Telerik Reportview

[Jason]

Dear Experts: 

Issue descriptions:
One of my ASP.NET MVC project uses a number of Telerik Controls and works fine, the report uses Telerik ReportViewer which is also no problem. both on my development Computer and product Server. Recently, I deployment it on my new Server, whenever go to Report Module always receive a Windows Security to ask to input Windows user and password. it doesn't work both I input Server Administration or Click cancel. 

Other Modules which not use Reportviewer are no problem, and there is not any code lead to ask Window Security in report module.
I use same way and binding same IP on IIS for previous Server(works fine) and Current Server(doesn't Work).

So, is there any chance will let the Telerik.Reportviewer to ask Windows Security certification?

This project is From authentication.

I found out by Fiddler when I go to report module will send a 401 request to server in current Server.
But do same operation on old server, the request is a 200 request.

When pop up a Windows Security Dialog while go to report Module:
Click Cancel: this is nothing to do, but redirect a empty View.

Click OK with correct user and password will receive error as below:

Server Error in '/Reports' Application.

---

The resource cannot be found.

Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable. Please review the following URL and make sure that it is spelled correctly.

Requested URL: /Reports/Report/Index/HeadOffice

---

Version Information: Microsoft .NET Framework Version:2.0.50727.5456; ASP.NET Version:2.0.50727.5456 
--------------------------------------------------------------------------------------------------------------------------------

The following content is got from developer Tools of IE 9.0

 The request header is as below:
# Result Protocol Host URL Body Caching Content-Type Process Comments Custom
3 401 HTTP 184.107.200.202 /Reports/Report/Index/HeadOffice 0

Of course, you can open the attach files: one is Windows Security Dialog, other one is Fiddler collection Http requests.

Here is the error log from the server:

 

Log Name: Application
Source: ASP.NET 4.0.30319.0
Date: 9/13/2012 12:54:37 PM
Event ID: 1315
Task Category: Web Event
Level: Information
Keywords: Classic
User: N/A
Computer: IW-00163E003d8c
Description:
Event code: 4005
Event message: Forms authentication failed for the request. Reason: The ticket supplied was invalid.
Event time: 9/13/2012 12:54:37 PM
Event time (UTC): 9/13/2012 4:54:37 PM
Event ID: ba5dc85e13f645d2810d29eb4a7477a4
Event sequence: 2
Event occurrence: 1
Event detail code: 50201

Application information:
Application domain: /LM/W3SVC/4/ROOT-1-129920288750619610
Trust level: Full
Application Virtual Path: /
Application Path: C:\Applications\VeriLoyal\
Machine name: IW-00163E003D8C

Process information:
Process ID: 3000
Process name: w3wp.exe
Account name: NT AUTHORITY\SYSTEM

Request information:
Request URL: http://184.107.200.204/Organization/HeadOffice
Request path: /Organization/HeadOffice
User host address: 192.28.0.20
User:
Is authenticated: False
Authentication Type:
Thread account name: NT AUTHORITY\SYSTEM

Name to authenticate:

Custom event details:

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ASP.NET 4.0.30319.0" />
<EventID Qualifiers="16384">1315</EventID>
<Level>4</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-09-13T16:54:37.000000000Z" />
<EventRecordID>9061</EventRecordID>
<Channel>Application</Channel>
<Computer>IW-00163E003d8c</Computer>
<Security />
</System>
<EventData>
<Data>4005</Data>
<Data>Forms authentication failed for the request. Reason: The ticket supplied was invalid.</Data>
<Data>9/13/2012 12:54:37 PM</Data>
<Data>9/13/2012 4:54:37 PM</Data>
<Data>ba5dc85e13f645d2810d29eb4a7477a4</Data>
<Data>2</Data>
<Data>1</Data>
<Data>50201</Data>
<Data>/LM/W3SVC/4/ROOT-1-129920288750619610</Data>
<Data>Full</Data>
<Data>/</Data>
<Data>C:\Applications\VeriLoyal\</Data>
<Data>IW-00163E003D8C</Data>
<Data>
</Data>
<Data>3000</Data>
<Data>w3wp.exe</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>http://184.107.200.204/Organization/HeadOffice</Data>
<Data>/Organization/HeadOffice</Data>
<Data>192.28.0.20</Data>
<Data>
</Data>
<Data>False</Data>
<Data>
</Data>
<Data>NT AUTHORITY\SYSTEM</Data>
<Data>
</Data>
</EventData>
</Event>

Thanks.
Jason.

[IvanY]

Hi Jason,

From your description it seems that the problem lies in the differences between the two servers and their IIS configuration. You can check the suggestions from this forum thread - the user there has a similar issue (with images and css files) after migrating from IIS 7 to IIS 7.5.

Generally if authorization is used, it is possible that this somehow restricts the access to the http handler used by the viewer. Please, add the following <location> element to your web.config to make sure the handler is accessible at all times:

<location path="Telerik.ReportViewer.axd">
          <system.web>
            <authorization>
              <allow users="*"/>
            </authorization>
          </system.web>
 </location>

All the best,
IvanY
the Telerik team