Kerberos Authentication Help

[acp206]

Hello all- I'm trying to get Kerberos Authentication configured for Power BI Report Server and running into some issues. I am on September 2022 and we are using a Domain Service account. We are connectivity via HTTPs.

I followed this article: https://learn.microsoft.com/en-us/power-bi/report-server/configure-kerberos-powerbi-reports#authenti...

I already made this change to the rsreportserver.config file:

<AuthenticationTypes>
<RSWindowsNegotiate/>
<RSWindowsNTLM/>
</AuthenticationTypes>

These are the SPNs set for the domain service account:

HTTP/powerbireports

HTTP/powerbireports.fqdn

HTTP/servername

HTTP/servername.fqdn

My question is- is there anything else I need to do since we have 2 HTTPs URLs configured? Am I missing a step? One of the URLs is the computer name and one is a custom URL.

When I hit the URLs I'm still prompted for username and password. I'm running Fiddler and seeing an HTTPS 401 Unauthorized error. Also looks like it's still using NTLM.

Appreciate the help! Hope it's as easy as mis-configured SPNs.

[acp206 · Accepted solution]

SPNs were not mis-configured. This was due to an issue with Validating the Domain Controller certificate. I was able to see the error once I enabled Kerberos logging.

[d_gosbell]

You could try using the tool linked here Using Kerberos Configuration Manager for SQL Server - SQL Server | Microsoft Learn it can help diagnose a number of common Kerberos configuration issues