AspNetHostingPermission and subscriptions

Hi,
Since a week the subsriptions are not working anymore.
I'm getting following status error in the subscription page:
Error: Request for the permission of type
System.Web.AspNetHostingPermission, System, Version=1.0.5000.0,
Culture=neutral, PublicKeyToken=b77a5c561934e089 failed
The reportserver is using forms authentication.
The report is working fine.
The subscription in datadriven and gives input for a parameter(the data
query is working fine).
There is a subscription for file export (pdf), email and print. All 3
subscriptions gives the same error.
There is no event about this error.
Thanks for any help
BartHi Bart,
Thank you for your post.
Would you please try to download the following config file and replace your
original file?
http://download.microsoft.com/download/9/8/C/98CEED6D-3489-4504-BBB5-586B630
01CE0/887787.exe
To replace the .config files with new versions that are available from the
Microsoft Download Center, follow these steps:
Important When you replace your .config files, you return to a default
installation. Any changes that you have made to the configuration files
will be lost.
1. Locate the following two files on the computer that is running Microsoft
Internet Information Services (IIS) and the Reporting Services components:
? %ProgramFiles%\Microsoft SQL Server\MSSQL\Reporting
Services\ReportServer\rssrvpolicy.config
? %ProgramFiles%\Microsoft SQL Server\MSSQL\Reporting
Services\ReportManager\rsmgrpolicy.config
2. Rename the files in step 1 to Rssrvpolicy.old and Rsmgrpolicy.old.
3. Download the .config files from the following link:
http://download.microsoft.com/download/9/8/C/98CEED6D-3489-4504-BBB5-586B630
01CE0/887787.exe
4. Expand the files from the package to your local drive.
5. Replace your current .config files with the .config files from the
package.
6. Restart the IIS services by using IIS Manager.
Here is the article for your reference.
887787 You may receive error messages from Reporting Services after you
install the ASP.NET ValidatePath Module
http://support.microsoft.com/default.aspx?scid=kb;EN-US;887787
Hope this will be helpful.
Sincerely,
Wei Lu
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================This posting is provided "AS IS" with no warranties, and confers no rights.|||Hi Wei,
Thanks for your help.
I've got the same error message.
What else can I try?
Thanks
Bart
"Wei Lu" wrote:
> Hi Bart,
> Thank you for your post.
> Would you please try to download the following config file and replace your
> original file?
> http://download.microsoft.com/download/9/8/C/98CEED6D-3489-4504-BBB5-586B630
> 01CE0/887787.exe
> To replace the .config files with new versions that are available from the
> Microsoft Download Center, follow these steps:
> Important When you replace your .config files, you return to a default
> installation. Any changes that you have made to the configuration files
> will be lost.
> 1. Locate the following two files on the computer that is running Microsoft
> Internet Information Services (IIS) and the Reporting Services components:
> ? %ProgramFiles%\Microsoft SQL Server\MSSQL\Reporting
> Services\ReportServer\rssrvpolicy.config
> ? %ProgramFiles%\Microsoft SQL Server\MSSQL\Reporting
> Services\ReportManager\rsmgrpolicy.config
> 2. Rename the files in step 1 to Rssrvpolicy.old and Rsmgrpolicy.old.
> 3. Download the .config files from the following link:
> http://download.microsoft.com/download/9/8/C/98CEED6D-3489-4504-BBB5-586B630
> 01CE0/887787.exe
> 4. Expand the files from the package to your local drive.
> 5. Replace your current .config files with the .config files from the
> package.
> 6. Restart the IIS services by using IIS Manager.
> Here is the article for your reference.
> 887787 You may receive error messages from Reporting Services after you
> install the ASP.NET ValidatePath Module
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;887787
> Hope this will be helpful.
> Sincerely,
> Wei Lu
> Microsoft Online Community Support
> ==================================================> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==================================================> This posting is provided "AS IS" with no warranties, and confers no rights.
>|||Hi Bart,
Thank you for the update.
