December 7, 2016 at 2:19 pm
I am unsure how to proceed.
I've just started at a new job (predecessor isn't here).
There is a sharepoint (I don't know anything about sharepoint.) and SSRS integrated pointed at an existing server that works great. But that existing server is an old physical box on it's last legs.
We've got a new system ready to go but I can not for the life of me get windows authentication to work with it for the reports.
The SQL Server is in an availability group.
I've run setspn successfully, but I think I've done it incorrectly.
I ran it against the Service account for the SQL Server. Do I need to run it for the sharepoint service account instead?
December 7, 2016 at 2:50 pm
mortalic (12/7/2016)
I am unsure how to proceed.I've just started at a new job (predecessor isn't here).
There is a sharepoint (I don't know anything about sharepoint.) and SSRS integrated pointed at an existing server that works great. But that existing server is an old physical box on it's last legs.
We've got a new system ready to go but I can not for the life of me get windows authentication to work with it for the reports.
The SQL Server is in an availability group.
I've run setspn successfully, but I think I've done it incorrectly.
I ran it against the Service account for the SQL Server. Do I need to run it for the sharepoint service account instead?
Could you provide a bit more info? There just isn't enough here for anyone to do anything other than guess.
What errors are you getting and what do you mean when you say you can't get windows auth to work with reports? Users can't access reports? Or someone can't access the report server? What's not working and what are the errors.
You've run setspn so were you or are you seeing kerberos errors? Have you also checked for errors in the Report Server log? What are the errors you are getting with the service accounts? Did you also check for errors in the SQL Server logs?
If you could provide more info, I think someone can certainly help out.
Sue
December 7, 2016 at 3:44 pm
My apologies.
On a datasource in sharepoint/ssrs, I get the error, Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON' for one server, but it works great on a different server.
The spn's appear to be set (though I haven't figured out how to tell for which service account).
And the account I think is the sharepoint service account, based off the iis app pool account (not sure if that's the right one or not), is trusted for delegation in AD.
I think the answer is that spn on the server that isn't working, isn't set with the sharepoint/ssrs account, but I don't know how to tell.
December 7, 2016 at 4:40 pm
mortalic (12/7/2016)
My apologies.On a datasource in sharepoint/ssrs, I get the error, Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON' for one server, but it works great on a different server.
The spn's appear to be set (though I haven't figured out how to tell for which service account).
And the account I think is the sharepoint service account, based off the iis app pool account (not sure if that's the right one or not), is trusted for delegation in AD.
I think the answer is that spn on the server that isn't working, isn't set with the sharepoint/ssrs account, but I don't know how to tell.
I don't think it's the data source as you would get different errors. Is this just trying to run a report?
The error could definitely be a double hop issue - you can definitely hit that with Sharepoint and SSRS if the spns, delegation isn't set up.
SSRS service account does need to be set for delegation.
This article goes through all the different commands with SetSPN - viewing, adding, troubleshooting, etc:
To view spns for a server, at the command prompt you just do: setspn -l YourServerName
If you have no spn for SSRS which I'm guessing the issue, you can follow the steps in the article for setting up an SPN for SSRS.
https://msdn.microsoft.com/en-us/library/cc281382.aspx
Sue
December 8, 2016 at 5:46 pm
I do think that's the issue (spns) however the sql server for sure has spn's, and the ssrs server too.
It's the service account that sharepoint/ssrs is using that I think is the issue.
On the sharepoint server it shows itself as the ssrs server as well, however when I look, I see the SSRS Configuration Manager and it will open, however it doesn't actually let you do anything. Is this normal for SSRS integrated with sharepoint? I'm no stranger to SSRS, but I've never used it in integrated mode before.
December 8, 2016 at 6:23 pm
mortalic (12/8/2016)
I do think that's the issue (spns) however the sql server for sure has spn's, and the ssrs server too.It's the service account that sharepoint/ssrs is using that I think is the issue.
On the sharepoint server it shows itself as the ssrs server as well, however when I look, I see the SSRS Configuration Manager and it will open, however it doesn't actually let you do anything. Is this normal for SSRS integrated with sharepoint? I'm no stranger to SSRS, but I've never used it in integrated mode before.
You use Report Manager if you are in native mode or with integrated mode go to Sharepoint Central Administration and go to Applications. Report Services is listed there.
You need to check if the accounts are trusted for delegation.
This article will help you walk through all the steps for spns, delegation, which one from which service, etc.
How to configure SQL Reporting Services in SharePoint Server for Kerberos authentication
https://support.microsoft.com/en-us/kb/2723587
Sue
December 9, 2016 at 9:13 am
Thank you, I will take a look at that today. I just got access to sharepoint.
Viewing 7 posts - 1 through 6 (of 6 total)
You must be logged in to reply to this topic. Login to reply