topic Re: Report Server Custom Authentication in Report Server

Report Server Custom Authentication

malikirfan28 — Tue, 14 Nov 2017 06:14:46 GMT

Hello Everyone,

I am newbie in Power BI Report Server and tried to configure it for custom/form authentication as explained in this article

https://github.com/Microsoft/Reporting-Services/tree/master/CustomSecuritySample

I performed all steps as mentioned in article and when I browse ReportServer it successfully show me Login page. However whenever I click eiher "Register User" button OR "Login" button, I get following exception

An error occurred while attempting to add the account. Request for the permission of type 'System.Data.SqlClient.SqlClientPermission, System.Data, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089' failed.

I notice that in article's Step 3 it is mentioned to add <CodeGroup> in RSSrvPolicy.config file for FullTrust permission. However the step description is very confusing to me

Add the following <CodeGroup> element after the existing code group in the security policy file that has a URL membership of $CodeGen as indicated below and then add an entry as follows to RSSrvPolicy.config. Make sure to change the below path according to your ReportServer installation directory:

<CodeGroup
	class="UnionCodeGroup"
	version="1"
	Name="SecurityExtensionCodeGroup" 
	Description="Code group for the sample security extension"
	PermissionSetName="FullTrust">
<IMembershipCondition 
	class="UrlMembershipCondition"
	version="1"
	Url="C:\Program Files\Microsoft Power BI Report Server\PBIRS\ReportServer\bin\Microsoft.Samples.ReportingServices.CustomSecurity.dll"/>
</CodeGroup>

I am not sure I have to add this CodeGroup as New code group below of existing Member Url="$CodeGen$/*" codegroup OR I will have to replace existing $CodeGen Member URL code group with this one. So I tried both. When I add this article CodeGroup as New below of existing then ReportServer browse successful and show login page, but Permission exception occur as shown above.

When I replace existing $CodeGen Member URL code group with this article code group then ReportServer does not browse and give HTTP 500 error.

So please expert guidance on this. Thanks

Re: Report Server Custom Authentication

v-qiuyu-msft — Wed, 15 Nov 2017 09:44:29 GMT

Hi @malikirfan28,

I don't have much experience with develop section. Maybe @mgmeyer @riccardomuti @Jon-Heide from PG team have ideas?

Best Regards,
Qiuyun Yu

Re: Report Server Custom Authentication

malikirfan28 — Wed, 15 Nov 2017 11:10:50 GMT

Thank you @v-qiuyu-msft for comments. It seems I had wrong URL in CodeGroup membership. When I changed URL from

C:\Program Files\Microsoft Power BI Report Server\PBIRS\PowerBI\Microsoft.Samples.ReportingServices.CustomSecurity.dll

to C:\Program Files\Microsoft Power BI Report Server\PBIRS\ReportServer\bin\Microsoft.Samples.ReportingServices.CustomSecurity.dll, it seems the permission problem has resolved and I can register new user.

However when login goes successfull and navigate to ReportServer Web Portal URL, it shows HTTP 500 Internal Server ERROR. Is there any way to investigate and find-out root cause of it?

Thanks once again,

M. Irfan

Re: Report Server Custom Authentication

malikirfan28 — Sun, 19 Nov 2017 10:53:27 GMT

Dear @v-qiuyu-msft, @mgmeyer, @riccardomuti, @Jon-Heide

Please need your support to resolve this HTTP 500 Error after successful login on Power BI Report Server.

Thank you in advance

Re: Report Server Custom Authentication

malikirfan28 — Sun, 19 Nov 2017 12:41:13 GMT

You can review my configuration files using following links:

rsreportserver.config

rssrvpolicy.config

web.config

I have already placed Microsoft.Samples.ReportingServices.CustomSecurity.dll & pdb file in

C:\Program Files\Microsoft Power BI Report Server\PBIRS\ReportServer\bin

C:\Program Files\Microsoft Power BI Report Server\PBIRS\PowerBI

C:\Program Files\Microsoft Power BI Report Server\PBIRS\Portal

Please need your urgent support to resolve this HTTP 500 Internal Server Error.

Thank you.

Re: Report Server Custom Authentication

prazzy88 — Wed, 20 Dec 2017 10:22:27 GMT

We are also facing same issue. Http 500 issue for custom authenticatiom after login page. Its not loading PBReports page

Re: Report Server Custom Authentication

asheralikhan — Wed, 20 Dec 2017 15:12:38 GMT

I am Also getting the same issue...

Re: Report Server Custom Authentication

malikirfan28 — Thu, 21 Dec 2017 18:45:25 GMT

It seems a problem in Product which does not support this feature.

Re: Report Server Custom Authentication

pbx — Fri, 29 Dec 2017 00:16:22 GMT

Have you seen this? Take note of the very last comment.

https://github.com/Microsoft/Reporting-Services/issues/26

Re: Report Server Custom Authentication

malikirfan28 — Sun, 31 Dec 2017 12:26:49 GMT

Thanks @pbx This link help me to find out the exact problem. So for rest of the community here is the reason of HTTP 500 error

When we added "machineKey" in <RSPATH>\ReportServer\web.config path, everytime when pbix service restarted it remove this key. The step mentined here need to be updated @v-qiuyu-msft. Best solution is to add machinekey in "machine.config" file inside <system.web> and then restart machine

32-bit

%windir%\Microsoft.NET\Framework\[version]\config\machine.config

64-bit

%windir%\Microsoft.NET\Framework64\[version]\config\machine.config

Note: This entry may create conflicts/problem for other application running on same machine so be careful.

Hope this will help. Thank you.

