This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 84%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi All,
Apologies if i am asking a repeated question. I have read many articles about Kerberos setup but i am still not clear about whole process even though there are simple setup docs.
We have an app server(IIS),SSRS (B)and an SSAS server (C).All servers are windows 2008 ENT. SQL-2008ENT
SSRS has some reports which has SSAS Cube data sources. All reports including SSAS data sources works from SSRS URL. No issues. I believe since its a single hop it works.
But when we try from Web server(A) we dont get reports which has SSAS data sources.
I can see kerb error in SSAS.
WebServer(A) SSRS(B) SSAS(C)
setspn is done for weserver for http url, SQL server service accounts in SSRS B and for SSAS also.
Delegation is also provided for webserver iis account towards SSRS server.
Also SSRS service account is given delegation to SSAS server also.
I ran Microsoft kerb check tool as well.
Do we have a tool to check where its failing?
Can you kindly advise or provide a detailed document including some pictures and examples of all spns which needs to setup.
Thanks,
ACDBA
Hi @
Have a look at this article which contain details on how to configure Kerberos based integration authentication for a website
Gary.
I can see kerb error in SSAS.
Where and what's the exact error message?
SQL-2008ENT
I hope you know that Windows & SQL Server version 2008 are out-of-support since a very long time?
FROM webserver its "The request failed with HTTP status 401: Unauthorized"
In Last hop SSAS server we are getting below events in server
A Kerberos Error Message was received:
on logon session
Client Time:
Server Time:
Error Code: 0xd KDC_ERR_BADOPTION
Extended Error: 0xc00000bb KLIN(0)
Client Realm:
Client Name:
Server Realm: Domain name
Server Name: SSAS server Name$domainname
Target Name: SSAS server Name$domainname
Error Text:
File: 9
Line: ff2
Error Data is in record data.
A Kerberos Error Message was received:
on logon session
Client Time:
Server Time: 7:0:35.0000 3/31/2022 Z
Error Code: 0xd KDC_ERR_BADOPTION
Extended Error: 0xc00000bb KLIN(0)
Client Realm:
Client Name:
Server Realm: Domain name
Server Name: SSAS server Name$domainname
Target Name: SSAS server Name$domainname
Error Text:
File: 9
Line: ff2
Error Data is in record data.
A Kerberos Error Message was received:
on logon session
Client Time:
Server Time: 6:54:45.0000 3/31/2022 Z
Error Code: 0x1b Unknown Error
Extended Error:
Client Realm:
Client Name:
Server Realm: Domain name
Server Name: username
Target Name: username@keyman .com
Error Text:
File: 9
Line: ff2
Error Data is in record data.
I hope you know that Windows & SQL Server version 2008 are out-of-support since a very long time? Yes it is :(