Re: Access to AS over HTTP failing accross domains

I've tried it with basic and anonymous(neither worked). I even tried setting
the anonymous user to administrator (just to see!!!) but nothing.
My next step is to try using kerberos.
BTW, do I need to have IIS on the AS box if I am hitting the dedicated IIS
server?
(At my wits end here!!!)

Thanks,
Brian

"Dave Wickert [MSFT]" wrote:

> In that event, it is probably a delegation problem.
> What type of security are you running on the virtual directory? It cannot be
> NTLM, it must be basic or anonymous. If you try NTLM you will get into a
> two-hop situation, which cannot be done using NTLM. For two-hop you must run
> kerberos.
> --
> Dave Wickert [MSFT]
> dwickert@xxxxxxxxxxxxxxxxxxxx
> Program Manager
> BI SystemsTeam
> SQL BI Product Unit (Analysis Services)
> --
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Codecommando" <Codecommando@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:951E4118-A2F4-4E0F-96E2-A2D5C69D5F91@xxxxxxxxxxxxxxxx
> > Hey,
> > Over the weekend, I did get this working for the case where both AS and
> > IIS
> > are on the same box on the second domain. So now when I connect to the AS
> > server with the http:// address as the connection string it will connect
> > and
> > work. I did this to verify that I can connect across domains.
> > I still haven't found a solution for the case where AS is on one server
> > and
> > IIS is on a second with the msolap.asp modified with the pump.servername
> > set
> > to the AS box.
> > Any ideas?
> >
> >
> >
> > "BigJimSlade" wrote:
> >
> >> Hello Codecommando,
> >> you will need to ensure that there is a trust setup between the domains x
> >> and y
> >> if this is not possible you options are limited to mapping accounts with
> >> the same username and password.
> >> I may be wrong but I don't believe kerberos will help in this scenario
> >>
> >>
> >> > Hi,
> >> > I am trying to access a cube over HTTP, which I can get working when
> >> > everything is done from the same domain.
> >> > The setup I'm having problems with is: IIS with msolap.asp and
> >> > msmdpump.dll
> >> > registered. I've added the pump.ServerName = "xxx.xxx.xxx.xxx" to the
> >> > asp
> >> > page.
> >> > Authentication is set to basic and disabled anonymous. This is all on
> >> > domain x. When I am on domain Y, I try to add a pivot table in Excel
> >> > to
> >> > access the cubes. I am using the http addr of the IIS box and passing
> >> > in my
> >> > credentials for the X domain. The problem is its timing out or just
> >> > not
> >> > connecting at all. Has anyone had success with this or a similar
> >> > setup?
> >> > Thanks,
> >> > Brian
> >>
> >>
> >>
>
>
>
.

Relevant Pages

  • Re: IIS6, Integrated Windows Auth, and IE6 Integrated Windows Auth
    ... on your server, modifying its behavior, and causing the issue. ... do you feel that there is an issue with NTLM ... > application -- after IIS has successfully authenticated with NTLM -- so it ... > is an application issue and not with IIS6, Integrated Authentication, nor ...
    (microsoft.public.inetserver.iis)
  • Re: OAB URL missing from autodiscovery.xml?
    ... reinstall IIS, reinstall CAS role, configure certs...etc. ... When I run my test autoconfiguration, it pulls from the 'correctly' configured CAS server. ... InternalAuthenticationMethods: {Basic, Ntlm, WindowsIntegrated} ...
    (microsoft.public.exchange.admin)
  • Re: Clients cannot get to my Site - Help!
    ... > get people to the site through the internet. ... My server is Windows XP and I ... I have been through IIS ... Anonymous user is checked. ...
    (microsoft.public.dotnet.framework.aspnet)
  • accessing share from isapi
    ... I try to access share on another computer from ISAPI dll. ... If I call the dll from IE running on the server where IIS 5 runs, ... anonymous user and access is denied. ...
    (microsoft.public.inetserver.iis)
  • Re: IIS passing server credentials rather than user credentials
    ... NTLM is not natively delegatable. ... you need to verify that the IIS server is permitted to delegate in Active ... you need to verify that your Kerberos SPNs are ...
    (microsoft.public.inetserver.iis.security)
Loading