Re: Connecting to AS 2005 using a specified user

My concern looks like different issue from Pat's one. My symptom is simply
that username function for dynamic security does not work if connection user
in basic auth mode.

I guess it might be related to OLE DB 9 issue or Basic auth mechanism or
pump.dll. Anyway, I want to know whether it is a bug and then would be fixed.
Or I have to give up dynamic security in AS 2005.

Regards,
>From John Lee

"Akshai Mirchandani [MS]" wrote:

> Just to clarify -- as far as I know there are currently only two issues
> related to Basic authentication and HTTP on AS 2005:
>
> 1. If you use MSOLAP.3 to connect to an AS 2000 server over HTTP, it will
> not pass the userid/password correctly. This can be easily worked around by
> specifying Provider=MSOLAP.2 on the connection string of your application.
>
> 2. If you are inside Internet Explorer and browse to a web page and specify
> Basic authentication credentials. Then the web page inside IE tries to
> connect to an AS server over HTTP in the same "realm" -- for AS 2000, this
> would work without demanding the basic authentication credentials again. But
> in AS 2005, you are required to re-submit the credentials a second time.
> There is a good technical explanation for this which I won't go into, but
> the AS 2000 way was a little unsafe and it's probably a good thing that this
> doesn't work today...
>
> Other than these two issues, is there something else that is blocking you?
> Because in general Basic authentication over HTTP should work against AS
> 2005 and I'm not aware of any further issues there...
>
> I'm also missing some context in the statement below -- could you please
> expand on it?
>
> > The problem is that the new OLEDB 9 driver prevents the authentication
> > information to be passed from IIS to AS2005, so you have no way to
> > authenticate to AS2005, unless you connect directly to it the way I
> > indicated.
>
> Thanks,
> Akshai
> --
> This posting is provided "AS IS" with no warranties, and confers no rights
> Please do not send email directly to this alias. This alias is for newsgroup
> purposes only.
>
> "John Lee" <John Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:41F30399-D2CC-4B8A-BDF9-DC4587AE67A8@xxxxxxxxxxxxxxxx
> > I'd like to know which one among Pat's two problems is a bug. Basic auth
> > issue or OLE 9 driver issue?
> >
> > Regards,
> > From John Lee
> >
> > "Dave Wickert [MSFT]" wrote:
> >
> >> Do you have a case# for this incident? I'd like to look it up.
> >> This is certainly is not our intention for this feature.
> >> It is a bug and I want to make sure it is being treated as such
> >> internally.
> >> You can just email it to me directly.
> >> --
> >> Dave Wickert [MSFT]
> >> dwickert@xxxxxxxxxxxxxxxxxxxx
> >> Program Manager
> >> BI Systems Team
> >> SQL BI Product Unit (Analysis Services)
> >> --
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >>
> >> "Pat" <pat@xxxxxxxxxxxxx> wrote in message
> >> news:A5950AD0-DE8B-4EC6-8113-E0AE8567A608@xxxxxxxxxxxxxxxx
> >> >I have opened a support call with PSS and after 2 weeks of hard work,
> >> >the
> >> > conclusion of the escalation engineer is that you cannot use http and
> >> > basic
> >> > authentication on AS2005, which worked on AS2000.
> >> > People on this newsgroup tend to be connected to the server through a
> >> > Windows network and use windows authentication (or have the same user
> >> > on
> >> > the
> >> > client and the server, which is not workable in a production
> >> > environment).
> >> >
> >> > The problem is that the new OLEDB 9 driver prevents the authentication
> >> > information to be passed from IIS to AS2005, so you have no way to
> >> > authenticate to AS2005, unless you connect directly to it the way I
> >> > indicated.
> >> >
> >> > The next problem is that once you have installed OLEDB 9 on your
> >> > clients
> >> > machines, they cannot access AS2000 through http any more in the
> >> > following
> >> > scenario: connect to an AS2000 cube with OWC, click "Export to Excel",
> >> > then
> >> > try to refresh in Excel. This fails with OLEDB 9, works with OLEDB 8.
> >> > So
> >> > their existing application is broken.
> >> >
> >> > Basically, you don't want to go for AS2005 if you don't have all of
> >> > your
> >> > users and the server in one single Windows domain, or in trusted
> >> > domains.
> >> >
> >>
> >>
> >>
>
>
>
.

Loading