Re: Report Server Custom Authentication

pbx — Mon, 01 Jan 2018 02:41:37 GMT

@malikirfan28:

The proper documentation about custom security extensions can be found here:

https://docs.microsoft.com/en-us/sql/reporting-services/extensions/security-extension/how-to-install-custom-security-extensions

That means for PBIRS the machine key should be placed in \ReportServer\rsReportServer.config. However according to the following link, a bug in PBIRS, at least up to this version 1.1.6514.9163 (Build 14.0.600.434), exists that requires putting they keys in machine.config. Given that there's been two minor relases after that, could you please confrim if the bug still exists in the latest release, Version 1.1.6551.5155 (Build 14.0.600.438)?

https://github.com/Microsoft/Reporting-Services/issues/26

Re: Report Server Custom Authentication

malikirfan28 — Mon, 08 Jan 2018 10:21:40 GMT

Dear @pbx, Ok I will check new version on fresh mahine and then update here.

However right now when a new registered user login successfully, PBIRS display error:

The Builten (Windows) Administrator acccount does not work with custom security so how can I login as Administrator and grant permission to custom user? If I revert back to Windows Authentication then builten Administrator work and I can change Site Setting, but at this time PBIRS does not found any custom user name. When I try to add custom user name in "Add User or Group" field it give error, "such user or group does not exist".

Any idea?

Re: Report Server Custom Authentication

danielnord — Thu, 22 Feb 2018 15:05:00 GMT

For others trying to find the solution.

I had some problemswith 500 error too. I found out that there are a couple of steps you need to do after you have set the plugin. See my comment in this issue (danielnord): https://github.com/Microsoft/Reporting-Services/issues/49

Re: Report Server Custom Authentication

Anonymous — Mon, 09 Apr 2018 21:56:14 GMT

Thank you so much for this post. Adding the machine key to the machine.config file worked.

Re: Report Server Custom Authentication

Anonymous — Mon, 09 Apr 2018 22:41:09 GMT

This worked for me.

Here are the details:

edited C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config

Add machinekey under system.web

I used Visual Studio to edit machine.config. Must start VS as admin.

Restart computer, restart rs service

Re: Report Server Custom Authentication

Anonymous — Mon, 09 Apr 2018 22:47:10 GMT

I installed Power Bi Report Server - Evaluation, Product Version 15.0.2.378 and I still had to update the machine config to get it to work with the custom security example.

Re: Report Server Custom Authentication

sowmyaKrishna — Mon, 10 Dec 2018 19:10:47 GMT

did you get solution? Please let me know if you get solution

Thanks in advance

Re: Report Server Custom Authentication

Anonymous — Mon, 10 Dec 2018 19:21:06 GMT

Yes - this is my solution

Here are the details:

edited C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config

Add machinekey under system.web

I used Visual Studio to edit machine.config. Must start VS as admin.

Restart computer, restart rs service

Re: Report Server Custom Authentication

sowmyaKrishna — Fri, 14 Dec 2018 20:12:09 GMT

Hi @danielnord

I followed all steps but still I am getting below error. Can you please give me the solution .

018-12-14 15:03:14.8087|INFO|1|CONFIG : rsConfigFilePath = [C:\Program Files\Microsoft Power BI Report Server\PBIRS\ReportServer\rsreportserver.config] (env)
2018-12-14 15:03:17.1056|INFO|1|CONFIG : AccessControlAllowOrigin = [] (env)
2018-12-14 15:03:17.1056|INFO|1|CONFIG : AccessControlAllowHeaders = [] (env)
2018-12-14 15:03:17.1056|INFO|1|CONFIG : AccessControlAllowMethods = [GET, PUT, POST, PATCH, DELETE] (env)
2018-12-14 15:03:17.1056|INFO|1|CONFIG : AccessControlExposeHeaders = [] (env)
2018-12-14 15:03:17.1056|INFO|1|CONFIG : AccessControlMaxAge = [600] (env)
2018-12-14 15:03:17.1368|INFO|1|CONFIG : SecureConnectionLevel = [0] (env)
2018-12-14 15:03:19.2618|INFO|1|CONFIG : MaxActiveReqForOneUser = [20] (env)
2018-12-14 15:03:19.2618|INFO|1|CONFIG : MaxActiveReqForAnonymous = [200] (default)
2018-12-14 15:04:41.5054|INFO|5|Received request GET | RequestID = s_69cc7afc-3bd5-4042-be76-7f14cd3a3c0a
2018-12-14 15:04:41.5992|ERROR|5| 10.120.243.36: GET - 0:00:00.0833391
Exception: System.Web.HttpException (0x80004005): Unable to validate data.
at System.Web.Configuration.MachineKeySection.EncryptOrDecryptData(Boolean fEncrypt, Byte[] buf, Byte[] modifier, Int32 start, Int32 length, Boolean useValidationSymAlgo, Boolean useLegacyMode, IVType ivType, Boolean signData)
at System.Web.Security.FormsAuthentication.Decrypt(String encryptedTicket)
at Microsoft.BIServer.Owin.Common.Middleware.CustomAuthenticationMiddleware.CreateRequestContextFromCookie(IOwinContext context)
at Microsoft.BIServer.Owin.Common.Middleware.CustomAuthenticationMiddleware.CreatePortalIdentity(IOwinContext context)
at Microsoft.BIServer.Owin.Common.Middleware.CustomAuthenticationMiddleware.Invoke(IOwinContext context)
at Microsoft.Owin.Security.Infrastructure.AuthenticationMiddleware`1.<Invoke>d__0.MoveNext()
--- End of stack trace from previous location where exception was thrown ---

Thanks in Advance...