Would you please change the following setting in the web.config file of
Report Manager and the Report Server:
<system.web>
<trust level="RosettaMgr" originUrl="" />
</system.web>
Please change the level attribut of the trust element to "Full" and have a
try again?
If this issue still appeared again, would you please send the report log
file to me? By default, the log file is located at \Microsoft SQL
Server\<SQL Server Instance>\Reporting Services\LogFiles. Also, please send
these two web.config files. You may zip the folder with logfiles and
include these two web.config files and send to me directly. I understand
the information may be sensitive to you, my direct email address is
weilu@.ONLINE.microsoft.com (Please remove ONLINE. before you send the
email. ), you may
send the file to me directly and I will keep secure.
Sincerely,
Wei Lu
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================This posting is provided "AS IS" with no warranties, and confers no rights.|||Hi Bart,
Thank you for coming back. I researched your log file and searched in out
internal database. I found a similar issue and here is the solution:
1. Save the following string in an XML file.
<IPermission class="System.Web.AspNetHostingPermission, System,
Version=1.0.5000.0, Culture=neutral, publicKeyToken=b77a5c561934e089"
version="1" Level="Unrestricted" />
2. Then open Microsoft .NET Framework 1.1 Configuration Console and expand
till:
Runtime Security Policy >> Machine >> Code Groups >> All_Code.>>
My_Computer_Zone.
3. Right click the My_Computer_Zone and select New..
4. Give a proper name for new code group and click Next.
5. Choose All Code from the only dropdown list and click next.
6. Select Create a new permission set option and click next.
7. Give a proper name to new permission set. And click next.
8. In the middle of the window, down bottom, click Import.. Button.
Locate the xml file in which we have saved the permission set string.
9. Click next and then finish.
10. Repeat the same with LocalIntranet_Zone and Internet_Zone if this
doesn't resolves the problem.
11. Restart the IIS by using IISRESET from command prompt or through the
GUI.
Here are a few good MSDN articles for your records:
<http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secmod/htm
l/secmod82.asp>
<http://msdn.microsoft.com/msdnmag/issues/01/02/CAS/default.aspx>
<http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/h
tml/THCMCh09.asp>
Hope this information will be helpful!
Sincerely,
Wei Lu
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================(This posting is provided "AS IS", with no warranties, and confers no
rights.)|||Hi Lu,
I've created the permissionset in the 3 zones.
The result is the same.
One change is that the error is not logged in the logfile:
<Header>
<Product>Microsoft SQL Server Reporting Services Version
8.00.1042.00</Product>
<Locale>en-US</Locale>
<TimeZone>Romance Daylight Time</TimeZone>
<Path>C:\Program Files\Microsoft SQL Server\MSSQL\Reporting
Services\LogFiles\ReportServer__08_08_2006_12_10_17.log</Path>
<SystemName>SERVER</SystemName>
<OSName>Microsoft Windows NT 5.2.3790.0</OSName>
<OSVersion>5.2.3790.0</OSVersion>
</Header>
w3wp!webserver!1930!8/08/2006-12:10:17:: i INFO: Reporting Web Server started
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing ConnectionType
to '1' as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
IsSchedulingService to 'True' as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
IsNotificationService to 'True' as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing IsEventService
to 'True' as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing PollingInterval
to '10' second(s) as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing MemoryLimit to
'60' percent as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing RecycleTime to
'720' minute(s) as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
MaximumMemoryLimit to '80' percent as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
MaxAppDomainUnloadTime to '30' minute(s) as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing MaxQueueThreads
to '0' thread(s) as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
MaxActiveReqForOneUser to '20' requests(s) as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing MaxScheduleWait
to '5' second(s) as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
DatabaseQueryTimeout to '120' second(s) as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing InstanceName to
'MSSQLSERVER' as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
ProcessRecycleOptions to '0' as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
RunningRequestsScavengerCycle to '60' second(s) as specified in Configuration
file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
RunningRequestsDbCycle to '60' second(s) as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
RunningRequestsAge to '30' second(s) as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
CleanupCycleMinutes to '10' minute(s) as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
SecureConnectionLevel to '0' as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing DisplayErrorLink
to 'True' as specified in Configuration file.
