Is running the PBI Report Server with a gMSA supported?
I currently have a Power BI Report Server running with a domain account and using kerberos to access other SQL Servers and SSAS. I'm now trying a new install using a gMSA (group managed service account) as the Service Account running the PBIRS. I have verified that the SPNs and delegations correspond to our running servers and they "look" correct. However, whenever I try to access a report using Windows Auth for the data source, we get the dreaded "We couldn't connect to the Analysis Services server. Make sure you've entered the connection string correctly." Is this a supported scenario, PBIRS using gMSA and kerberos to connect to other SQL Servers? In the documentation at Configure the Report Server Service Account (Configuration Manager) - SQL Server Reporting Services (SSRS) | Microsoft Docs (which is referenced from Install Power BI Report Server - Power BI | Microsoft Docs), it does not specifically call out gMSA as an option for the Service Account. Are others running in this scenario? Any tips, suggested documentation, etc? Thanks so very much for any pointers/advice! This wasn't easy the first 2 times and continues to be a challenge. 🤔 janiceIncremental Refresh Unstable (Impala & Kerberos)
Hi all, I'm pretty new to PBI and keen to actually get using the full power of PowerBI but at the moment I'm stuck in data access limbo. We are using Kerberos authentication to connect to an Impala database. The initial connection is fine (ie. we can get data and set up incremental refreshes) and the incremental refreshes will generally perform ok for a few days and then fail, then maybe start again, fail (repeat) before eventually flaming out and disabling themselves. I have been on endless calls with our PBI Support Team who say that it's not a PBI error. They blame the database team who say it's not their problem...it's a network issue, and the network team blame PBI Team.....and around it goes 😞 I know that this will be virtually impossible to diagnose and fix via a forum but would be keen to hear if Impala + Kerberos has worked for anybody to at least give me confidence it can be achieved 🙂 Example of error message: "Failure details: The last refresh attempt failed because of an internal service error. This is usually a transient issue. If you try again later and still see this message, contact support. {"error":{"code":"DM_GWPipeline_Gateway_InvalidConnectionCredentials","pbi.error":{"code":"DM_GWPipeline_Gateway_InvalidConnectionCredentials","parameters":{},"details":[{"code":"DM_ErrorDetailNameCode_UnderlyingErrorCode","detail":{"type":1,"value":"-2147467259"}},{"code":"DM_ErrorDetailNameCode_UnderlyingErrorMessage","detail":{"type":1,"value":"<ccon>[Microsoft][ThriftExtension] (3) Error occurred while contacting server: SSL_read: error code: 0. The connection has been configured to use a SASL mechanism for authentication. This error might be due to the server is not using SASL for authentication.</ccon>"}},{"code":"DM_ErrorDetailNameCode_UnderlyingHResult","detail":{"type":1,"value":"-2147467259"}},{"code":"Microsoft.Data.Mashup.CredentialError.DataSourceKind","detail":{"type":1,"value":"Impala"}},{"code":"Microsoft.Data.Mashup.CredentialError.DataSourcePath","detail":{"type":1,"value":"<servername.com</ccon>"}},{"code":"Microsoft.Data.Mashup.CredentialError.Reason","detail":{"type":1,"value":"AccessUnauthorized"}},{"code":"Microsoft.Data.Mashup.MashupSecurityException.DataSources","detail":{"type":1,"value":"<ccon>[{\"kind\":\"Impala\",\"path\":\"servername.com\"}]</ccon>"}},{"code":"Microsoft.Data.Mashup.MashupSecurityException.Reason","detail":{"type":1,"value":"AccessUnauthorized"}}],"exceptionCulprit":1}}}"
Problems connecting to Analysis Services with Chrome
So my PowerBI RS install is on a separate server from my analysis services database server. Reports cannot be viewed due to not connecting to Analysis Services Ok, forgot SPNs, forgot to edit the report server config to put Negotiate at the top I setup SPNs, configure RS, restart RS and verify that reports I wrote in PowerBI RS Desktop can be viewed in IE. I then go to Chrome. Chrome still can't connect. It will connect to the server and let me browse around, but I can't run the reports.
Power BI Report Server Authentication
Hello, I have an on-premise Power BI Report Server set up and I've also setup Kerberos authentication. I've created the SPNs and the constrained delegation in Active Directory. I've also updated the rsreportserver.config file to include <RSWindowsNegotiate /> under AuthenticationTypes. In the web portal, my report runs. However, when I test the windows authentication connection by going to my report>manage>Data sources, I get an error, "Authentication type Integrated is not supported.". This does not make any sense to me because if the authentication connection doesn't work, wouldn't the report not run? I've recently upgraded my report server and Power BI Desktop from Oct 2017 version to March 2018 version. Is there a bug in this latest version?Direct Query with connection to SQL Server 2016 Database
I have create a report to a SQL Server 2016 data source and provided credentials to the data source in Power BI Report Server. When I test those credentials they test successfully. But when I go to preview the report I still get the Kerberos error. Why am I still getting a Kerberos error when I provide credentials to the data source that test successfully? Any help would be appreciated!On-Premises Data Gateway using Kerberos for SSO
Hello experts, I have just read the following artice about Use Kerberos for SSO from PowerBI to on premises data sources: https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-kerberos-for-sso-pbi-to-on-premises-data/ I have a couple of questions: 1. What the pros of utilizing this option? Why would you want to go with this rather than the "traditional" power bi gateway that is currently offered? 2.Is the preview version out there avaiable for download? i wasn't able to find any links to that. 3. Is it an acceptable risk to have the gateway reside on the same system as the SQL Server when impersonation is configured, or should one have a separate server configured with constrained delegation? Any other information/clarifications would be much appreciated!! Thanks!
