From: Bruce L-C [MVP] on
RS 2008 does not use IIS but it uses the same protocols and it integrates
with IIS if you have it. Everything said about Kerberos will be the same.

--
Bruce Loehle-Conger
MVP SQL Server Reporting Services

"Marek G." <grolms(a)volny.cz> wrote in message
news:etEN3#wzKHA.244(a)TK2MSFTNGP06.phx.gbl...
> I look to this server , the server not have instaled iis ...
>
> "Kwai-Chang-Caine via SQLMonster.com" <u58958(a)uwe> píše v diskusním
> příspěvku news:a5afe87aa2bd9(a)uwe...
>> The link i sent you is good, but here's a newer version ->
>> http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
>>
>>
>>
>> Kwai-Chang-Caine wrote:
>>>Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos failure
>>>(misconfiguration).
>>>Start with Delegconfig tool here:
>>>http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
>>> to pinpoint your SPN's and which haven't been set properly.
>>>
>>>>Hi all , sorry for my english . I have trouble with eport services in
>>>>the
>>>>SQL 2008 and Win 2008 .An error occurred during client rendering. An
>>>>error
>>>[quoted text clipped - 7 lines]
>>>>.. I set delegation for kerberos on te SQL server , ReportServer .....
>>>>Why
>>>>this not work ?thanx for answer
>>
>> --
>> Message posted via SQLMonster.com
>> http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
>>
From: Marek G. on
Thank You , and where I set the IIS impersonate ?

"Bruce L-C [MVP]" <bruce_lcNOSPAM(a)hotmail.com> wrote in message
news:OOMano0zKHA.2512(a)TK2MSFTNGP05.phx.gbl...
> RS 2008 does not use IIS but it uses the same protocols and it integrates
> with IIS if you have it. Everything said about Kerberos will be the same.
>
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
>
> "Marek G." <grolms(a)volny.cz> wrote in message
> news:etEN3#wzKHA.244(a)TK2MSFTNGP06.phx.gbl...
>> I look to this server , the server not have instaled iis ...
>>
>> "Kwai-Chang-Caine via SQLMonster.com" <u58958(a)uwe> píše v diskusním
>> příspěvku news:a5afe87aa2bd9(a)uwe...
>>> The link i sent you is good, but here's a newer version ->
>>> http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
>>>
>>>
>>>
>>> Kwai-Chang-Caine wrote:
>>>>Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos
>>>>failure
>>>>(misconfiguration).
>>>>Start with Delegconfig tool here:
>>>>http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
>>>> to pinpoint your SPN's and which haven't been set properly.
>>>>
>>>>>Hi all , sorry for my english . I have trouble with eport services in
>>>>>the
>>>>>SQL 2008 and Win 2008 .An error occurred during client rendering. An
>>>>>error
>>>>[quoted text clipped - 7 lines]
>>>>>.. I set delegation for kerberos on te SQL server , ReportServer .....
>>>>>Why
>>>>>this not work ?thanx for answer
>>>
>>> --
>>> Message posted via SQLMonster.com
>>> http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
>>>
From: Bruce L-C [MVP] on
The only time this is an issue (double hop) is when your web application is
on one server and RS is on another.

User->Application on Server 1 -> RS on Server 2

This is called double hop. It is a windows issue that the authentication of
the user does not make it to the second server. The solution is to implement
Kerberos.

I have not implement kerberos or had to deal with this. If you want to
understand the issue more then you read up on double hop authentication
problems.
--
Bruce Loehle-Conger
MVP SQL Server Reporting Services

