July 27, 2015 at 11:35 am
I have 3 instances of Report Server installed (Dev\Test\Prod) on my server.
We have 3 URLs specified for all 3 environments
We appear to he having issues setting the SPNs for the Report Server accounts. It doesn't appear to have the ability to specify the instance name for Report server as it does for the SQL service accounts.
Basically we have DEV up and running but when we attempt to configure the other environment's, it messes up the other environments and URL access is ceased.
we are able to access the URLs from rdp on the actual server, but not from other sources.
We have read through several articles, and we are not finding what we need. We also ran this query:
SELECT
s.session_id
, c.connect_time
, s.login_time
, s.login_name
, c.protocol_type
, c.auth_scheme
, s.HOST_NAME
, s.program_name
FROM sys.dm_exec_sessions s
JOIN sys.dm_exec_connections c
ON s.session_id = c.session_id
and the schema is showing as NTLM, not Kerberos on all of the Instances.
July 28, 2015 at 2:27 am
Hi
Did you configure properly the RSReportServer.config file to use the Kerberos auth ?
This is done on the EnableAuthPersistence = True
<Authentication>
<AuthenticationTypes>
<RSWindowsNegotiate/>
</AuthenticationTypes>
<EnableAuthPersistence>true</EnableAuthPersistence>
</Authentication>
:w00t: !!!GOOGLE IS YOUR BEST FRIEND!!! :w00t:
July 28, 2015 at 6:48 am
Yes, that is configured correctly in each of the instances. We can not seem to register the SPNs for multiple instances. The First one went fine but when we try the next one, it says Duplicate SPNs.
We tried specifying a different port number in the URL for each environment, and then setting the SPN on the report Server Service account, using the specified port number and we may have the syntax wrong, even though we were using the setspn instructions from Microsoft.
Example:
Setspn -s http/MyReportServer.MyDomain.com:80 MyDomainUser
Setspn -s http/MyReportServer.MyDomain.com:8080 MyDomainUser
Setspn -s http/MyReportServer.MyDomain.com:8081 MyDomainUser
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply