Kerberos

Hi
Want to know how to get kerberos to work
3 workstations involved
User computer with Windows 2000 runs I.E 6.0 and accesses a web page on
Reporting services server (Web Portion-IIS) running windows 2003.
USer is running a report that runs an mdx statement on a data server which
is also windows 2003
We included in the connection string sspi=kerberos
We also when to the domain controller which is windows 2003 and enabled
kerberos delegation on the web and data server.
We still get the below error
An error has occurred during report processing. (rsProcessingAborted) Get
Online Help
a.. Cannot create a connection to data source 'OLAP'.
(rsErrorOpeningConnection) Get Online Help
a.. The operation requested failed due to security problems - the user
could not be authenticated
b.. Thanks in advanceYou may want to try posting this to the
microsoft.public.windows.server.security newsgroup as well.
Jay Nathan
http://www.jaynathan.com/blog
"Will Byron" <will.byron@.maxqtech.com> wrote in message
news:u45ZipE5EHA.2124@.TK2MSFTNGP15.phx.gbl...
> Hi
> Want to know how to get kerberos to work
> 3 workstations involved
> User computer with Windows 2000 runs I.E 6.0 and accesses a web page on
> Reporting services server (Web Portion-IIS) running windows 2003.
> USer is running a report that runs an mdx statement on a data server which
> is also windows 2003
> We included in the connection string sspi=kerberos
> We also when to the domain controller which is windows 2003 and enabled
> kerberos delegation on the web and data server.
> We still get the below error
> An error has occurred during report processing. (rsProcessingAborted) Get
> Online Help
> a.. Cannot create a connection to data source 'OLAP'.
> (rsErrorOpeningConnection) Get Online Help
> a.. The operation requested failed due to security problems - the user
> could not be authenticated
> b.. Thanks in advance
>
>|||I got Kerberos to work by using the artricle at
http://support.microsoft.com/default.aspx?kbid=828280
however what I ultimately got tied up with is the olap service on the
analysis service machine was using a domain account which I assumed it could
since the above article talks about setting up an SPN if the analysis
service service runs using a domain account.
I ran into another article
http://www.mosha.com/msolap/articles/enablingdelegation.htm
which stated
The MSSQLServerOLAPService must be running under the LocalSystem account in
order for delegation to be enabled.
Once I changed to run under local system the kerberos feature worked.
"Jay Nathan" <jay@.jaynathan.com> wrote in message
news:%23WurCfU5EHA.2124@.TK2MSFTNGP15.phx.gbl...
> You may want to try posting this to the
> microsoft.public.windows.server.security newsgroup as well.
> Jay Nathan
> http://www.jaynathan.com/blog
>
> "Will Byron" <will.byron@.maxqtech.com> wrote in message
> news:u45ZipE5EHA.2124@.TK2MSFTNGP15.phx.gbl...
> > Hi
> > Want to know how to get kerberos to work
> > 3 workstations involved
> > User computer with Windows 2000 runs I.E 6.0 and accesses a web page on
> > Reporting services server (Web Portion-IIS) running windows 2003.
> > USer is running a report that runs an mdx statement on a data server
which
> > is also windows 2003
> > We included in the connection string sspi=kerberos
> > We also when to the domain controller which is windows 2003 and enabled
> > kerberos delegation on the web and data server.
> >
> > We still get the below error
> >
> > An error has occurred during report processing. (rsProcessingAborted)
Get
> > Online Help
> > a.. Cannot create a connection to data source 'OLAP'.
> > (rsErrorOpeningConnection) Get Online Help
> > a.. The operation requested failed due to security problems - the
user
> > could not be authenticated
> > b.. Thanks in advance
> >
> >
> >
>