I've been trying (and failing) to get Kerberos delegation to an SSAS 2005
server working. I've followed all of the steps on:

http://www.mosha.com/msolap/articles...delegation.htm

But still no luck. Delegation is working fine with SQL Server, but not
Analysis Services.

I've verified the SPN, connection string, enabled delegation, configured
with web site (typical IE to IIS to SSAS setup), etc, but no luck - the
connection to the server always shows up in Profiler as "anonymous", and the
connection fails.

Are there any tools or tricks for debugging this problem? I'm at a loss at
this point. If it matters, the code that fails to connect is doing AMO stuff
(or trying to, anyway), not ADOMD.NET.

Does delegation work when you connect through OLEDB ? What are the exact
SPNs that you used ? What is the exact connection string ?

--
==============================*=================== =
Mosha Pasumansky - http://www.mosha.com/msolap
Analysis Services blog at http://www.sqljunkies.com/WebL*og/mosha
Development Lead in the Analysis Server team
All you need is love (John Lennon)
Disclaimer : This posting is provided "AS IS" with no warranties, and
confers no rights.
==============================*=================== =
"Kevin Dente" <kevind (AT) no (DOT) spam.denteworld.com> wrote

Not sure - how can I test if it's working through OLEDB? Our software isn't
using OLEDB directly.

The SetSPN -L listing for the server is:

MSOLAPSvc.3/qa144-db-vm7
MSOLAPSvc.3/qa144-db-vm7.VIEWSTAR.COM
MSSQLSvc/QA144-DB-VM7.viewstar.com:1433
HOST/QA144-DB-VM7
HOST/QA144-DB-VM7.viewstar.com

Where QA144-DB-VM7 is the database/SSAS server name.

The connection string is:

Provider=MSOLAP.3; Data Source=qa144-db-vm7; Initial Catalog=RAEOLAP;
Integrated Security=SSPI;Impersonation Level=Delegate


"Mosha Pasumansky [MS]" <moshap (AT) online (DOT) microsoft.com> wrote

Any thoughts on how I can get this working? Or troubleshoot it more?

"Mosha Pasumansky [MS]" <moshap (AT) online (DOT) microsoft.com> wrote