w3wp!library!1930!8/08/2006-12:10:17:: i INFO: Initializing
WebServiceUseFileShareStorage to default value of 'False' because it was not
specified in Configuration file.
w3wp!resourceutilities!1930!8/08/2006-12:10:17:: i INFO: Running on 1
physical processors, 1 logical processors
w3wp!resourceutilities!1930!8/08/2006-12:10:17:: i INFO: Reporting Services
starting SKU: Developer
w3wp!runningjobs!1930!8/08/2006-12:10:17:: i INFO: Database Cleanup (Web
Service) timer enabled: Next Event: 600 seconds. Cycle: 600 seconds
w3wp!runningjobs!1930!8/08/2006-12:10:17:: i INFO: Running Requests
Scavenger timer enabled: Next Event: 60 seconds. Cycle: 60 seconds
w3wp!runningjobs!1930!8/08/2006-12:10:17:: i INFO: Running Requests DB timer
enabled: Next Event: 60 seconds. Cycle: 60 seconds
w3wp!runningjobs!1930!8/08/2006-12:10:17:: i INFO: Memory stats update timer
enabled: Next Event: 60 seconds. Cycle: 60 seconds
w3wp!library!1930!08/08/2006-12:10:28:: i INFO: Call to GetSystemPermissions
w3wp!crypto!1930!08/08/2006-12:10:28:: i INFO: Initializing crypto as user:
NT AUTHORITY\NETWORK SERVICE
w3wp!crypto!1930!08/08/2006-12:10:28:: i INFO: Exporting public key
w3wp!crypto!1930!08/08/2006-12:10:28:: i INFO: Performing sku validation
w3wp!crypto!1930!08/08/2006-12:10:28:: i INFO: Importing existing encryption
key
w3wp!library!1004!08/08/2006-12:10:31:: i INFO: Call to GetSystemPermissions
w3wp!library!1930!08/08/2006-12:10:41:: i INFO: Call to GetSystemPermissions
w3wp!library!1004!08/08/2006-12:10:44:: i INFO: Call to GetSystemPermissions
w3wp!library!1004!08/08/2006-12:10:45:: i INFO: Call to
GetPermissions:/Opdrachten/Betaalherinneringen
w3wp!library!1004!08/08/2006-12:10:45:: i INFO: Initializing
EnableIntegratedSecurity to 'True' as specified in Server system properties.
w3wp!library!1d40!08/08/2006-12:10:46:: i INFO: Call to GetSystemPermissions
w3wp!library!1d40!08/08/2006-12:10:46:: i INFO: Initializing
ResponseBufferSizeKb to default value of '64' KB because it was not specified
in Server system properties.
w3wp!library!1d40!08/08/2006-12:10:46:: i INFO: Initializing
UseSessionCookies to 'True' as specified in Server system properties.
w3wp!library!1930!08/08/2006-12:10:47:: i INFO: Call to
GetPermissions:/Opdrachten/Betaalherinneringen
w3wp!library!1930!08/08/2006-12:10:47:: i INFO: Call to GetSystemPermissions
w3wp!library!1930!08/08/2006-12:12:24:: i INFO: Call to
GetPermissions:/Opdrachten/Betaalherinneringen
w3wp!library!1930!08/08/2006-12:12:24:: i INFO: Call to GetSystemPermissions
w3wp!library!1004!08/08/2006-12:12:27:: i INFO: Initializing SessionTimeout
to '600' second(s) as specified in Server system properties.
w3wp!library!1004!08/08/2006-12:12:27:: i INFO: Initializing
EnableClientPrinting to default value of 'True' because it was not specified
in Server system properties.
w3wp!library!1004!08/08/2006-12:12:28:: i INFO: Call to RenderFirst(
'/Opdrachten/Betaalherinneringen' )
w3wp!library!1004!8/8/2006-12:12:33:: i INFO: Initializing
SqlStreamingBufferSize to default value of '64640' Bytes because it was not
specified in Server system properties.
