<< Questions To Ponder | Home | Some Things Just Say "Hack Me" >>

SQL Server Reporting Services and the Validate Path Module

FINAL UPDATE:

This problem is now addressed in the following knowledge base article:

You may receive error messages from Reporting Services after you install the ASP.NET ValidatePath Module.

--

If you’ve installed the Validate Path Module because of the vulnerability in ASP.NET on a machine with SQL Server Reporting Services, then you’ve got troubles. Here is the exception I'm seeing: 

Request for the permission of type System.Web.AspNetHostingPermission, System,
Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 failed.

I dumped the PublicKeyBlob of the new assembly with the Caspol.exe utility and granted the module Full Trust (as the other GAC'ed assemblies signed by Microsoft have been given). Place the following into both the rssrvpolicy.config and rsmgrpolicy.config files. I placed the entry just underneath the Microsoft_Strong_Name CodeGroup.

I hope this gets everyone up and running again. If I see any official configuration information from MS, I'll update this post to pass it along

UPDATE Oct 11: No official word yet. If you are getting the following exception after updating both policy files, than restart the web server (IISRESET from the command line will work). Thanks to Adam Creeger for the tip. 

Assembly microsoft.web.validatepathmodule.dll security 
permission grant set is incompatible between appdomains.

Print | posted @ Saturday, October 09, 2004 5:50 AM

Comments on this entry:

Gravatar # re: SQL Server Reporting Services and the Validate Path Module
by Adam Creeger at 10/11/2004 5:23 PM
Very helpful, thankyou!
<br>
<br>After I implemented this fix, I was getting a Configuration Exception:
<br>
<br>Assembly microsoft.web.validatepathmodule.dll security
<br>permission grant set is incompatible between appdomains
<br>
<br>I fixed this by simply doing an IISReset. If thats not possible/feasible, recycling the Application Pool should do the trick...
<br>
<br>Just thought I would spread the knowledge in case anyone else had the same problem...
<br>
<br>Cheers,
<br>
<br>Adam
  
Gravatar # re: SQL Server Reporting Services and the Validate Path Module
by Steve Muise at 10/11/2004 9:59 PM
Thanks, I was doing some consulting work on the MS campus, and this update was pushed without the Ops Mgr's knowledge - between Google and you I saved days worth of head pounding troubleshooting. It seems the MSI for this patch doesn't leave much of a footprint in the event log either.
<br>
<br>Thanks again
  
Gravatar # re: SQL Server Reporting Services and the Validate Path Module
by Aaron at 10/12/2004 12:29 AM
I tried your fix but now it errors out parsing machine.config, specifically the following line gives a permissions error.
<br>Line 198: &lt;add assembly=&quot;*&quot;/&gt;
<br>
<br>Back to the drawing board...
  
Gravatar # re: SQL Server Reporting Services and the Validate Path Module
by Velvet Saunders at 10/12/2004 3:59 PM
Thank you for the coded. It worked to solve the initial problem; however, I am now receiving the following error:
<br>
<br>The underlying connection was closed: Could not establish secure channel for SSL/TLS.
<br>
<br>Any suggestions on how to resolve this would be appreciated.
<br>
<br>Thanks again.
  
Gravatar # re: SQL Server Reporting Services and the Validate Path Module
by Jon Forst at 10/12/2004 10:07 PM
This is exactly was I was looking for. Worked perfect.
<br>Thanks!
  
Gravatar # re: SQL Server Reporting Services and the Validate Path Module
by nikhil at 10/27/2004 11:45 PM
The underlying connection was closed: Could not establish secure channel for SSL/TLS.
<br>
<br>I am getting the same error any solution
  
Gravatar # re: SQL Server Reporting Services and the Validate Path Module
by kornolio at 4/27/2005 11:34 AM
try http://support.microsoft.com/kb/887787
  
Gravatar # re: SQL Server Reporting Services and the Validate Path Module
by Wasim Kazi at 7/26/2005 1:33 PM
Is it possible for you to give the commands and a few steps on how to use the capsol? It will really help novices like me here.
  
Gravatar # re: SQL Server Reporting Services and the Validate Path Module
by scott at 7/26/2005 2:16 PM
Here are a couple places I'd look:

msdn.microsoft.com/.../default.asp

samples.gotdotnet.com/.../SecScripting.aspx

And of course:

msdn.microsoft.com/.../default.aspx
  
Comments have been closed on this topic.
Scott Allen
Posts - 869
Comments - 4493
Stories - 14