SSRS : Bug using SSL (https://)
-
05-10-2020 - |
Question
We have an SSRS 2014 already in production and we want now use a secure site by linking it to a certificate (URL like "https://..."). So now the URL is fully qualified domain name(FQDN).
We can access correctly to the report manager with this https URL. We have to register to access with the Windows account.
The bug we have is that when we navigate, sometimes, we pass to an http page. Each time that we pass from an https to an http page, the browser (IE) ask to register again.
For example, here we are on a https page. When I click right on a report -> manage:
If I clic on a tab on the left pane (for example in Security), SSRS ask me to reconnect and jump to an http page. This is a real problem for us.
Any suggestions?
Solution
Well, it was difficult to solve, but with the help of our sysadmin and reading through lot of places, we managed to get it working. It was a mix of things, but the 2 main ones were changing some parameters on SSRS config file:
- Change
<Add Key="SecureConnectionLevel" Value="0"/>
to<Add Key="SecureConnectionLevel" Value="3"/>
- Make sure that
<RSWindowsNTLM/>
is the only authentication type specified on<AuthenticationTypes>
- make sure all url's are absolute, without wildcards
And second part was to modify a windows registry and restart SSRS afterwards:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Create a new DWORD registry key DisableLoopbackCheck and set value to 1.
In case you are wondering, here are all the references consulted:
- https://social.msdn.microsoft.com/Forums/sqlserver/en-US/2d216af4-6586-4619-b8aa-56f05cbd8239/the-request-failed-with-http-status-401-unauthorized-in-ssrs?forum=sqlreportingservices
- https://connect.microsoft.com/SQLServer/feedback/details/323214/the-request-failed-with-http-status-401-unauthorized
- https://social.technet.microsoft.com/Forums/en-US/27ecdb2d-d6be-4e10-a7e2-7fedba1266e2/url-problems-with-sql-server-reporting-services-2012-with-wildcard-ssl-certificate?forum=sqlreportingservices
- https://www.sqlservercentral.com/Forums/Topic908027-146-1.aspx
- http://sqlmag.com/sql-server-reporting-services/implement-kerberos-delegation-ssrs
- https://msdn.microsoft.com/en-us/library/cc281382.aspx