Kerb not working when trying from webserver

ACDBA 416 Reputation points

Hi All,

Apologies if i am asking a repeated question. I have read many articles about Kerberos setup but i am still not clear about whole process even though there are simple setup docs.

We have an app server(IIS),SSRS (B)and an SSAS server (C).All servers are windows 2008 ENT. SQL-2008ENT

SSRS has some reports which has SSAS Cube data sources. All reports including SSAS data sources works from SSRS URL. No issues. I believe since its a single hop it works.
But when we try from Web server(A) we dont get reports which has SSAS data sources.
I can see kerb error in SSAS.

WebServer(A) SSRS(B) SSAS(C)

setspn is done for weserver for http url, SQL server service accounts in SSRS B and for SSAS also.

Delegation is also provided for webserver iis account towards SSRS server.
Also SSRS service account is given delegation to SSAS server also.

I ran Microsoft kerb check tool as well.

Do we have a tool to check where its failing?

Can you kindly advise or provide a detailed document including some pictures and examples of all spns which needs to setup.


Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
11,104 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Gary Reynolds 9,206 Reputation points

    Hi @

    Have a look at this article which contain details on how to configure Kerberos based integration authentication for a website


    0 comments No comments

  2. Olaf Helper 36,001 Reputation points

    I can see kerb error in SSAS.

    Where and what's the exact error message?


    I hope you know that Windows & SQL Server version 2008 are out-of-support since a very long time?