Hello all,My report server and reports database are on different machines, so I've spent quite some time configuring the use of Kerberos and Windows 2008 SQL Reporting Services - I've registered all the SPNs, configured the various authentication options in the XML files and Kerberos does appear to be passing my credentials along. However, although I can access the Reporting Services URL, when I run a report it says the login failed for my user - I don't think this is the double-hop problem because its not trying to authenticate as 'NT AUTHORITY\ANONYMOUS LOGON'- Kerberos appears to be passing my own login credentials to the database server and since my credentials don't have direct permissions on the Reporting Services databases its then failing. I believe this is happening because I'm using impersonation and delegation together but I don't know of any other way to do it.My understanding is that the Reporting Services database account is the only account that needs direct permissions on the Reporting Services databases so how do I get access to the database with Kerberos authentication using my own credentials? My account is in the correct security roles from within Reporting Services.I suppose what I'm trying to do is connect to Reporting Services URL as me but run the reports with the dedicated database connection account thats specified in the Reporting Services Configuration tool, however doesn't the use of Kerberos delegation defeat all that as it will present my own credentials to the database server?Thanks for any help.
↧