kerberos
9 TopicsIs running the PBI Report Server with a gMSA supported?
I currently have a Power BI Report Server running with a domain account and using kerberos to access other SQL Servers and SSAS. I'm now trying a new install using a gMSA (group managed service account) as the Service Account running the PBIRS. I have verified that the SPNs and delegations correspond to our running servers and they "look" correct. However, whenever I try to access a report using Windows Auth for the data source, we get the dreaded "We couldn't connect to the Analysis Services server. Make sure you've entered the connection string correctly." Is this a supported scenario, PBIRS using gMSA and kerberos to connect to other SQL Servers? In the documentation at Configure the Report Server Service Account (Configuration Manager) - SQL Server Reporting Services (SSRS) | Microsoft Docs (which is referenced from Install Power BI Report Server - Power BI | Microsoft Docs), it does not specifically call out gMSA as an option for the Service Account. Are others running in this scenario? Any tips, suggested documentation, etc? Thanks so very much for any pointers/advice! This wasn't easy the first 2 times and continues to be a challenge. 🤔 janice5.7KViews0likes3CommentsKerberos Authentication Help
Hello all- I'm trying to get Kerberos Authentication configured for Power BI Report Server and running into some issues. I am on September 2022 and we are using a Domain Service account. We are connectivity via HTTPs. I followed this article: https://learn.microsoft.com/en-us/power-bi/report-server/configure-kerberos-powerbi-reports#authentication-type-within-report-server-configuration I already made this change to the rsreportserver.config file: <AuthenticationTypes> <RSWindowsNegotiate/> <RSWindowsNTLM/> </AuthenticationTypes> These are the SPNs set for the domain service account: HTTP/powerbireports HTTP/powerbireports.fqdn HTTP/servername HTTP/servername.fqdn My question is- is there anything else I need to do since we have 2 HTTPs URLs configured? Am I missing a step? One of the URLs is the computer name and one is a custom URL. When I hit the URLs I'm still prompted for username and password. I'm running Fiddler and seeing an HTTPS 401 Unauthorized error. Also looks like it's still using NTLM. Appreciate the help! Hope it's as easy as mis-configured SPNs.Solved2KViews0likes2CommentsPaginated Reports Stopped Working with PBI RS (September 2021)
After upgrading from May to September 2021 paginated reports stopped working. It looks like Kerberos problem with message "Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'". Data source is configured to log as the user viewing the report. I had no problem in previous versions. I mean everything is well configured and it was working fine until this upgrade. Additional info: We have one server with both SQL Report Server 2016 and Power BI Report Server. I can't create data source to connect to any other SQL server neither on RS nor PBI RS. Another server with Report Server 2016 only is working normally and I can create data source. Both servers run a service under the same domain user account and SPN is registered for that account! Last news: I recreated problem with newely installed server. First, I install SQL 2019 CU 12 and PBI RS May. Services are running under the same domain account as all other servers I mentioned before. Created one simple report with remote db as data source. Report is giving result, data source can be tested on server. After upgrade to September 2021 I'm getting Login failed! Config file is correct- RSWindowsNegotiate is still first entry in authentication section. Any idea why mutual authentication stopped working!Solved3.1KViews0likes6CommentsPower BI Report Server Single Sign On
Dear All, I hope you are well and safe. I've an on-premises Power BI Report Server installation. The server works under a domain account as a service account. I need the users, under the same domain, to login automatically without being prompted to enter their windows account credentilas. I checked the "rsreportserver" configuration file, the only authenticaton type I have is "RSWindowsNTLM />" Any help would be appreciated.Solved11KViews0likes4CommentsUnable to connect to Analysis Service with kerberos
Hi i want to run pbi reports on a PBIRS (Jan 2020). The data is stored on an AS Server (other machine) the report was generated with powerbi desktop (Jän 2020) and works fine. when i run the report on report Server, i got the error message: We couldn't connect to the Analysis Services server. Make sure you've entered the connection string correctly. In Logfile i see: 2020-04-02 14:30:02.9154|ERROR|39|Failure in conceptualschema| RequestID = 4c97d902-514b-46ca-e0fb-xxxxxxxxxxxx ClientSessionID = 043e773b-e847-821a-79c1-xxxxxxxxxxxx Microsoft.ReportingServices.Diagnostics.Utilities.CannotRetrieveModelException: An error occurred while loading the model for the item or data source 'xxxxxxxx'. Verify that the connection information is correct and that you have permissions to access the data source. ---> Microsoft.PowerBI.DataExtension.Contracts.DataExtensionException: Failed to open the MSOLAP connection. ---> MsolapWrapper.MsolapWrapperException: Could not initialize connection the powerbi report server is new. so for authentication i followed these instruction: https://docs.microsoft.com/en-us/power-bi/report-server/configure-kerberos-powerbi-reports Report Server runs with AD Service Account, SPNs are set (http/hostname on serviceaccount + fqdn) and activated trust for delegation AS Server runs with local acocunt (NT Service\MSSQLServerOLAPService), SPNs (MSOLAPSvc.3,MSOLAPDisco.3 are set on Servername + fqdn) When i set username+password in Report>Manage>Data sources > Windows Authentication + "Using the following credentials", the report works fine. I think the SPNs, Trust for delegation, etc. are correct. Reports that get data from sql Server on the AS-Machine works fine. Does anyone have an idea what could be missing? Thanks for answer best regards WilfriedSolved2.5KViews0likes1CommentProblems connecting to Analysis Services with Chrome
So my PowerBI RS install is on a separate server from my analysis services database server. Reports cannot be viewed due to not connecting to Analysis Services Ok, forgot SPNs, forgot to edit the report server config to put Negotiate at the top I setup SPNs, configure RS, restart RS and verify that reports I wrote in PowerBI RS Desktop can be viewed in IE. I then go to Chrome. Chrome still can't connect. It will connect to the server and let me browse around, but I can't run the reports.950Views0likes1CommentPower BI Report Server Authentication
Hello, I have an on-premise Power BI Report Server set up and I've also setup Kerberos authentication. I've created the SPNs and the constrained delegation in Active Directory. I've also updated the rsreportserver.config file to include <RSWindowsNegotiate /> under AuthenticationTypes. In the web portal, my report runs. However, when I test the windows authentication connection by going to my report>manage>Data sources, I get an error, "Authentication type Integrated is not supported.". This does not make any sense to me because if the authentication connection doesn't work, wouldn't the report not run? I've recently upgraded my report server and Power BI Desktop from Oct 2017 version to March 2018 version. Is there a bug in this latest version?8.5KViews0likes4CommentsDirect Query with connection to SQL Server 2016 Database
I have create a report to a SQL Server 2016 data source and provided credentials to the data source in Power BI Report Server. When I test those credentials they test successfully. But when I go to preview the report I still get the Kerberos error. Why am I still getting a Kerberos error when I provide credentials to the data source that test successfully? Any help would be appreciated!808Views0likes0CommentsOn-Premises Data Gateway using Kerberos for SSO
Hello experts, I have just read the following artice about Use Kerberos for SSO from PowerBI to on premises data sources: https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-kerberos-for-sso-pbi-to-on-premises-data/ I have a couple of questions: 1. What the pros of utilizing this option? Why would you want to go with this rather than the "traditional" power bi gateway that is currently offered? 2.Is the preview version out there avaiable for download? i wasn't able to find any links to that. 3. Is it an acceptable risk to have the gateway reside on the same system as the SQL Server when impersonation is configured, or should one have a separate server configured with constrained delegation? Any other information/clarifications would be much appreciated!! Thanks!2.4KViews0likes1Comment