dbTalk Databases Forums  

OLAP Server - Authentication

microsoft.public.sqlserver.olap microsoft.public.sqlserver.olap


Discuss OLAP Server - Authentication in the microsoft.public.sqlserver.olap forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Tilfried Weissenberger
 
Posts: n/a

Default OLAP Server - Authentication - 06-19-2004 , 03:37 AM






Hi,

With MSAS-Server (OLAP) 2000 Std. I know there is only
windows-authentication. Here is my configuration:

o MSAS-Server is a win2k3 member-server of a win2k3 domain
o The clients are all remote and connect via VPN
o the client-computer are not part of the domain, but are logged on
using the same user/pwd as the users defined in the domain

and the problem:
MSAS-Server can authenticate a user, if the client is not part of the
domain, but the same user/pwd exists on the local machine. Now since
my MSAS-Server is only a member server, I would have to create all
users again in that local server's SAM database, because MSAS-S. is
not checking against the domain he is in, but against his local SAM
only.

Is there a way to get MSAS-S. to authenticate against his domain,
instead of his local SAM db? (would kerberos help here?)

What other options would I have, if not?

thank you!

regards, Tilli

Reply With Quote
  #2  
Old   
Dave Wickert [MSFT]
 
Posts: n/a

Default Re: OLAP Server - Authentication - 06-23-2004 , 12:38 AM






Unfortunately not. You need either a trust relationship or to use the local
SAM database. This is just how Windows security works.
--
Dave Wickert [MSFT]
dwickert (AT) online (DOT) microsoft.com
Program Manager
BI SystemsTeam
SQL BI Product Unit (Analysis Services)
--
This posting is provided "AS IS" with no warranties, and confers no rights.

"Tilfried Weissenberger" <tilli (AT) weissenberger (DOT) at> wrote

Quote:
Hi,

With MSAS-Server (OLAP) 2000 Std. I know there is only
windows-authentication. Here is my configuration:

o MSAS-Server is a win2k3 member-server of a win2k3 domain
o The clients are all remote and connect via VPN
o the client-computer are not part of the domain, but are logged on
using the same user/pwd as the users defined in the domain

and the problem:
MSAS-Server can authenticate a user, if the client is not part of the
domain, but the same user/pwd exists on the local machine. Now since
my MSAS-Server is only a member server, I would have to create all
users again in that local server's SAM database, because MSAS-S. is
not checking against the domain he is in, but against his local SAM
only.

Is there a way to get MSAS-S. to authenticate against his domain,
instead of his local SAM db? (would kerberos help here?)

What other options would I have, if not?

thank you!

regards, Tilli



Reply With Quote
  #3  
Old   
Tilfried Weissenberger
 
Posts: n/a

Default Re: OLAP Server - Authentication - 06-23-2004 , 12:52 AM



I'd apprechiate any infos on this!

thank you in advance!!

regards, Tilli

Reply With Quote
  #4  
Old   
Tilfried Weissenberger
 
Posts: n/a

Default Re: OLAP Server - Authentication - 06-23-2004 , 12:59 AM



Allright, thank you for that information. I hope there is going to be some
sort of solution to this in the next version. What I don't get is why the
web-based functionality of OLAP is only available in the
Enterprise-Edition - that would solve the problem.

regards, Tilli



Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.