New answers tagged kerberos
2
Enable FireFox Kerberos Trust
Open FireFox
In the Location bar, type about:config, and press enter. The about:config "This might void your warranty!" warning page may appear. Click I'll be careful, I promise!, to continue to the about:config page.
In the about:config page, search for the preference network.negotiate-auth.trusted-uris, and double-click ...
1
You should add the account running the application pool.
If you look at the guide you linked to, he adds: corp\spwebapp
2
You need to make sure that you have provisioned the Claims to Windows Token Service (C2WTS) using its own domain account. Then create a fake SPN for that account (this is only needed to get the Delegation tab to show up in the ADUC MMC):
setspn SP/C2WTS domain\user
Then configure constrained delegation for that service account to the SSAS service.
1
Make sure you have the claims to windows token service on it's own service account:
a) Add the service account to the local Administrators Groups.
b) In local security policy (secpol.msc) under user rights assignment give the service account the following permissions:
Act as part of the operating system
Impersonate a client after authentication
...
1
What about the SQL Server and SharePoint WFEs computer account settings / user account settings in Active Directory have they been setup to say which services they are able to use delegate user credentials for?
Have you created SPNs for the Claims To Windows Token Service?
Martin Hatch did an awesome presentation on configuring all of this a few years ago ...
0
Did you add the file location of the Excel workbook to the trusted file locations from within CA>Service Applications>excel service application>Trusted File Locations?
Did you add the trusted data connections and the configure the SASS data model location?
Can you provide a breakdown of the Global Settings that you have configured from with the Excel ...
Top 50 recent answers are included
