Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2008 Forums
 Analysis Server and Reporting Services (2008)
 SPN setup for "windows integrated security"

Author  Topic 

rhavenn
Starting Member

14 Posts

Posted - 2010-10-12 : 14:00:06
I'm trying to get a report server to be able to connect to the database server using "windows integrated security" in the data source and I keep getting "ANONYMOUS LOGIN" failed issues. So, it's not passing the NTLM / Kerberos key around.

I've got the following setup:
IE 8 user browser -> SQL 2008 Reporting Services -> SQL 2008 DB server
It's a 2008 AD domain.

I've got SPNs setup for the following servers (setspn -L DOMAIN\user):
http/reportserv.domain.local:80
http/reportserv:80
where "user" is the domain user running the RS services.

I've got the SQL server running under a different domain account and setspn -L DOMAIN\user2 shows:

MSSQLSvc/sqlserv.domain.local
MSSQLSvc/sqlserv.domain.local:1433


Any thoughts of others steps or what I'm missing?

Clocks are synced, so time skew is not an issue.

russell
Pyro-ma-ni-yak

5072 Posts

Posted - 2010-10-12 : 14:56:24
DOMAIN\user and DOMAIN\user2 are trusted for delegation?
Go to Top of Page

Michael Valentine Jones
Yak DBA Kernel (pronounced Colonel)

7020 Posts

Posted - 2010-10-12 : 15:05:39
Are the SQL Server service account and computer trusted for delegation in Active Directory?





CODO ERGO SUM
Go to Top of Page
   

- Advertisement -