2

I am trying to run a SQL Server Reporting Services where the data for the report is on a SQL Server database that's on a different server. Integrated Authentication is turned on for both the Report Server and the report. I have confirmed that Kerberos delegation is working fine by using Internet Explorer to run the report from inside the network.

However, when I open the report server through the firewall, I cannot run the report. I get the following error: An error has occurred during report processing. Cannot create a connection to data source 'frattoxppro2'. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

Does Kerberos authentication not work outside a firewall?

4

2 回答 2

5

Kerberos 需要到 KDC 的端口 88 连接，在这种情况下，很可能是您的 DC。

您可能想要查看的是 HTTPS + 基本身份验证 + 协议转换，以获取基本身份验证并将其转换为基于 DC 的 Kerberos 票证，以进行委派和后端身份验证。

不是最容易设置的，但是当它工作时，它工作得非常好。

于 2008-09-19T20:22:48.813 回答
0

I'm not really in a position to tell you why kerberos isn't working for you, but did have a alternative suggestion for your configuration. You can use ISA services to expose the reporting server rather than simply poking a hole in your firewall. This is something our company has done successfully - it republishes the reporting services site so the browsers are talking to ISA, not directly to the server. ISA Services is quite happy to pass through your credentials as well.

于 2008-09-17T23:35:03.123 回答