We have developed our reporting solution based on Reporting Services 2005,
and our application has been deployed by our customer onto 5 servers, 3
front-end web servers and 2 back-end database servers (clustered).
As they are not going to open up the SQL Servers to HTTP traffic, we believe
that the solution is to install (and obviously license) SQL Server 2005, to
put just the RS component of SQL05 onto the webservers.
What we are looking into though, is putting SQL05 onto just one of the web
servers, and using a second domain, outside of load balancing. However, the
reports would still be called from our application on Domain A. So my
security question is about a secure SSL site on Domain A showing an iFrame
with the reports from Domain B.
We are not using integrated security, we have implemented custom auth
providers for the reports.
This is an internet application.
Regards
Andrew Teece
Senior Developer, eNate
[quoted text, click to view] "Bruce L-C [MVP]" <bruce_lcNOSPAM@hotmail.com> wrote in message
news:%23azoprwXGHA.3684@TK2MSFTNGP05.phx.gbl...
>A SQL Server 2005 license is needed for every server that is running
>Reporting Services. If all you have on your webfarm is the control in your
>web pages then no, you do not need the SQL Server 2005 license (note this
>is the server licencing I am talking about). If Reporting Services server
>is installed on your web farm then yes, you need the license.
>
> It sounds like in your case that the web farm has the control and it does
> not have the RS server installed. If so, then no additional licensing is
> required.
>
> I don't know about the second question. I do know that web services is
> used in the connection. I also know that a common issue with security has
> to do with double hop when using integrated security (which it sounds like
> you are). Don't confuse ip addressing issues with security domains. If you
> are using windows security (i.e. you are not doing your own forms based
> security) then you need to be using kerberos in order to get around the
> double hop problem.
>
> So, the more important question for you is, is this an intranet or
> internet application. If internet then you will need to be using Forms
> security.
>
>
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
>
>
> "Andrew Teece" <enate@newsgroups.nospam> wrote in message
> news:uPCQ1ewXGHA.4184@TK2MSFTNGP03.phx.gbl...
>> Just a little question....
>>
>> From my understanding, the report viewer control sends the client machine
>> an iFrame that connects directly to the SQL Reporting server (at least
>> when using reports in SQL rather than local ones).
>>
>> So this means that we must have SQL Server 2005 licensed and installed on
>> our entire webfarm?
>>
>> Secondly, if the sql server 2005 is a DIFFERENT webserver, on a different
>> domain, or subdomain such as "reporting.webfarmurl.com", and the site is
>> running ssl, so our users are connected to
https://www.webfarmurl.com >> will IE let an iframe connect to another URL such as
>>
http://reporting.webfarmurl.com or
https://reporting.webfarmurl.com? >>
>>
>>
>> Regards
>>
>>
>>
>>
>> Andrew
>>
>
>