"Marek G." <grolms(a)volny.cz> wrote in message
news:#VtVC5D0KHA.5936(a)TK2MSFTNGP04.phx.gbl...
> Thank You , and where I set the IIS impersonate ?
>
> "Bruce L-C [MVP]" <bruce_lcNOSPAM(a)hotmail.com> wrote in message
> news:OOMano0zKHA.2512(a)TK2MSFTNGP05.phx.gbl...
>> RS 2008 does not use IIS but it uses the same protocols and it integrates
>> with IIS if you have it. Everything said about Kerberos will be the same.
>>
>> --
>> Bruce Loehle-Conger
>> MVP SQL Server Reporting Services
>>
>> "Marek G." <grolms(a)volny.cz> wrote in message
>> news:etEN3#wzKHA.244(a)TK2MSFTNGP06.phx.gbl...
>>> I look to this server , the server not have instaled iis ...
>>>
>>> "Kwai-Chang-Caine via SQLMonster.com" <u58958(a)uwe> píše v diskusním
>>> příspěvku news:a5afe87aa2bd9(a)uwe...
>>>> The link i sent you is good, but here's a newer version ->
>>>> http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
>>>>
>>>>
>>>>
>>>> Kwai-Chang-Caine wrote:
>>>>>Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos
>>>>>failure
>>>>>(misconfiguration).
>>>>>Start with Delegconfig tool here:
>>>>>http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
>>>>> to pinpoint your SPN's and which haven't been set properly.
>>>>>
>>>>>>Hi all , sorry for my english . I have trouble with eport services in
>>>>>>the
>>>>>>SQL 2008 and Win 2008 .An error occurred during client rendering. An
>>>>>>error
>>>>>[quoted text clipped - 7 lines]
>>>>>>.. I set delegation for kerberos on te SQL server , ReportServer .....
>>>>>>Why
>>>>>>this not work ?thanx for answer
>>>>
>>>> --
>>>> Message posted via SQLMonster.com
>>>> http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
>>>>
From: Marek G. on
I read double hop trouble ,but I set the spn . But I do not know , where i
set inpersonifikation in the iis .... I donot have instaled IIS ... Which
spn I must set manualy ???

"Bruce L-C [MVP]" <bruce_lcNOSPAM(a)hotmail.com> wrote in message
news:#uBCOAE0KHA.244(a)TK2MSFTNGP06.phx.gbl...
> The only time this is an issue (double hop) is when your web application
> is on one server and RS is on another.
>
> User->Application on Server 1 -> RS on Server 2
>
> This is called double hop. It is a windows issue that the authentication
> of the user does not make it to the second server. The solution is to
> implement Kerberos.
>
> I have not implement kerberos or had to deal with this. If you want to
> understand the issue more then you read up on double hop authentication
> problems.
> --
> Bruce Loehle-Conger
> MVP SQL Server Reporting Services
>
> "Marek G." <grolms(a)volny.cz> wrote in message
> news:#VtVC5D0KHA.5936(a)TK2MSFTNGP04.phx.gbl...
>> Thank You , and where I set the IIS impersonate ?
>>
>> "Bruce L-C [MVP]" <bruce_lcNOSPAM(a)hotmail.com> wrote in message
>> news:OOMano0zKHA.2512(a)TK2MSFTNGP05.phx.gbl...
>>> RS 2008 does not use IIS but it uses the same protocols and it
>>> integrates with IIS if you have it. Everything said about Kerberos will
>>> be the same.
>>>
>>> --
>>> Bruce Loehle-Conger
>>> MVP SQL Server Reporting Services
>>>
>>> "Marek G." <grolms(a)volny.cz> wrote in message
>>> news:etEN3#wzKHA.244(a)TK2MSFTNGP06.phx.gbl...
>>>> I look to this server , the server not have instaled iis ...
>>>>
>>>> "Kwai-Chang-Caine via SQLMonster.com" <u58958(a)uwe> píše v diskusním
>>>> příspěvku news:a5afe87aa2bd9(a)uwe...
>>>>> The link i sent you is good, but here's a newer version ->
>>>>> http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
>>>>>
>>>>>
>>>>>
>>>>> Kwai-Chang-Caine wrote:
>>>>>>Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos
>>>>>>failure
>>>>>>(misconfiguration).
>>>>>>Start with Delegconfig tool here:
>>>>>>http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
>>>>>> to pinpoint your SPN's and which haven't been set properly.
>>>>>>
>>>>>>>Hi all , sorry for my english . I have trouble with eport services in
>>>>>>>the
>>>>>>>SQL 2008 and Win 2008 .An error occurred during client rendering. An
>>>>>>>error
>>>>>>[quoted text clipped - 7 lines]
>>>>>>>.. I set delegation for kerberos on te SQL server , ReportServer
>>>>>>>..... Why
>>>>>>>this not work ?thanx for answer
>>>>>
>>>>> --
>>>>> Message posted via SQLMonster.com
>>>>> http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
>>>>>
From: Bruce L-C [MVP] on
Sorry, I know the theory but I have not had to do this.

