Reportserver service kerberos authentication

Question

I have two report server running in scale-out mode and under NLB . I configured Kerberos configuration under the config of rsreportserver.config

and I have set the setspn

And I have set all the physical computer name and the virtualname (NLB cluster name) to setspn , I don't know which one i should set .

I also set kerberos delegation on the computer accounts and the Report service running account.

But......The reports are "blank"....( I can login to reporting service portal . ) ...

while I change back <RSWindowsKerberos/> -> to <RSWindowsNegotiate/> ... the reports can show up.. Anyone has the idea ?

Answer 1

Hi @sakuraime ,

Could you please help check the below situations.

1.Open the web service url to see if you could open the report server and run the reports.

2.Please check the SSRS error log to see if there is any error message when the reports are "blank" which will help us do more analysis.

3.What's the data source for the reports, have you set the spn for the data source and do the kerberos delegation.
(If the data source is SQL Sever)
Assumptions: -
• SQL is running under service account domain\SQLSvc
• SQL Box name is SQLBox.Domain.Com
• SQL Service is listening on port 1433
With the above mentioned assumptions, we need the following configured for the SQL Svc account
--SQL Server Serivce
Setspn –s MSSQLSvc/ SQLBox:1433 Domain\SQLSvc
Setspn –s MSSQLSvc/ SQLBox.Domain.com:1433 Domain\SQLSvc
Note: If SQL is a named instance and listening on a different port, then that port needs to be mentioned in the SPN.

Here is a detail documentation to cofigure kerberos delegation with SSRS. If the issue still occurs, we'd suggest that you may refer the article to reset.
https://www.itprotoday.com/sql-server/implement-kerberos-delegation-ssrs-0

Regards，

Zoe

---

If the answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hot issues October