Database Reference
In-Depth Information
THE DouBLE HoP ProBLEM
The network environment in which Reporting Services is deployed deter-
mines the supported types of connections used when supporting access to
data sources. With Kerberos enabled, delegation and impersonation features
available in Windows Authentication to support connections across multiple
servers may be used to pass user credentials to remote data sources. Without
having Kerberos enabled, Windows connections are only able to pass user
credentials to one server prior to expiration. In this case, users are only able
to connect and pass their user credentials from their computer to the report
server. After this first connection, the user credentials are not subsequently
permitted to be passed from the report server to a remote server containing
the data source for the reporting.
To successfully pass user credentials from the user's computer through the
report server to the data source servers, Reporting Services has the follow-
ing options:
uu
Set reports to use stored or prompted credentials when querying data
sources
uu
Configure Kerberos authentication protocol and enable impersonation
and delegation in order to permit credentials to be delegated to other
computers without limits
Coniguration of Kerberos authentication is outside of the scope of this topic.
The next section discusses the option to use stored or prompted credentials
allowing the end user's credentials to be passed without having Kerberos
configured.
SET ExECuTIoN CoNTExT: rEQuIrEMENTS AND SETuP
To permit the end user's credentials to be successfully passed to the data source
without configuring Kerberos, the data source must be set to use stored cre-
dentials and use both the Use as Windows Credentials When Connecting to the
Data Source and Impersonate the Authenticated User After a Connection Has
Been Made to the Data Source options. Figures 8-2 and 8-3 show the specific
configuration of the data source during report design and server configuration.
