简体繁体 English

使用 SSRS 2016 的自定义身份验证（安全扩展）

[英]Custom Authentication (Security Extension) with SSRS 2016

原文 2016-04-04 18:35:17 5 3 sql-server/ reporting-services/ sql-server-2016/ ssrs-2016

I am trying to implement custom forms authentication with SSRS 2016.我正在尝试使用 SSRS 2016 实现自定义 forms 身份验证。

Within this article , a reference is made to the SQL Server Reporting Service Product Samples .在本文中，参考了SQL 服务器报告服务产品示例。

It appears that the latest supported version on the samples page (with regards to security extensions) is SSRS 2012. I have successfully applied the information gathered on the samples page to a SSRS 2014 instance.示例页面上支持的最新版本（关于安全扩展）似乎是 SSRS 2012。我已成功地将示例页面上收集的信息应用于 SSRS 2014 实例。 However, it looks as though the file system structure has changed a bit for SSRS 2016 (read, there is no longer a ReportManager folder) which seems to invalidate the instructions provided by the samples page.但是，看起来 SSRS 2016 的文件系统结构发生了一些变化（读取，不再有 ReportManager 文件夹），这似乎使示例页面提供的说明无效。

Does anyone know where I can find updated procedures for establishing custom authentication?有谁知道我在哪里可以找到建立自定义身份验证的更新程序？

3 个解决方案

We stumbled upon a thread on the MSDN forums located here .我们在位于此处的 MSDN 论坛上偶然发现了一个主题。 This thread has had quite a bit of activity including responses from the product team.这个线程有相当多的活动，包括来自产品团队的回应。

For anyone having issues with getting a custom security extension to work with SSRS 2016 in the next couple of weeks, please have a look.对于在接下来的几周内获得自定义安全扩展以与 SSRS 2016 一起使用时遇到问题的任何人，请查看。 After that, it is my understanding that all of this information will be included in the documentation when the product is in a RTM state.之后，据我所知，当产品处于 RTM 状态时，所有这些信息都将包含在文档中。

I recently did this work.我最近做了这个工作。

I searched in many sites.我在很多网站上搜索过。 This example works for me: https://github.com/Microsoft/Reporting-Services/tree/master/CustomSecuritySample .这个例子对我有用： https : //github.com/Microsoft/Reporting-Services/tree/master/CustomSecuritySample 。 Below, under the example of the project, there is a deployment manual.下面，在项目的例子下，有部署手册。

Note, in my case, the web portal did not work without assigning machineKey in the files:请注意，就我而言，如果没有在文件中分配 machineKey，门户网站将无法工作：

...\\Reporting Services\\ReportServer\\web.config ...\\Reporting Services\\ReportServer\\web.config
...\\Reporting Services\\RSWebApp\\Microsoft.ReportingServices.Portal.WebHost.exe.config ...\\Reporting Services\\RSWebApp\\Microsoft.ReportingServices.Portal.WebHost.exe.config

In general, everything as described in the manual.一般来说，一切都如手册中所述。 Not missing a single step.没有遗漏一个步骤。

The site I used to generate the key: http://www.developerfusion.com/tools/generatemachinekey/我用来生成密钥的站点： http : //www.developerfusion.com/tools/generatemachinekey/

I hope this info helps someone.我希望这些信息可以帮助某人。

I think you dont have a problem with get username and password or generating user token, some changes about Security Extentions in SQL Server 2016 refers CheckAccess function in IAuthorizationExtension interface.我认为您在获取用户名和密码或生成用户令牌方面没有问题，有关 SQL Server 2016 中安全扩展的一些更改是指 IAuthorizationExtension 接口中的 CheckAccess 函数。

In the following links you can find changes and sample codes especially for implementing a Security Extension for SQL Server 2016.在以下链接中，您可以找到更改和示例代码，特别是用于实现 SQL Server 2016 的安全扩展。

Implementing a Security Extension实施安全扩展

Configure Custom or Forms Authentication on the Report Server在报表服务器上配置自定义或表单身份验证

Authorization in Reporting Services Reporting Services 中的授权

IAuthorizationExtension.CheckAccess Method (String, IntPtr, Byte[], CatalogOperation) IAuthorizationExtension.CheckAccess 方法（字符串、IntPtr、Byte[]、CatalogOperation）

thanks Mehdi.谢谢迈赫迪。 I have implemented the custom sample code.我已经实现了自定义示例代码。 I could to have the custom user interface (registger and log in).我可以拥有自定义用户界面（注册和登录）。 however my question is how to grant the user caputred in the database table with access to the SSRS portal, folders and reports?但是我的问题是如何授予数据库表中捕获的用户访问 SSRS 门户、文件夹和报告的权限？