SSAS 2005 with Kerberos/Delegation

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I've been trying (and failing) to get Kerberos delegation to an SSAS 2005
server working. I've followed all of the steps on:

http://www.mosha.com/msolap/articles/kerberos_delegation.htm

But still no luck. Delegation is working fine with SQL Server, but not
Analysis Services.

I've verified the SPN, connection string, enabled delegation, configured
with web site (typical IE to IIS to SSAS setup), etc, but no luck - the
connection to the server always shows up in Profiler as "anonymous", and the
connection fails.

Are there any tools or tricks for debugging this problem? I'm at a loss at
this point. If it matters, the code that fails to connect is doing AMO stuff
(or trying to, anyway), not ADOMD.NET.







.

Relevant Pages

  • Re: Constrained delegation question!
    ... remote server running the services in terms of the security audits on the ... AUTHORITY\ANONYMOUS LOGON event. ... you won't be able to get Kerb delegation to ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Unix Bind and Windows DNS coexist problem with forwarder ON
    ... not a web server. ... Here is the MS KB link of how i setup in Microsoft DNS server. ... I setup delegation in UNIX BIND server to Windows 2003 ... >>> The above does not describe delegation. ...
    (microsoft.public.windows.server.dns)
  • Re: Constrained delegation question!
    ... You are right there is a service called HOST on the target server which I ... You should not need to create a new SPN though. ... Active Directory under the delegation tab, ... For allowing Service Control Manager, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Constrained delegation question!
    ... You are right there is a service called HOST on the target server which I ... You should not need to create a new SPN though. ... Active Directory under the delegation tab, ... For allowing Service Control Manager, ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: PROBLEM: ASP on IIS 5 secured via "Windows Integrated Authentication" accessing "
    ... I have two virtual directories on same server with Integrated ... If i use basic authentication, ... as .NET framework config file) as well as Delegation as specified by the ... > could do whatever you want in your ASP page on behalf of the Domain Admin. ...
    (microsoft.public.inetserver.iis.security)