none
Unable to create sharepoint list datasource when running in Kerberos mode RRS feed

  • Question

  • Hi,

    I'm facing the following issue :

    I'm trying to create a sharepoint list datasource without any success. 

    I'm using the same application pool identity account for the sharepoint site and for PPSMonitoring.
    I also changed the BPM.ServerConnectionPerUser=True in all web.config files
    I changed the IIS HTTPAuthenticationProvider to "Negotiate,NTLM"
    I've setup the SPN accordingly.

    But nothing seems to work.

    I know Kerberos setup is pretty complex, can anybody share a checklist or best practice that I should follow in order to identify what I missed ?

    Regards,

    Dejan 
    Tuesday, July 7, 2009 9:16 PM

Answers

  • Thank's guys,  I'm about to solve the problem.

    PPS -> SharePoint and SharePoint -> PPS works great, now I need to fix the SSAS account delegation; which I think that by mistake I defined olap svc SPN to delegate under the account that runs the http services, where I guess I should have set the service account that runs SSAS?

    Hopefully everything will be fixed tomorrow.

    Regards, 

    Dejan

    PS: I found this excelent post that covers constrained Kerberos Delegation.
    • Marked as answer by Dejan MILIC Friday, July 10, 2009 9:22 PM
    Wednesday, July 8, 2009 9:24 PM

All replies

  • Hello,

    One of the best Kerberos troubleshooting tools I have found is here. It is very good at checking your kerberos setup for duplicate SPNs, missing SPNs and other missing pieces to the kerberos setup.

    Thanks,
    Jon Thomas
    This posting is provided "AS IS" with no warranties, and confers no rights.
    Tuesday, July 7, 2009 9:31 PM
    Moderator
  • What is the error message that you are receiving?  Have you run a SQL Server trace to verify that the correct credential are being passed?  Have you verified the SharePoint permissions to the list?
    Dan English's BI Blog
    _____________________________________________________
    Please mark posts as answer or helpful when they are.
    Wednesday, July 8, 2009 3:08 AM
  • I personnaly think that the SPNs are wrongly set.

    And I would like to know if on the same server when I have mutliple websites on different ports numbers I have to create for each port a SPN ?

    Regards,

    Dejan
    Wednesday, July 8, 2009 9:12 AM
  • Thank's guys,  I'm about to solve the problem.

    PPS -> SharePoint and SharePoint -> PPS works great, now I need to fix the SSAS account delegation; which I think that by mistake I defined olap svc SPN to delegate under the account that runs the http services, where I guess I should have set the service account that runs SSAS?

    Hopefully everything will be fixed tomorrow.

    Regards, 

    Dejan

    PS: I found this excelent post that covers constrained Kerberos Delegation.
    • Marked as answer by Dejan MILIC Friday, July 10, 2009 9:22 PM
    Wednesday, July 8, 2009 9:24 PM