I agree that it sounds like a double-hop issue. You can either do what you did, and explicitly define the account that will connect to your data source, or setup Kerberos.