Custom Authentication (Security Extension) with SSRS 2016

Question

I am trying to implement custom forms authentication with SSRS 2016.

Within this article, a reference is made to the SQL Server Reporting Service Product Samples.

It appears that the latest supported version on the samples page (with regards to security extensions) is SSRS 2012. I have successfully applied the information gathered on the samples page to a SSRS 2014 instance. However, it looks as though the file system structure has changed a bit for SSRS 2016 (read, there is no longer a ReportManager folder) which seems to invalidate the instructions provided by the samples page.

Does anyone know where I can find updated procedures for establishing custom authentication?

Answer 1

我们偶然发现位于here的MSDN论坛上的一个帖子。这个帖子有很多活动，包括产品团队的回复。

对于在接下来的几周内获得自定义安全扩展程序以使用SSRS 2016的任何人，请查看。之后，据我所知，当产品处于RTM状态时，所有这些信息都将包含在文档中。

Answer 2

我最近做了这项工作。

我在很多网站上搜索过。这个例子对我有用： wholeTextFiles

下面，在项目示例下，有一个部署手册。

注意，就我而言，如果没有在文件中分配machineKey，Web门户就无法工作： \ Reporting Services \ ReportServer \ web.config Reporting Services \ RSWebApp \ Microsoft.ReportingServices.Portal.WebHost.exe.config

一般情况下，手册中描述的所有内容。不要错过任何一步。

我用来生成密钥的网站： https://github.com/Microsoft/Reporting-Services/tree/master/CustomSecuritySample

我希望此信息可以帮助某人。

Answer 3

我认为您在获取用户名和密码或生成用户令牌方面没有问题，SQL Server 2016中有关安全扩展的一些更改是指IAuthorizationExtension接口中的CheckAccess函数。

在以下链接中，您可以找到更改和示例代码，尤其是实现SQL Server 2016的安全扩展。

Implementing a Security Extension

Configure Custom or Forms Authentication on the Report Server

Authorization in Reporting Services

IAuthorizationExtension.CheckAccess Method (String, IntPtr, Byte[], CatalogOperation)