473,396 Members | 1,702 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,396 software developers and data experts.

Kerberos Delegation Question

We are trying to get windows authentication to work with Reporting Services
and Analysis Services in a way that may be unsupported.

Setup:

There are two domains: A and B.

There are two servers in the A domain: A\R and A\S

Server R is running Reporting Services to serve OLAP reports from data on
server S running Analysis Services.

R is trusted for delegation. Users are able to run reports from any machines
in domain A.

Domain B is trusted by Domain A.

Users have accounts on both domain A and domain B; however, for inexplicable
(beurocratic?) reasons they can access the servers in domain A only with
their domain A accounts, but can log in locally only with their domain B
accounts.

Problem:

When B\User browses to the report server, she is prompted for a user name
and password. She enters her A\UserName and password and is authenticated on
the Report Server. The report; however, (apparently) does not impersonate the
A\UserName account but instead tries to use the NT AUTHORITY\ANONYMOUS
account and fails to authenticate in Analysis Services. I'm just guessing at
the cause, but for whatever reason authentication fails.

Question:

Is it possible to get Reporting Services/IIS to impersonate users based on
the Windows credentials they entered into Internet Explorer?
Nov 19 '05 #1
0 980

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

3
by: Jacob | last post by:
Hello All, I am trying to serve out some content via IIS that is hosted on a remote fileserver, and am unable to get the delegation working correctly. Our setup is as follows: Local LAN...
1
by: Mark | last post by:
Assume: IIS 6.0 and SQL Server 2000 are running on two separate windows 2003 servers on the same LAN and windows domain using Active Directory. All client connections using IE 6.0+ are on the...
0
by: Shikari Shambu | last post by:
Hi, I have an ASP.NET application running on IIS 5.0 on win 2k trying to access a web service on win 2k3 to which it tries to pass the kerberos token. I get the following error when I try to do...
2
by: josh | last post by:
Hello Sharepoint Guru's, I have hit a bit of a brick wall in regards to Kerberos authentication. I have an ASP.Net web application that interfaces with sharepoint, this all works fine if I do...
0
by: CESAR DE LA TORRE [MVP] | last post by:
I am using WSE 3.0 with Visual Studio 2005, specifically I'm using Kerberos authentication and passing Kerberos ticket from Presentation Tier (VSTO.2005 client) to Server Tier through our Web...
1
by: russell.lane | last post by:
I've established user login identity impersonation and delegation for a multi-tier web application. I'm running into a case where authentication fails when a user accesses the app from a browser...
0
by: scomik | last post by:
Hello, Is Kerberos delegation needed to write a file from a web app to a file server within the same network? If so, I will be setting up constrained delegation. The problem is what is the...
2
by: Greg Nash | last post by:
Gday I want to change to use Windows AD-integrated Kerberos authentication, and have changed a server to KRB_SERVER_ENCRYPT for trial. Recataloged the database at a client machine. As far as I...
2
by: Tapio Kulmala | last post by:
Hi! I've found an interesting problem that might have something to do with Kerberos. I have a www application running in a Windows Server 2003 box. The server did not have SP1 or SP2...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
0
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
0
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
0
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows...
0
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.