Comments on: Life is Just a Bowl of SharePoint – Part 8: Installing SharePoint 2010 Beta with Kerberos

By: Joan Resnick Ehrlich

Joan Resnick Ehrlich — Mon, 20 Dec 2010 15:52:05 +0000

Abbas, SP2010 Foundation does not have the Search Service Application. You need at least SP2010 Standard.

Have you checked TechNet on how to configure SP Foundation Search? You can also google/bing on this: configure search sharepoint 2010 foundation

I found this blog post among many in that search: http://www.mstechblogs.com/sharepoint/sharepoint-foundation-2010-%E2%80%93-search-error/ that looks like it might directly help

Also does the crawl account have Read access to the db content it is to crawl?

By: Abbas

Abbas — Wed, 15 Dec 2010 23:56:41 +0000

Hi, I have a wiered problem with SP Foundation 2010. I have 3 sites on it, standalone install, once I configured the Search service it works for the default site but doesnt do the job for the web apps i created.

I cannot see search service app either, neither can i afford a live server uninstall, boss’es will kick me out of the job… lol

What could be the problem?

By: Joan

Joan — Sun, 19 Sep 2010 18:00:10 +0000

I just wanted to update on SSAS. Microsoft has a guide out

http://www.microsoft.com/downloads/details.aspx?familyid=1A794FB5-77D0-475C-8738-EA04D3DE1147&displaylang=en

that walks thru Kerberos config for SQL, SSAS, SSRS, Excel Services, PerformancePoint, BCS, Visio Services which I found helpful. Except note that Host SPNs ARE needed for MSSQLSvc and MSOLAPSvc.3 — the guide does not explicilty include setting these (just the FQDN SPNs) in the SQL OLAP (which is really just the SQL service) and SSAS scenarios but DOES show them in the Excel Services etc scenarios.

Also, *Constrained delegation* is required for Excel Services 2010 which requires the Claims to Windows Token Service (c2wts). Ditto constrained delegation for PerformancePoint 2010 and Visio Service 2010 which also require the c2wts. And you can use a domain account for c2wts (but requires special permissions be set for c2wts) and set constrained delegation on it as well and not have to set computer delegation. If you keep default of c2wts running under local system account, you do need computer delegation per guide. I have c2wts running under domain account and no computer delegation and Kerberos + SP2010 + SQL is working fine.

Joan

By: Pete Doyon

Pete Doyon — Mon, 10 May 2010 14:35:48 +0000

Hi Joan – I’ve been googling this for months. There’s definitely a paucity of help out there. I will review your posts to see if there’s anything I might have missed. I definitely have Kerberos working on the site as I’ve confirmed this via the event logs. I just keep failing when trying to refresh a published pivot table. I’ll end up with some very valuable knowledge once I get it figured out

Pete

By: Joan

Joan — Mon, 10 May 2010 14:31:08 +0000

HI Pete,

I know how you feel. I’d go the MSFT/MSDN route myself at that point. While waiting, try this search (1,340 results on Google):

ssas 2005 “excel services” data refresh “sharepoint 2010″

I quickly perused results; two more thoughts on possible cause based on forum posts/replies: cache refresh issue, and is MSOLAP.3 in the list of trusted data providers.

By: Pete Doyon

Pete Doyon — Mon, 10 May 2010 11:17:25 +0000

Hi Joan – thanks for the reply. I do in fact have SPN’s for both the SSAS instance and the SQL instance behind the DSVs. I cannot begin to tell you how much time I’ve spent trying to get it to work. I’ve just about reached the point where I will wait until the product is released and then open a support ticket with MSFT via our MSDN subscription. It definitely has been a very frustrating experience. I honestly don’t understand why, to this day, there isn’t a whitepaper on MSDN on how to do it. The only answer I can come up with is that most Sharepoint people don’t live in the SSAS/SQL world therefore they don’t have the need to know how to set it up. I’ll keep plugging away until I can figure out what the problem is. It could even be that Excel Services requires Excel 2010 to work properly with SSAS 2005.

Pete

By: Joan

Joan — Sat, 08 May 2010 22:16:01 +0000

Hi Pete

Haven’t gotten that far. But a few thoughts: (1) Do you have SPNs set up for SSAS? I just found out these will be needed, and for SSRS also. Check out http://support.microsoft.com/kb/917409 (2) Google on these searches (w/out the quotes): “sharepoint 2010 ssas kerberos” “sharepoint ssas kerberos” “project server 2010 excel services kerberos” (because Project Server now uses Excel Services for reporting and the PS docs and team blogs are really good so maybe you can extrapolate from them what is needed). (3) Switch to Claims based authentication? I know nothing about this yet but check out http://blogs.msdn.com/andrasg/archive/2010/05/04/setting-up-sharepoint-2010-excel-services-to-get-external-data.aspx — in addition to SSRS in SharePoint integrated mode mentioned, PowerPivot is apparently claims aware and PowerPivot is SSAS in SharePoint integrated mode. Also see http://technet.microsoft.com/en-us/library/ee806887(office.14).aspx

By: Pete Doyon

Pete Doyon — Tue, 04 May 2010 13:42:21 +0000

Hi Joan – many thanks for your efforts in putting together this document. Have you tried this using Excel Services against SSAS cubes on another server? I’ve been able to get Kerberos working but always fail when refreshing a published pivot table with a cube behind it.