locked
The Kerberos subsystem encountered an error. RRS feed

  • Question

  • Hi All,

    We're on 2008.

    I'm trying to set up dynamic security. Browsing the cube using current user or the newly defined role, everything works fine.

    Once I try to browse the cube using user's credentials, I get the following error: 

    ===================================

     

    The following system error occurred:  The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user. . (Microsoft SQL Server 2008 Analysis Services)

     

    ------------------------------

    Program Location:

     

       at Microsoft.AnalysisServices.AdomdClient.AdomdConnection.XmlaClientProvider.Microsoft.AnalysisServices.AdomdClient.AdomdConnection.IXmlaClientProviderEx.CreateSession(Boolean sendNamespaceCompatibility)

       at Microsoft.AnalysisServices.AdomdClient.AdomdConnection.ConnectToXMLA(Boolean createSession, Boolean isHTTP)

       at Microsoft.AnalysisServices.AdomdClient.AdomdConnection.Open()

       at Microsoft.AnalysisServices.Browse.ConnectionsManagerBase.Connect()

       at Microsoft.AnalysisServices.Browse.CubeBrowser.ConnectionsManager.Connect()

       at Microsoft.AnalysisServices.Browse.CubeBrowser..ctor(String nameOfCube, Object cube, IServiceProvider iserviceProvider, DesignerPageRelevantData designerPageRelevantData, UserContextData securityContextData)

       at Microsoft.AnalysisServices.Browse.CubeBrowserHostControl.CreateBrowser()

       at Microsoft.AnalysisServices.Browse.BrowserHostControl.LoadBrowser()

    I've set this up  at another customer in the same way and it works fine. Any idea's what could cause this behaviuor ?

    Kind regards,

    Cees


    Please remember to mark the replies as answers or at least vote helpfull if they help and unmark them if they provide no help.
    • Moved by Jinchun ChenMicrosoft employee Wednesday, June 30, 2010 9:43 AM It should be a issue regarding Kerberos. (From:SQL Server Analysis Services)
    Monday, June 28, 2010 12:28 PM

Answers

  • Hi,

    Is there any Windows 2000 Server domain controller in the domain? Service for user (S4U) is a Kerberos extension introduced in Windows Server 2003. According to the error message, it seems that it is using a domain controller running Windows 2000 Server as KDC server , which does not support S4U.

     


    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Joson Zhou Tuesday, July 6, 2010 6:55 AM
    Thursday, July 1, 2010 6:30 AM
  • Hi Joson,

    Facing the fact that this is not really my piece of cake, I handed over your suggestions to the customers IT dept. Once solved. I'll get back with further details. For now, I'll close the post. Thanks for your time and suggestion.

     

    Kind regards,

     

    Cees 


    Please remember to mark the replies as answers or at least vote helpfull if they help and unmark them if they provide no help.
    Tuesday, July 6, 2010 2:51 PM

All replies

  • Hi,

    Is there any Windows 2000 Server domain controller in the domain? Service for user (S4U) is a Kerberos extension introduced in Windows Server 2003. According to the error message, it seems that it is using a domain controller running Windows 2000 Server as KDC server , which does not support S4U.

     


    This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    • Marked as answer by Joson Zhou Tuesday, July 6, 2010 6:55 AM
    Thursday, July 1, 2010 6:30 AM
  • Hi Joson,

    Facing the fact that this is not really my piece of cake, I handed over your suggestions to the customers IT dept. Once solved. I'll get back with further details. For now, I'll close the post. Thanks for your time and suggestion.

     

    Kind regards,

     

    Cees 


    Please remember to mark the replies as answers or at least vote helpfull if they help and unmark them if they provide no help.
    Tuesday, July 6, 2010 2:51 PM
  • Hello Cees,

    Any progress on this problem? I seem to be having the same problem.

     

    Greetings,

    Erwin Velthuis

    Wednesday, July 28, 2010 7:23 AM
  • I am also facing same issue.

    Is there any solution for this at all?

     

    Thans in advance.

     

    Regards,
    Kishore

    Friday, February 3, 2012 2:05 PM