Kerberos and Forests
Scenario:
DomainA (Forest A)
Hosts internal users
DomainB (Forest B) bidectional trust to DomainA
Reporting Services running under a DomainA\serviceAccount)
Analysis Services running under the same DomainA\serviceAccount
DomainC (ForestB) bidirectional trust to Domain B
Hosts external users
Will Kerberos work in this scenario to propagate the user identity for both internal and external users to Analysis Services?
Teo Lachev, Prologika LLC
http://www.prologika.com
April 25th, 2011 7:40pm
Hi Teo,
Thanks for posting here.
> Will Kerberos work in this scenario to propagate the user identity for both internal and external users to Analysis Services?
Yes, domain A and C should trust each other in this scenario if the domain level is Windows server 2000 or above version in your environment.
Domain Trust Transitivity has been supported since Windows server 2000. For more information please refer to the link below:
Understanding Trust Transitivity
http://technet.microsoft.com/en-us/library/cc754612.aspx
Thanks.
Tiger Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
April 26th, 2011 10:48am
Hi Teo,
Please feel free to let us know if the information was helpful to you.
Thanks,
Tiger Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
tngfb@microsoft.comPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
April 27th, 2011 11:56am