Microsoft KB Archive/817384

= How To Use Kerberos Authentication for Microsoft SQL Server 2000 Analysis Services =

PSS ID Number: 817384

Article Last Modified on 7/13/2004

-

The information in this article applies to:


 * Microsoft SQL Server 2000 Analysis Services SP3
 * Microsoft SQL Server 2000 Analysis Services SP2
 * Microsoft SQL Server 2000 Analysis Services SP1
 * Microsoft SQL Server 2000 64 bit (all editions)

-



SUMMARY
This article describes how to use Kerberos authentication with Microsoft SQL Server 2000 Analysis Services.

Note This article assumes that Kerberos authentication is enabled on both the client and the server computers.

For additional information, click the following article numbers to view the articles in the Microsoft Knowledge Base:

215383 How To Configure IIS to Support Both Kerberos and NTLM Authentication

283201 How To Use Delegation in Windows 2000 with COM+



MORE INFORMATION
To use Kerberos authentication with Microsoft SQL Server 2000 Analysis Services, follow these steps:

 Install SQL Server 2000 Analysis Services Service Pack 1 (SP1), or later, on both the server and the client.

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

290211 INF: How to Obtain the Latest SQL Server 2000 Service Pack

  Create a Service Principal Name (SPN) for the server that is running Analysis Services.

If the MSSQLServerOLAPService service is running in the security context of the LocalSystem account, the SPN is created automatically.

If the MSSQLServerOLAPService service is running in the security context of an account other than the LocalSystem account, you must create the SPN manually. To do so, use the Setspn.exe utility of the Microsoft Windows 2000 Resource Kit. To download the Setspn utility, visit the following Microsoft Web site:

Setspn.exe

To create the SPN for the server that is running Analysis Services, open the command prompt, and then run the following command:  -A MSOLAPSvc/.  -or-

 -A MSOLAPSvc/ 

To verify whether the SPN was created for the server that is running Analysis Services, open the command prompt, and then run the following command:

 -L 

If the SPN was created for the server that is running Analysis Services, the results of the first command run earlier will typically be in the following format:

MSOLAPSvc/.<domainName>

MSOLAPSvc/<serverHostName>

</li> Set the connection string to use Kerberos authentication. To use Kerberos authentication with a server that is running Analysis Services:

In the connection string, use the fully qualified domain name of the datasource name. For example, myhost.mydomain.com.

-or-

Use the NetBios name. For example, myhost.

In the connection string, use SSPI=Kerberos

Note Specifying a numeric IP address in the connection string disables Kerberos authentication.</li></ol>

<div class="references_section">