locked
Server certificate deleted, report services not working with http and https RRS feed

  • Question

  • The server that runs sql reporting services had many server certificates within the certificates.msc -> personal folder. This folder became a dumping ground, after cleaning it up the report services webpage (http and https) do not work, no errors, it just does not exist.

    I in-bind all the virtual directory and web services url information and put it back but it still is the same behavior.

    I used the links below to help troubleshoot but the issue has not been fixed, I compared it to another server that is working and I am not seeing any issues.

    The only thing I have not done is go into the database itself, any help/ insight to fix this will be helpful.

    The server certificate is a sha2 cert that allows server and client authentication.

    Due note I had to clear out the certificate settings in "sql server network configuration" settings to get the database started

    The error I see in the log is:


    WARN: Initializing RSWindowsExtendedProtectionLevel to default value of 'Invalid'  because it was incorrectly specified in Configuration file as ''.
    WARN: Initializing RSWindowsExtendedProtectionScenario to default value of 'Invalid'  because it was incorrectly specified in Configuration file as ''.

    ERROR: Throwing Microsoft.ReportingServices.Library.ReportServerDatabaseUnavailableException: , Microsoft.ReportingServices.Library.ReportServerDatabaseUnavailableException: The report server cannot open a connection to the report server database. A connection to the database is required for all requests and processing. ---> System.Data.SqlClient.SqlException: Cannot open database "ReportServer" requested by the login. The login failed.
    Login failed for user 'domain\account'.

    ERROR: Error initializing configuration from the database: Microsoft.ReportingServices.Library.ReportServerDatabaseUnavailableException: The report server cannot open a connection to the report server database. A connection to the database is required for all requests and processing. ---> System.Data.SqlClient.SqlException: Cannot open database "ReportServer" requested by the login. The login failed.
    Login failed for user 'domain\account'.

    ERROR: Invalid ExtendedProtectionPolicy specified.

    ERROR: Error creating HTTP endpoint. System.ArgumentException: Value does not fall within the expected range

    INFO: AuthPersistence does not apply to basic authentication.
    INFO: RPC Server stopped.
    INFO: RPC Server stopped.
    INFO: The UserAccountControl value for the service account is 66048
    Invalid ExtendedProtectionPolicy specified.

    https://docs.microsoft.com/en-us/sql/reporting-services/install-windows/configure-report-server-urls-ssrs-configuration-manager

    https://docs.microsoft.com/en-us/sql/reporting-services/install-windows/configure-a-url-ssrs-configuration-manager

    https://docs.microsoft.com/en-us/sql/reporting-services/install-windows/configure-a-report-server-database-connection-ssrs-configuration-manager





    Wednesday, October 25, 2017 4:21 PM

Answers

  • Hi Jedi_Administrator,

    According to the error "

    The report server cannot open a connection to the report server database. A connection to the database is required for all requests and processing. ---> System.Data.SqlClient.SqlException: Cannot open database "ReportServer" requested by the login. The login failed.
    Login failed for user 'domain\account'.

    You could try to open ‘Reporting Services Configuration Manager’, switch to Database tab to check the ReportServer database and the credential, ensure this is database exist in the server and "domain\account" has sufficient permission. 

    Also, are you using SSL certificate? If so, you could follow the step in this article to configure SSL on Report Server: Configure SSL Connections on a Native Mode Report Server

    Best Regards,

    Henry 

    Thursday, October 26, 2017 7:58 AM
  • I believe it was the ssl piece tied to the server certificate, I disabled the ssl compnonet yesterday and it evenly came back up and was accessable. as for the ssl piece it turns out that the gmsa that is running the sql server service needs the read right of the private key on the cert in order to work properly so I fixed that as well.
    Thursday, October 26, 2017 2:20 PM

All replies

  • Hi Jedi_Administrator,

    According to the error "

    The report server cannot open a connection to the report server database. A connection to the database is required for all requests and processing. ---> System.Data.SqlClient.SqlException: Cannot open database "ReportServer" requested by the login. The login failed.
    Login failed for user 'domain\account'.

    You could try to open ‘Reporting Services Configuration Manager’, switch to Database tab to check the ReportServer database and the credential, ensure this is database exist in the server and "domain\account" has sufficient permission. 

    Also, are you using SSL certificate? If so, you could follow the step in this article to configure SSL on Report Server: Configure SSL Connections on a Native Mode Report Server

    Best Regards,

    Henry 

    Thursday, October 26, 2017 7:58 AM
  • I believe it was the ssl piece tied to the server certificate, I disabled the ssl compnonet yesterday and it evenly came back up and was accessable. as for the ssl piece it turns out that the gmsa that is running the sql server service needs the read right of the private key on the cert in order to work properly so I fixed that as well.
    Thursday, October 26, 2017 2:20 PM