Hello everyone,
I have a production environment with 4 SharePoint servers (2 WFEs, 2 App), 2 SSAS Servers, 2 SQL Server Servers (Database). I also have two load balancers : the first one handles balancing requests between the two WFEs, and the second handles requests between the two SSAS Servers. For SQL Databases, the two servers are configured for AlwaysOn HighAvailabilty with a listener.
My requirement is to configure Kerberos Constrained delegation for the whole package. This is configured and works perfectly between SharePoint and SQL. But it is not working between SharePoint and SSAS, which does not suprise me because of the following :
- To access SSAS databases, we use a VIP from the load balancer (for example : 10.11.12.13\ASInstance)
- SPNs were created for SSAS accounts with fqdns of the SSAS servers (MSOLAPSvc.3\[FQDN(and without) of SSAS Server A]:[Instance Name] and MSOLAPSvc.3\[FQDN(and without) of SSAS Server B]:[Instance Name])
I've been thinking of two solutions :
- Create a Host A DNS entry with the VIP of the load Balancer and add the SPN of MSOLAPSvc.3
- Or, setup a HTTP EndPoint for SSAS (Datapump) and use it on Excel Services and RS Reports on SharePoint.
Am I thinking this right ? I'm not sure the first solution will work. If any Guru can give me some advice on how to deal with this it would be great. I can test the two solutions but I'm under the gun with this configuration, that's what I'm looking for THE solution to this.Thanks
JH