Power BI Report Server - Authentification with Basic Auth

[mypbishell]

Hello, 

Version : PowerBI Report Server January 2022

Can NTLM and Basic Auth coexist ?

My organization is using the NTLM authentification.

However, I need to connect to my report also using the Basic Auth.

So I followed the following procedure 

My config file of my report server look like :

<Authentication>
   <AuthenticationTypes>
      <RSWindowsNTLM />
      <RSWindowsBasic/>
    </AuthenticationTypes>
    <EnableAuthPersistence>true</EnableAuthPersistence>
  <RSWindowsExtendedProtectionLevel>Off</RSWindowsExtendedProtectionLevel>
  <RSWindowsExtendedProtectionScenario>Any</RSWindowsExtendedProtectionScenario>
</Authentication>

I restarted my Report Server and tried to connect to my report url using postman.

When I used the NTLM Authentification, it worked (Request had a 200 status response).

But when I used the Basic Authentificationm it didn't worked (Request had a 401 status response) :

Similar to 403 Forbidden, but specifically for use when authentication is possible but has failed or not yet been provided. The response must include a WWW-Authenticate header field containing a challenge applicable to the requested resource.

This is why I ask if NTLM and Basic Auth can coexist.

What am I doing wrong ? 

Have a nice day.

Thanks by advance.

[v-luwang-msft]

Hi @mypbishell ,

Has your problem been solved, if so, please consider Accept a correct reply as the solution or share your own solution to help others find it.

Best Regards
Lucien

[v-luwang-msft · Accepted solution]

Hi @mypbishell ,

In my opinion ,it should be able to coexist.

And request had a 401 status response,there may be two causes for this error.

1. The Password Manager Account may not have the correct permissions to access the Reporting Services Server (i.e. Content Creator rights on the SRS Reporting side).
2. In complex network environments Windows Integrated Security may fail to authorize the user (client) on the Reporting Services Server because the authorization request is transferred through Password Manager server with impersonated credentials. This case is known as a double-hop issue.  A double-hop issue occurs when the SQL Database and the SQL Reporting Services are on two different servers.

and detail soultion ,refer:https://support.oneidentity.com/pt-br/kb/69693/report-server-error-the-request-failed-with-http-stat... 

Similar case refer:

https://www.sqlservercentral.com/forums/topic/report-builder-2-0-with-basic-authentication-throws-er... 

https://stackoverflow.com/questions/19247645/the-request-failed-with-http-status-401-unauthorized-in...

Did I answer your question? Mark my post as a solution!

Best Regards

Lucien

[d_gosbell]

The documentation does state that NTLM and Basic should be able to coexist.

What sort of authentication is your report data source using? It does state in the documentation for Basic auth https://docs.microsoft.com/en-us/sql/reporting-services/security/configure-basic-authentication-on-t... that the "Windows Integrated" option will not work (this is the "As the user viewing the report" option in the data source settings)