kerberos ssrs and winrm

• Alren

  Mr or Mrs. 500

  Points: 575

  More actions

  June 1, 2012 at 4:15 am

  #270034

  I'm trying to fin a way to use powershell remoting and ssrs on the same machine.

  We need them both to use Kerberos

  WinRm doesn't work with ntlm and we dont want to provide passwords in our scripts

  On SSRS, we use kerberos delegation with some SQL databases

  Lets say machine name is Srv1

  ssrs ("ReportServer") runs under a domain usercode "dom/usr_ssrs"

  winrm runs under the "Network Service"

  They both seem to use HTTP protocol

  To make ssrs work I need to add these SPN:

  HTTP/Srv1 for "dom\usr_ssrs"

  HTTP/Srv1.dom for "dom\usr_ssrs"

  Adding these will break winrm

  What can be done to make both work ?

• Satish Nagaraja

  SSCrazy

  Points: 2632

  More actions

  June 1, 2012 at 5:14 am

  #1495787

  Suggest check with windows server expert on msdn , one link on similar issue seems like a bug.

  http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2management/thread/bb623545-f68f-41a0-8f71-e6f4b9da7a3b

  Cheers

  Sat

  Cheer Satish 🙂

• Alren

  Mr or Mrs. 500

  Points: 575

  More actions

  June 1, 2012 at 5:24 am

  #1495792

  Thanks SSC-Enthusiastic,

  I'll do that

  Alren

• Alren

  Mr or Mrs. 500

  Points: 575

  More actions

  August 3, 2012 at 12:54 am

  #1521251

  The solution to this problem is that you have to use another DNS alias.

  Kerberos doesn't resolve DNS, so for authentication you can use different DNS names for the same machine.

  In the example above, you can create a specific DNS entry for SSRS

  HTTP/Srv1.ssrs.dom for "dom\usr_ssrs"

  Hope this will help.

  Alren