However, is there someplace with the server that you would do this?

--
Bruce Loehle-Conger
MVP SQL Server Reporting Services

"Marek G." <grolms(a)volny.cz> wrote in message
news:#rh5LiQ0KHA.3652(a)TK2MSFTNGP04.phx.gbl...
> I read double hop trouble ,but I set the spn . But I do not know , where i
> set inpersonifikation in the iis .... I donot have instaled IIS ... Which
> spn I must set manualy ???
>
> "Bruce L-C [MVP]" <bruce_lcNOSPAM(a)hotmail.com> wrote in message
> news:#uBCOAE0KHA.244(a)TK2MSFTNGP06.phx.gbl...
>> The only time this is an issue (double hop) is when your web application
>> is on one server and RS is on another.
>>
>> User->Application on Server 1 -> RS on Server 2
>>
>> This is called double hop. It is a windows issue that the authentication
>> of the user does not make it to the second server. The solution is to
>> implement Kerberos.
>>
>> I have not implement kerberos or had to deal with this. If you want to
>> understand the issue more then you read up on double hop authentication
>> problems.
>> --
>> Bruce Loehle-Conger
>> MVP SQL Server Reporting Services
>>
>> "Marek G." <grolms(a)volny.cz> wrote in message
>> news:#VtVC5D0KHA.5936(a)TK2MSFTNGP04.phx.gbl...
>>> Thank You , and where I set the IIS impersonate ?
>>>
>>> "Bruce L-C [MVP]" <bruce_lcNOSPAM(a)hotmail.com> wrote in message
>>> news:OOMano0zKHA.2512(a)TK2MSFTNGP05.phx.gbl...
>>>> RS 2008 does not use IIS but it uses the same protocols and it
>>>> integrates with IIS if you have it. Everything said about Kerberos will
>>>> be the same.
>>>>
>>>> --
>>>> Bruce Loehle-Conger
>>>> MVP SQL Server Reporting Services
>>>>
>>>> "Marek G." <grolms(a)volny.cz> wrote in message
>>>> news:etEN3#wzKHA.244(a)TK2MSFTNGP06.phx.gbl...
>>>>> I look to this server , the server not have instaled iis ...
>>>>>
>>>>> "Kwai-Chang-Caine via SQLMonster.com" <u58958(a)uwe> píše v diskusním
>>>>> příspěvku news:a5afe87aa2bd9(a)uwe...
>>>>>> The link i sent you is good, but here's a newer version ->
>>>>>> http://blogs.technet.com/askds/archive/2009/04/30/deleconfig-v2-released.aspx
>>>>>>
>>>>>>
>>>>>>
>>>>>> Kwai-Chang-Caine wrote:
>>>>>>>Seeing 'NT AUTHORITY\ANONYMOUS LOGON' is a sure sign of kerberos
>>>>>>>failure
>>>>>>>(misconfiguration).
>>>>>>>Start with Delegconfig tool here:
>>>>>>>http://www.iis.net/community/default.aspx?tabid=34&g=6&i=1434
>>>>>>> to pinpoint your SPN's and which haven't been set properly.
>>>>>>>
>>>>>>>>Hi all , sorry for my english . I have trouble with eport services
>>>>>>>>in the
>>>>>>>>SQL 2008 and Win 2008 .An error occurred during client rendering. An
>>>>>>>>error
>>>>>>>[quoted text clipped - 7 lines]
>>>>>>>>.. I set delegation for kerberos on te SQL server , ReportServer
>>>>>>>>..... Why
>>>>>>>>this not work ?thanx for answer
>>>>>>
>>>>>> --
>>>>>> Message posted via SQLMonster.com
>>>>>> http://www.sqlmonster.com/Uwe/Forums.aspx/sql-server-reporting/201003/1
>>>>>>