After converting SharePoint to Kerberos authentication the other week, my project for today was to get PerformancePoint Monitoring and Analysis working with Kerberos. My primary source for getting all the pieces correct with this TechNet article: http://technet.microsoft.com/en-us/library/bb838775.aspx. However, one difference in my setup was that I run all of my SQL Services as a domain user. SQL Analysis Services by default runs as the network service. Go to Start -> Run -> services.msc. Change the SQL Analysis Services identity to the domain user you wish to run as. This also effects the commands posted on the TechNet site. Instead of
For Microsoft SQL Server 2005 Analysis Services, run the following command:setspn –A MSOLAPSvc.3/<ServerName>.<Fully qualified domain name>
<ServerName>setspn –A MSOLAPSvc.3/<ServerName>
<ServerName>
Run
For Microsoft SQL Server 2005 Analysis Services, run the following command:setspn –A MSOLAPSvc.3/<ServerName>.<Fully qualified domain name>
<domainusername>setspn –A MSOLAPSvc.3/<ServerName>
<domainusername>
on your AD Server. is the name of the Analysis Server your cube resides on that you wish to connect to when designing your dashboard. The other part that isn’t mentioned in the article as that all your application pools for PPS M&A must be running as the same user. In most cases they should all be setup this way already; however, if you are having problems authenticating to your PPS sites, this is one thing to check.
Once, you’ve made those changes, you should be able to open up your Dashboard Designer, connect to your Analysis Server running the cube you want to use and start designing!
