SSRS Kerberos auth issue
As per the below post I have configured the SSRS Kerberos. I am facing below issue. Is there anything I am missing. http://social.technet.microsoft.com/Forums/en-US/sqlreportingservices/thread/d9299ae1-32ce-4b0f-ac01-81c44b43fd78 We have SSRS running as domain account "mydomain\ssrs_svc" and SQL2008 R2 running as domain account "mydomain\sql_svc". SQL2008 R@ is running AppName Instance name. SQL server name - > Host name - SqlServerBox - > Fully Qualified Name - SqlServerbox.win.org Server - Windows 2008 64 bit Enterprice On AD side for both the accounts Delegation tab -> Trust this user for delegation to any service is checked. SPN are set like below. setspn -a HTTP/ SqlServerBox:443 mydomain\ssrs_svc setspn -a MSSQLSvc/SqlServerBox:1433 RB\B1S01QE02 setspn -a HTTP/SqlServerbox.win.org :443 "mydomain\ssrs_svc setspn -a MSSQLSvc/SqlServerbox.win.org :1433 RB\B1S01QE02 On SSRS config file we have set the Reporting Services\ReportServer\rsreportserver.config file we have set the authentication <AuthenticationTypes> <RSWindowsNegotiate/> </AuthenticationTypes> It is kept on asking to type user name and password. After three times it just taking me to blank screen. On SSRS server event log I see below error. A Kerberos Error Message was received: on logon session Client Time: Server Time: 13:27:1.0000 5/16/2011 Z Error Code: 0xd KDC_ERR_BADOPTION Extended Error: 0xc00000bb KLIN(0) Client Realm: Client Name: Server Realm: Server Name: SqlServerbox.win.org Target Name: Error Text: File: 9 Line: d86 Error Data is in record data.Anekm
May 16th, 2011 12:10pm

Hi, 1) Make sure when you delegete the servers , In AD for delegation tab -> Trust this user for delegation "Kerberos Only" is selected. 2) Make sure that there are no duplicate SPN's configuered for ther service accounts. 1 service account should have only one SPN 3) Also could you please check the event viewer log . What kind of authentication its showing when you try to log on in App server? is it NTLM or kerberos? Also please follow this link to debug your kerberos issues. http://blogs.iis.net/brian-murphy-booth/archive/2007/03/09/delegconfig-delegation-configuration-reporting-tool.aspx HTH, Ram
Free Windows Admin Tool Kit Click here and download it now
May 16th, 2011 1:37pm

As per the below post I have done all the settings But getting below error. http://social.technet.microsoft.com/Forums/en-US/sqlreportingservices/thread/d9299ae1-32ce-4b0f-ac01-81c44b43fd78 We have SSRS running as domain account "mydomain\ssrs_svc" and SQL2008 R2 running as domain account "mydomain\sql_svc". SQL2008 R@ is running AppName Instance name. SQL server name - > Host name - SqlServerBox - > Fully Qualified Name - SqlServerbox.win.org SSRS is intalled - Native mode On AD side for both the accounts Delegation tab -> Trust this user for delegation to any service is checked. SPN are set like below. setspn -a HTTP/ SqlServerBox:443 mydomain\ssrs_svc setspn -a MSSQLSvc/SqlServerBox:1433 RB\B1S01QE02 setspn -a HTTP/SqlServerbox.win.org :443 "mydomain\ssrs_svc setspn -a MSSQLSvc/SqlServerbox.win.org :1433 RB\B1S01QE02 On SSRS config file we have set the Reporting Services\ReportServer\rsreportserver.config file we have set the authentication <AuthenticationTypes> <RSWindowsNegotiate/> </AuthenticationTypes> It is kept on asking to type user name and password. After three times it just taking me to blank screen. On SSRS server event log I see below error. A Kerberos Error Message was received: on logon session Client Time: Server Time: 13:27:1.0000 5/16/2011 Z Error Code: 0xd KDC_ERR_BADOPTION Extended Error: 0xc00000bb KLIN(0) Client Realm: Client Name: Server Realm: Server Name: SqlServerbox.win.org Target Name: Error Text: File: 9 Line: d86 Error Data is in record data. Please let me know if you have any suggestions.Anekm
May 16th, 2011 5:00pm

Hi Anekm, The same thread http://social.technet.microsoft.com/Forums/en-US/sqlreportingservices/thread/fe5f376d-fbf5-495e-9390-4cc5803ef141 Besides, you could click this link to get some reference about this same issue, http://blogs.msdn.com/b/lukaszp/archive/2008/03/26/solving-the-reporting-services-login-issue-in-the-february-ctp-of-sql-server-2008.aspx Thanks, Challen FuPlease remember to mark the replies as answers if they help and unmark them if they provide no help.
Free Windows Admin Tool Kit Click here and download it now
May 17th, 2011 4:54am

I found the issues. It is issue with the Port number for the HTTP - It is suggested by the MS not to use ports for HTTP servicesAnekm
May 17th, 2011 6:17pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics