Kerberos Authentication Help

acp206 — Tue, 25 Oct 2022 16:23:47 GMT

Hello all- I'm trying to get Kerberos Authentication configured for Power BI Report Server and running into some issues. I am on September 2022 and we are using a Domain Service account. We are connectivity via HTTPs.

I followed this article: https://learn.microsoft.com/en-us/power-bi/report-server/configure-kerberos-powerbi-reports#authentication-type-within-report-server-configuration

I already made this change to the rsreportserver.config file:

These are the SPNs set for the domain service account:

HTTP/powerbireports

HTTP/powerbireports.fqdn

HTTP/servername

HTTP/servername.fqdn

My question is- is there anything else I need to do since we have 2 HTTPs URLs configured? Am I missing a step? One of the URLs is the computer name and one is a custom URL.

When I hit the URLs I'm still prompted for username and password. I'm running Fiddler and seeing an HTTPS 401 Unauthorized error. Also looks like it's still using NTLM.

Appreciate the help! Hope it's as easy as mis-configured SPNs.

Re: Kerberos Authentication Help

d_gosbell — Tue, 25 Oct 2022 23:18:12 GMT

You could try using the tool linked here Using Kerberos Configuration Manager for SQL Server - SQL Server | Microsoft Learn it can help diagnose a number of common Kerberos configuration issues

Re: Kerberos Authentication Help

acp206 — Wed, 02 Nov 2022 16:21:57 GMT

SPNs were not mis-configured. This was due to an issue with Validating the Domain Controller certificate. I was able to see the error once I enabled Kerberos logging.

topic Re: Kerberos Authentication Help in Report Server

Kerberos Authentication Help

Re: Kerberos Authentication Help

Re: Kerberos Authentication Help