1

Kerberos - the beast of SharePoint - has been configured and is creating tickets on my test environment WFE. I also had RevertToSelf for the BCS service application turned on. I am able to create an external content type/external list with the Authentication Mode turned to "User's Identity." But when I attempt to access the list I get the dreaded "Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'." The WFE event viewer is showing my domain account with Kerberos. The App Server is showing Negotiate.

Is there another setting I am overlooking in Central Admin/IIS? Is the difference in the WFE/App server for tickets an issue? Why the heck does Kerberos have to be that difficult? OK - maybe not so much that last question, but help getting BCS authentication working would be very appreciated!

Improve this question
1
  • Did you ever resolve this? I'm currently trying to setup BCS to pass through the current user's identity - web app running claims and kerberos and not having any luck :(
    – Mark
    May 20, 2016 at 9:21

1 Answer 1

Reset to default
0

I guess that you are accessing data in an SQL server database through the BCS? if so - try to run this on the sqlserver

select DB_NAME(dbid), loginame,  sys.dm_exec_connections.auth_scheme from sys.sysprocesses join sys.dm_exec_connections on sys.sysprocesses.spid = sys.dm_exec_connections.session_id
where dbid>0
group by dbid, loginame,  spid, sys.dm_exec_connections.auth_scheme

this will show the actual connections on the database whether they are NTLM or KERBEROS, and if the user is actually delegated.

I guess you have set all the SPN's and all?

Improve this answer
3
  • Yes, SPNs were set. I will see if I can have the SQL cmd ran and update. Thanks for the guidance.
    – JuanTrev
    Jan 27, 2014 at 15:03
  • 1
    Any update? Facing the exact same problem here. SPNs are set, trusted delegation is set, still ANONYMOUS LOGON errors.
    – Jasper
    Feb 21, 2014 at 11:48
  • I'd like next steps as well. I have SPNs registered for the web application and target database with delegation set, but it shows authentication as NTLM.
    – Jeff Freeman
    Apr 4, 2014 at 18:35

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.