Friday, July 27, 2007

Problems with SPN, IIS and SSRS

I'm in the middle of a large SQL Server 2005 Reporting Services deployment at work. When we upgraded some of the PCs to Vista and IE7 we have had a lot of issues with the default Integrated Security that SSRS users. Some users would come to the site and be unable to proceed past the login prompt (which they shouldn't bet getting anyway).

Turns out that the vendor was using a custom identity in the IIS application resource pool. The solution was to remap the Server Principal Name from the host to the user account. This apparently also sets us up to cluster this later on (yay). Here's the original blog post I found that Helped me out a lot.

http://www.adopenstatic.com/cs/blogs/ken/archive/2006/11/19/606.aspx