SQL Availability Group and Double Hop Issue

Question

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply

farside41 SSCrazy Points: 2083 More actions · Answer 1

We have reference a number of different articles on the topic of double hops, but none of them seem to help us resolve the issue.

I am not sure if there is something additional that is needed for a SQL AG.

This is the article we have found the most helpful so far:

Beatrix Kiddo SSC-Dedicated Points: 32407 More actions · Answer 2

It's hard to know without seeing your connection string. Does it work when you connect to the listener through SSMS with the AD credentials?

roni.vered SSC Veteran Points: 274 More actions · Answer 3

Hi there,

Troubleshooting the Double hoop is is indeed a tricky thing.

There aren't many helpful posts/blogs/forum threads about it .

Try downloading Microsoft® Kerberos Configuration Manager for SQL Server and see if your SPNs are indeed configured properly.

Also you can check if the Listener object in the Active directory has Kerberos delegation enabled.

Good luck.

Please share how you solved it if you succeed.

Roni.

farside41 SSCrazy Points: 2083 More actions · Answer 4

We found the problem, turns out the issue was SSRS and not IIS. Once I updated the .config file for SSRS to use Kerberos

We needed to add this entry:

<Authentication>

<AuthenticationTypes>

<RSWindowsNegotiate/>

</AuthenticationTypes>

<EnableAuthPersistence>true</EnableAuthPersistence>

</Authentication>