SPN's, double hop, and new SSRS 2008.

I am trying to set up an environment to test the migration of a SSRS 2005
environment to a new server with SSRS 2008. I have almost everything working
on the new server except Kerberos or the passing of the credentials from a
report on the new reporting server to the database server with the data for
the report.

You can run the report in ReportManager on the new server and it runs fine.
When you run it remotely and configure it to show the errors you get the
"Login failed ... 'NT AUTHORITY\ANONYMOUS LOGON'". In the past I have been
able to fix this by adding host header and SPN's. With the new SSRS not
using IIS directly I have not been able to find the right SPN's or settings
to have it work.

The new server is configured to have the SSRS database and service both on
the same new server. SQL Server and SSRS are configured with different
accounts in our active directory domain. The server with the data for the
report should be configured correctly as it continues to work with the old
SSRS 2005 and other web applications on other servers. I am using SQL server
2008 developer edition to create the SSRS 2008 test environment.

I believe the problem can be fixed by the correct SPN's and possibly a
change in the RsReportServer.config file. I am just not certain what SPN's
need to be set especially for the <Port> and what <domain-user-account> to
use (SQL Server service or SSRS service account).

It would help if some on can give me a detail example using a default SSRS
2008 installation, ports, and using domain accounts instead of the built-in
local or system accounts.
--
Thanks Mark

.

Relevant Pages