once before, but cannot remember how. Can anyone help
>> > please?
>> >
>> > Thanks Saira
>>
>>
>>