SSRS-SP

Question

Hello,

I have a SharePoint Farm with six servers:

SQLA & SQLB Clustered hosting the databases (SharePoint - Report Server)

AP1 & AP2 Applications Servers hosting SharePoint Central Administration and Reporting Service on AP1

FE1 & FE2 Front-End Servers

I have installed SQL Server 2008 Reporting Services Add-in for SharePoint on AP1

I am using http://blogs.technet.com/b/rob/archive/2011/11/23/enabling-kerberos-authentication-for-reporting-services.aspx for the security and access to the reports...

I have question about the SPN values to be entered...

mssqlsvc is it the service launching MSSQLServer or Reporting Services? On SQL Cluster (SQLA) or on Reporting Service Server (AP1)?

Domain\SQL is it an account used to launch SQL AD\AccountName on SQLA or is it a AD\SQL when the domain is AD...?

http://servername should be done for AP1 hosting the SSRS.

Domain\SSRS is it an account used to launch SSRS on AP1 AD\AccountName or is it a AD\SSRS when the domain is AD 

Thanks,
Dom

---

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Answer 1

Hello,

I tried:

 

Item	Native/SharePoint mode	Delegation set (Computer/user)	SPNs set (Host/service account)
Server names	MBSPAP1 MBSPAP1.domain MBSQLSPCLA MBSQLSPCLA.domain MBSQLSPCLA/ITOSMMT	Ad\svcitosmmt	Set –A HTTP/mbspap1 ad\svcitosmmt Set –A HTTP/mbspap1.domain ad\svcitosmmt Set –A HTTP/mbssqlspcla ad\svcitosmmt Set –A HTTP/mbsqlspcla.domain ad\svcitosmmt
Server connections
Service accounts	AD\svcITOSMMT
URLs	http://Teams.domain/reports http://mbspap1 http://mbspap1.domain http://mbspap1:80/ReportServerSharePoint_ITOSMMT http://MBSPAP1:80/Reports_ITOSMMT		Setspn –A HTTP/Teams.mednet.ucla.edu/reports mbspap1 Setspn –A HTTP/teams.domain/sites/ITOSMMT/Reports/ mbspap1 Setspn –A HTTP/Teams.domain/reports ad\svcitosmmt Setspn –A HTTP/teams.domain/sites/ITOSMMT/Reports/ ad\svcitosmmt

---

As it is on an isntance MSSQLSPCLA\ITOSMMT we have the Report Server database, I am not sure it is correct?

Any idea?

Thanks,

Dom

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Answer 2

 Hello

I found some answers... for the service account to be used

http://social.technet.microsoft.com/Forums/en-US/sqlreportingservices/thread/830dc715-628e-4afb-9c1b-acddec043d18?prof=required

Thanks,
Dom

---

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Answer 3

Hello:

SharePoint Site:

Setspn –a http://teams.domain ad\ad\svcSPTeamApPool
Setspn –a http://teams ad\ad\svcSPTeamApPool

Central Administrator:

Setspn –a http://ap1:3323/default.aspx ad\ad\svcSPTeamApPool
setspn –a http://ap1.domain:3323/default.aspx ad\ad\svcSPTeamApPool

Reporting Services:

Setspn –a http/ap1/ITOSMMT ad\svcitosmmt
Setspn –a http/ap1.domain/ITOSMMT ad\itosmmt

SQL Server:

Setspn –a MSSQLsvc/SQLA:1433 ad\itosmmt
Setspn –a MSSQLsvc/SQLA.domain:1433 ad\itosmmt

will this be okay?

Thanks,

DOm

---

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Answer 4

?bump?

---

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Answer 5

Hello

so from the previous post

SharePoint Site:

Setspn –a http/teams.domain ad\svcSPTeamApPool ==> ok
Setspn –a http/teams ad\svcSPTeamApPool ==> ok

Central Administrator:

Setspn –a http/ap1:3323/default.aspx ad\svcSPTeamApPool ==> ok

setspn –a http/ap1.domain:3323/default.aspx ad\svcSPTeamApPool ==> ok

Reporting Services:

Setspn –a http/ap1/ITOSMMT ad\svcitosmmt ==> ok
Setspn –a http/ap1.domain/ITOSMMT ad\itosmmt ==> ok

SQL Server:

Setspn –a MSSQLsvc/SQLA:1433 ad\itosmmt ==> ok
Setspn –a MSSQLsvc/SQLA.domain:1433 ad\itosmmt ==> ok

Still error when trying to open the report:

http://teams.domain/sites/ITOSMMT/_layouts/ReportServer/RSViewerPage.aspx?rv:RelativeReportUrl=/sites/ITOSMMT/Reports/Sample_Report%20on%20Daily%20Maintenance%20Tasks.rdl&Source=http%3A%2F%2Fteams%2Emednet%2Eucla%2Eedu%2Fsites%2FITOSMMT%2FReports%2FForms%2FAllItems%2Easpx&DefaultItemOpen=0

• An error occurred during client rendering.
  • An error has occurred during report processing.
    • Cannot create a connection to data source 'DataSource1'.
      • For more information about this error navigate to the report server on the local server machine, or enable remote errors

Thanks,

DOm

---

---

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Answer 6

Hello,

If I pass the command

setspn -l ap1

or

setspn -l teams

should I be able to see some of the results of the command passed as

Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation.  All rights reserved.

C:\Users\dominiqued>setspn -l mbspap1
Registered ServicePrincipalNames for CN=MBSPAP1,OU=App,OU=Windows,OU=MITS Server
s,DC=ad,DC=medctr,DC=ucla,DC=edu:

WSMAN/AP1
WSMAN/AP1.Domain                                                                                   

TERMSRV/AP1
TERMSRV/AP1.domain                                                                                 

HOST/AP1
HOST/AP1.domain                                                                           C:\Users\dominiqued>setspn -l teams
FindDomainForAccount: DsGetDcNameWithAccountW failed!
Could not find account teams

C:\Users\dominiqued>

it doesn't seem anything is pciked, isn't it?

• An error occurred during client rendering.
  • An error has occurred during report processing.
    • Cannot create a connection to data source 'DataSource1'.
      • For more information about this error navigate to the report server on the local server machine, or enable remote errors

Thanks,

Dom

---

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Answer 7

?bump?

---

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Answer 8

Hello,

Continuing on:

http://social.technet.microsoft.com/Forums/en-US/sharepointadmin/thread/9d9f8f47-db30-43fa-8192-2631de3abdf0

Thanks,

Dom

---

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager