SharePoint 2013 + Reporting Services + Kerberos

Question

How to configure SharePoint 2013 with Reporting Services for delegations if I get data for Reporting Service from other SQL server that ShqrePoint database?

I found below blog but I'm not sure about my situation if I have WFE + APP with SRS + SP SQL + SQL with SRS?

http://blogs.technet.com/b/sharepoint_-_inside_the_lines/archive/2013/05/28/sharepoint-2013-with-ssrs-2012-and-constrained-delegation.aspx

Which spn should I create?

SPNs:

1. spn for SharePoint WebApplication account
2. spn for C2WTS
3. spn for SRS SharePoint Service account
4. spn for SQL Engine - but SQL where SharePoint has databases or SQL where I get data to Reporting?

Delegations:

1. SharePoint WebApplication account to SQL Engine
2. C2WTS to SQL Engine
3. SRS SharePoint Service account to which SQL?

Thanks for support,

Answer 1

Warning up front: Kerberos is a big, really big PITA. It took us months to set up (SP2010). Only do it if you require the user's credentials in your dataset (double hop). Otherwise, don't use it.

About your assumptions: you're right. See also here: http://technet.microsoft.com/en-us/library/ee806870(v=office.15).aspx .

Re SPN4 and delegation3: SQL instance that holds your reporting data, as that will be the SQL instance where the credentials are forwarded to.

And, also create a diagram of all servers, SPN's, etc. Check this for all changes in error handling in Server 2012: http://technet.microsoft.com/en-us/library/hh831747.aspx