w3wp!library!1004!8/8/2006-12:12:33:: i INFO: Initializing
SnapshotCompression to 'SQL' as specified in Server system properties.
w3wp!library!1004!08/08/2006-12:12:33:: Using folder C:\Program
Files\Microsoft SQL Server\MSSQL\Reporting Services\RSTempFiles for temporary
files.
w3wp!library!1004!08/08/2006-12:12:34:: i INFO: Initializing
EnableExecutionLogging to 'True' as specified in Server system properties.
w3wp!webserver!1004!08/08/2006-12:12:34:: i INFO: Processed report.
Report='/Opdrachten/Betaalherinneringen', Stream=''
w3wp!library!1930!08/08/2006-12:12:56:: i INFO: Call to GetSystemPermissions
w3wp!library!1930!08/08/2006-12:12:56:: i INFO: Call to ListRoles
w3wp!library!1004!08/08/2006-12:13:02:: i INFO: Call to GetSystemPermissions
w3wp!library!1930!08/08/2006-12:13:04:: i INFO: Call to GetSystemPermissions
w3wp!library!1d40!08/08/2006-12:13:10:: i INFO: Call to GetSystemPermissions
w3wp!library!1004!08/08/2006-12:13:10:: i INFO: Call to GetSystemPermissions
w3wp!library!1930!08/08/2006-12:13:49:: i INFO: Call to GetSystemPermissions
w3wp!library!1d40!08/08/2006-12:14:00:: i INFO: Call to GetSystemPermissions
w3wp!library!1930!08/08/2006-12:14:04:: i INFO: Call to GetSystemPermissions
w3wp!library!1930!08/08/2006-12:14:09:: i INFO: Call to GetSystemPermissions
w3wp!library!1930!08/08/2006-12:14:12:: i INFO: Call to GetSystemPermissions
w3wp!library!1004!08/08/2006-12:14:19:: i INFO: Call to GetSystemPermissions
w3wp!library!1930!08/08/2006-12:14:21:: i INFO: Call to GetSystemPermissions
w3wp!library!1004!08/08/2006-12:14:22:: i INFO: Call to
GetPermissions:/Opdrachten/Betaalherinneringen
w3wp!library!1004!08/08/2006-12:14:22:: i INFO: Call to GetSystemPermissions
w3wp!library!1004!08/08/2006-12:14:23:: i INFO: Call to
GetPermissions:/Opdrachten/Betaalherinneringen
w3wp!library!1004!08/08/2006-12:14:24:: i INFO: Call to GetSystemPermissions
Any idea?
Thanks
Bart
"Wei Lu [MSFT]" wrote:
> Hi Bart,
> Thank you for coming back. I researched your log file and searched in out
> internal database. I found a similar issue and here is the solution:
> 1. Save the following string in an XML file.
> <IPermission class="System.Web.AspNetHostingPermission, System,
> Version=1.0.5000.0, Culture=neutral, publicKeyToken=b77a5c561934e089"
> version="1" Level="Unrestricted" />
>
> 2. Then open Microsoft .NET Framework 1.1 Configuration Console and expand
> till:
> Runtime Security Policy >> Machine >> Code Groups >> All_Code.>>
> My_Computer_Zone.
> 3. Right click the My_Computer_Zone and select New..
> 4. Give a proper name for new code group and click Next.
> 5. Choose All Code from the only dropdown list and click next.
> 6. Select Create a new permission set option and click next.
> 7. Give a proper name to new permission set. And click next.
> 8. In the middle of the window, down bottom, click Import.. Button.
> Locate the xml file in which we have saved the permission set string.
> 9. Click next and then finish.
> 10. Repeat the same with LocalIntranet_Zone and Internet_Zone if this
> doesn't resolves the problem.
> 11. Restart the IIS by using IISRESET from command prompt or through the
> GUI.
> Here are a few good MSDN articles for your records:
> <http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secmod/htm
> l/secmod82.asp>
> <http://msdn.microsoft.com/msdnmag/issues/01/02/CAS/default.aspx>
> <http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetsec/h
> tml/THCMCh09.asp>
> Hope this information will be helpful!
