Click here to monitor SSC
SQLServerCentral is supported by Red Gate Software Ltd.
 
Log in  ::  Register  ::  Not logged in
 
 
 
        
Home       Members    Calendar    Who's On


Add to briefcase

Kerberos Not Set Up On Server Expand / Collapse
Author
Message
Posted Tuesday, February 5, 2013 10:07 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Wednesday, September 25, 2013 2:01 PM
Points: 4, Visits: 29
Hello

Another party set up the Server and Databases.

First the Server was set up
Windows Server 2008 SP1

Then the Databases were set up
SQL Server 2008 along the reporting Services
Server Authentication - SQL Server and Windows Authentication

Now I go to use Reporting Services with Integrated Windows Authentication and find Kerberos was never set up.
So I ran this to check the Kerberos
SELECT auth_scheme FROM sys.dm_exec_connections WHERE session_id = @@spid

And I got
NTLM

SO my question is:

If I set Kerberos now, will this cause any issues?

Thanks

FRED







Post #1415972
Posted Tuesday, February 5, 2013 10:08 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: General Forum Members
Last Login: Wednesday, September 25, 2013 2:01 PM
Points: 4, Visits: 29
Additional info;
I want to use Windows integrated security such that each user who accesses the reports must have a valid Windows local or domain user account or be a member of a Windows local or domain group account.



Post #1415974
Posted Tuesday, February 5, 2013 5:31 PM


SSCertifiable

SSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiableSSCertifiable

Group: General Forum Members
Last Login: Today @ 6:32 AM
Points: 7,135, Visits: 12,745
FREDERICK (2/5/2013)
Hello

Another party set up the Server and Databases.

First the Server was set up
Windows Server 2008 SP1

Then the Databases were set up
SQL Server 2008 along the reporting Services
Server Authentication - SQL Server and Windows Authentication

Now I go to use Reporting Services with Integrated Windows Authentication and find Kerberos was never set up.
So I ran this to check the Kerberos
SELECT auth_scheme FROM sys.dm_exec_connections WHERE session_id = @@spid

And I got
NTLM

SO my question is:

If I set Kerberos now, will this cause any issues?

Thanks

FRED





Connecting to a local instance is always done using NTLM, i.e. when on the server where SQL Server resides and connecting to a local instance.

Setting up your SPNs such that remote clients authenticate using Kerberos instead of NTLM is transparent to the database operations within SQL Server and should not cause you any trouble.


__________________________________________________________________________________________________
There are no special teachers of virtue, because virtue is taught by the whole community. --Plato
Post #1416175
Posted Wednesday, February 6, 2013 5:58 AM
Say Hey Kid

Say Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey KidSay Hey Kid

Group: General Forum Members
Last Login: Thursday, November 20, 2014 3:50 AM
Points: 709, Visits: 1,441
If I set Kerberos now, will this cause any issues?


No, but there are a few things to note with Kerberos:
- If you have service accounts other than local system (and possibly network service) the SPNs will have to be registered against those accounts
- SPNs will have to be setup for both SQL and SSRS if you want Windows Integrated Security to work for SSRS
- The SSRS service account will need to be able to delegate Kerberos authentication to the SQL service running under the SQL Server service account

This white paper goes step-by-step how to go through setting it up:
Configuring Kerberos Authentication in a Reporting Services Environment


Joie Andrew
"Since 1982"
Post #1416450
« Prev Topic | Next Topic »

Add to briefcase

Permissions Expand / Collapse