> Hi,
>
> We have problem connecting from an ASP page to Analysis services. Here is
> the scenario:
>
> Architecture:
>
>
>
> - The environment consists of an IIS6 Web Server box and a SQL
> Server 2000 Sp3a box.
>
> - Both boxes are running Windows 2003.
>
> - SQL Server and Analysis Service (sp3a) both run on the SQL
Server
> box.
>
> - The repository of the OLAP cubes resides in the SQL 2000
database
> msdb.
>
> - There are ASP scripts running on the Web Server.
>
> - The authentication method for the directory security is set to
> ONLY Integrated Windows Authentication.
>
> - Kerberos is NOT enabled for the two boxes.
>
>
>
>
>
> Problem:
>
>
>
> - When a browser request is made from a client machine, the ASP
> scripts are executed on the IIS server to retrieve OLAP data on the SQL
box.
>
> - However, there is a problem connecting to the OLAP database
> through the ASP scripts (with the use of OLE DB driver for Analysis
> Service).
>
> - Connecting to Analysis Services on the web server (logged in as IIS
> service account) using Analysis Manager is successful.
>
>
>
> - We have identified that this problem is due to the "double hop"
> scenario not allowed in IIS. The following are the test results:
>
> - If Integrated Windows Authentication is selected, accessing the
> OLAP cubes by using ASP and OLEDB drive for Analysis Service
>
> - from the web server -> OK
>
> - from a client machine other than the web server -> Errors
>
> - If Basic Authentication is selected, accessing the OLAP cubes
by
> using ASP and OLEDB drive for Analysis Service
>
> - from the web server -> OK
>
> - from a client machine other than the web server-> OK
>
> - Utilizing a UDL file and a connection string in ASP yields the
> same results.
>
> - It appears that the domain account which started SQL Server is
> always used to access the cubes.
>
>
>
> Tried to: Use Kerberos Authentication for Analysis Services:
>
> - Enabled Kerberos for the two boxes
>
> - The authentication method for the directory security is set to
> ONLY Integrated Windows Authentication.
>
> - The connection string that is used in the ASP script to connect
> to the Analysis Services:
>
>
>
> Data Source=tdsi-ifnsql-uat;Provider=MSOLAP;SSPI=Kerberos;Initial
> catalog=ifinance
>
>
>
> - And the error message:
>
>
>
> The operation requested failed due to security problems - unknown error
>
>
>
> - Details of this error:
>
>
>
> NativeError: 2422
>
> SQLState:
>
> Reported by: Microsoft® OLE DB Provider for Analysis Services
>
> Help file:
>
> Help Context ID: 0
>
>
>
> Can somebody please help.
>
>
>
>
>