> Sincerely,
> Wei Lu
> Microsoft Online Community Support
> ==================================================> Get notification to my posts through email? Please refer to
> http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
> ications.
> Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
> where an initial response from the community or a Microsoft Support
> Engineer within 1 business day is acceptable. Please note that each follow
> up response may take approximately 2 business days as the support
> professional working with you may need further investigation to reach the
> most efficient resolution. The offering is not appropriate for situations
> that require urgent, real-time or phone-based interactions or complex
> project analysis and dump analysis issues. Issues of this nature are best
> handled working with a dedicated Microsoft Support Engineer by contacting
> Microsoft Customer Support Services (CSS) at
> http://msdn.microsoft.com/subscriptions/support/default.aspx.
> ==================================================> (This posting is provided "AS IS", with no warranties, and confers no
> rights.)
>
>|||Hi Bart,
Please try to re-create the subscription first to check whether this issue
appeared or not.
If you try to access the Report manager, does any issue appear?
Please let me know the result. Thank you!
Sincerely,
Wei Lu
Microsoft Online Community Support|||Hi Lu,
Re-created the subscription, same issue.
Via the report manager, no problem.
Bart
"Wei Lu [MSFT]" wrote:
> Hi Bart,
> Please try to re-create the subscription first to check whether this issue
> appeared or not.
> If you try to access the Report manager, does any issue appear?
> Please let me know the result. Thank you!
> Sincerely,
> Wei Lu
> Microsoft Online Community Support
>|||Hi Bart,
From your description, we need to use the Filemon tool to monitor the file
access and try to figure out are there any permission issue.
Please try to download the Filemon from the following web site. Run it and
try to create a subsciption and then stop and save the result.
http://www.sysinternals.com/Utilities/Filemon.html
Please send the result to me. my direct email address is
weilu@.ONLINE.microsoft.com ( Please remove ONLINE when you send the email
), you may send the file to me directly and I will keep it secure.
Sincerely,
Wei Lu
Microsoft Online Community Support|||Hi Wei,
Have you received my email last week?
Send on 22/8
Thanks
Bart
"Wei Lu [MSFT]" wrote:
> Hi Bart,
> From your description, we need to use the Filemon tool to monitor the file
> access and try to figure out are there any permission issue.
> Please try to download the Filemon from the following web site. Run it and
> try to create a subsciption and then stop and save the result.
> http://www.sysinternals.com/Utilities/Filemon.html
> Please send the result to me. my direct email address is
> weilu@.ONLINE.microsoft.com ( Please remove ONLINE when you send the email
> ), you may send the file to me directly and I will keep it secure.
> Sincerely,
> Wei Lu
> Microsoft Online Community Support
>|||Hello Bart,
Unfortunately, I do not get the email.
Would you please send it again? Thanks!
Sincerely,
Wei Lu
Microsoft Online Community Support|||Hi Wei,
It seems to be that you are not getting my emails:
About your last email with the caspol trick, it didn't bring any solution.
Have you any idea?
Thanks
Bart
"Wei Lu [MSFT]" wrote:
> Hello Bart,
> Unfortunately, I do not get the email.
> Would you please send it again? Thanks!
> Sincerely,
> Wei Lu
> Microsoft Online Community Support
>|||Hello Bart,
Unforunately, I do not get the email from you.
You mean that if you turn off the CAS, you still could not send the
subscriptions.
Would you please let me know if you remove the Form authenticatioin, does
this issue appear?
Also, if you remove the content of the element
<UnattendedExecutionAccount></UnattendedExecutionAccount> in the
RSReportServer.config file, does this issue still appear?
Sincerely,
Wei Lu
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================This posting is provided "AS IS" with no warranties, and confers no rights.|||Hello bart,
How is everything going? Please feel free to let me know if you need any
assistance.
Sincerely,
Wei Lu
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================This posting is provided "AS IS" with no warranties, and confers no rights.