none
SSRS-SP

    Question

  • Hello,

    I have a SharePoint Farm with six servers:

    SQLA & SQLB Clustered hosting the databases (SharePoint - Report Server)

    AP1 & AP2 Applications Servers hosting SharePoint Central Administration and Reporting Service on AP1

    FE1 & FE2 Front-End Servers

    I have installed SQL Server 2008 Reporting Services Add-in for SharePoint on AP1

    I am using http://blogs.technet.com/b/rob/archive/2011/11/23/enabling-kerberos-authentication-for-reporting-services.aspx for the security and access to the reports...

    I have question about the SPN values to be entered...

    mssqlsvc is it the service launching MSSQLServer or Reporting Services? On SQL Cluster (SQLA) or on Reporting Service Server (AP1)?

    Domain\SQL is it an account used to launch SQL AD\AccountName on SQLA or is it a AD\SQL when the domain is AD...?

    http://servername should be done for AP1 hosting the SSRS.

    Domain\SSRS is it an account used to launch SSRS on AP1 AD\AccountName or is it a AD\SSRS when the domain is AD 

    Thanks,
    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

    Wednesday, February 29, 2012 1:23 AM

Answers

All replies

  • Hello,

    I tried:

     

    Item

    Native/SharePoint mode

    Delegation set (Computer/user)

    SPNs set (Host/service account)

    Server names

    MBSPAP1

    MBSPAP1.domain

    MBSQLSPCLA

    MBSQLSPCLA.domain

    MBSQLSPCLA/ITOSMMT

    Ad\svcitosmmt

    Set –A HTTP/mbspap1 ad\svcitosmmt

    Set –A HTTP/mbspap1.domain ad\svcitosmmt

    Set –A HTTP/mbssqlspcla ad\svcitosmmt

    Set –A HTTP/mbsqlspcla.domain ad\svcitosmmt

    Server connections

    Service accounts

    AD\svcITOSMMT

    URLs

    http://Teams.domain/reports

    http://mbspap1

    http://mbspap1.domain

    http://mbspap1:80/ReportServerSharePoint_ITOSMMT

    http://MBSPAP1:80/Reports_ITOSMMT

    Setspn –A HTTP/Teams.mednet.ucla.edu/reports mbspap1

    Setspn –A HTTP/teams.domain/sites/ITOSMMT/Reports/ mbspap1

    Setspn –A HTTP/Teams.domain/reports ad\svcitosmmt

    Setspn –A HTTP/teams.domain/sites/ITOSMMT/Reports/

    ad\svcitosmmt


    As it is on an isntance MSSQLSPCLA\ITOSMMT we have the Report Server database, I am not sure it is correct?

    Any idea?

    Thanks,

    Dom

    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager


    • Edited by Felyjos Wednesday, February 29, 2012 5:53 PM
    Wednesday, February 29, 2012 5:40 PM
  •  Hello

    I found some answers... for the service account to be used

    http://social.technet.microsoft.com/Forums/en-US/sqlreportingservices/thread/830dc715-628e-4afb-9c1b-acddec043d18?prof=required

    Thanks,
    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager


    • Edited by Felyjos Wednesday, February 29, 2012 8:45 PM
    Wednesday, February 29, 2012 8:44 PM
  • Hello:

    SharePoint Site:

    Setspn –a http://teams.domain ad\ad\svcSPTeamApPool
    Setspn –a http://teams ad\ad\svcSPTeamApPool

    Central Administrator:

    Setspn –a http://ap1:3323/default.aspx ad\ad\svcSPTeamApPool
    setspn –a http://ap1.domain:3323/default.aspx ad\ad\svcSPTeamApPool

    Reporting Services:

    Setspn –a http/ap1/ITOSMMT ad\svcitosmmt
    Setspn –a http/ap1.domain/ITOSMMT ad\itosmmt

    SQL Server:

    Setspn –a MSSQLsvc/SQLA:1433 ad\itosmmt
    Setspn –a MSSQLsvc/SQLA.domain:1433 ad\itosmmt

    will this be okay?

    Thanks,

    DOm


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

    Thursday, March 01, 2012 1:09 AM
  • ?bump?

    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

    Thursday, March 08, 2012 1:09 AM
  • Hello

    so from the previous post

    SharePoint Site:

    Setspn –a http/teams.domain ad\svcSPTeamApPool ==> ok
    Setspn –a http/teams ad\svcSPTeamApPool ==> ok

    Central Administrator:

    Setspn –a http/ap1:3323/default.aspx ad\svcSPTeamApPool ==> ok

    setspn –a http/ap1.domain:3323/default.aspx ad\svcSPTeamApPool ==> ok

    Reporting Services:

    Setspn –a http/ap1/ITOSMMT ad\svcitosmmt ==> ok
    Setspn –a http/ap1.domain/ITOSMMT ad\itosmmt ==> ok

    SQL Server:

    Setspn –a MSSQLsvc/SQLA:1433 ad\itosmmt ==> ok
    Setspn –a MSSQLsvc/SQLA.domain:1433 ad\itosmmt ==> ok

    Still error when trying to open the report:

    http://teams.domain/sites/ITOSMMT/_layouts/ReportServer/RSViewerPage.aspx?rv:RelativeReportUrl=/sites/ITOSMMT/Reports/Sample_Report%20on%20Daily%20Maintenance%20Tasks.rdl&Source=http%3A%2F%2Fteams%2Emednet%2Eucla%2Eedu%2Fsites%2FITOSMMT%2FReports%2FForms%2FAllItems%2Easpx&DefaultItemOpen=0

    • An error occurred during client rendering.
      • An error has occurred during report processing.
        • Cannot create a connection to data source 'DataSource1'.
          • For more information about this error navigate to the report server on the local server machine, or enable remote errors

    Thanks,

    DOm



    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager




    • Edited by Felyjos Monday, March 12, 2012 10:58 PM
    Monday, March 12, 2012 9:16 PM
  • Hello,

    If I pass the command

    setspn -l ap1

    or

    setspn -l teams

    should I be able to see some of the results of the command passed as

    Microsoft Windows [Version 6.0.6002]
    Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

    C:\Users\dominiqued>setspn -l mbspap1
    Registered ServicePrincipalNames for CN=MBSPAP1,OU=App,OU=Windows,OU=MITS Server
    s,DC=ad,DC=medctr,DC=ucla,DC=edu:

    WSMAN/AP1
    WSMAN/AP1.Domain                                                                                   

    TERMSRV/AP1
    TERMSRV/AP1.domain                                                                                 

    HOST/AP1
    HOST/AP1.domain                                                                           C:\Users\dominiqued>setspn -l teams
    FindDomainForAccount: DsGetDcNameWithAccountW failed!
    Could not find account teams

    C:\Users\dominiqued>

    it doesn't seem anything is pciked, isn't it?

    • An error occurred during client rendering.
      • An error has occurred during report processing.
        • Cannot create a connection to data source 'DataSource1'.
          • For more information about this error navigate to the report server on the local server machine, or enable remote errors

    Thanks,

    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager


    • Edited by Felyjos Thursday, March 15, 2012 9:54 PM
    Tuesday, March 13, 2012 3:02 AM
  • ?bump?

    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

    Thursday, March 15, 2012 9:53 PM
  • Hello,

    Continuing on:

    http://social.technet.microsoft.com/Forums/en-US/sharepointadmin/thread/9d9f8f47-db30-43fa-8192-2631de3abdf0

    Thanks,

    Dom


    System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

    • Marked as answer by Felyjos Wednesday, March 28, 2012 2:03 PM
    Wednesday, March 28, 2012 2:03 PM