如何获得一个新的SQL Server Reporting Services农场吗

上个月,我谈到了“规模”许可模型报告服务模型。它是昂贵的。好吧,这个月我为客户构建一个概念验证。幸运的是,我们可以使用开发版,直到我们进入生产。我感觉更舒适的处理技术问题和授权问题。让我们来看看……我建立了一个网络农场使用两个web服务器运行ASP。净和IIS。在后台我两个数据库服务器运行SQL Server安装。想法是使用NLB的前端负载均衡和数据库镜像的后端数据保护和故障转移。我想我将安全意识和只安装使用一个域用户帐户有本地管理员的权限,而不是域管理员。 This had some consequences as we will see later. I installed SQL Server according to the Books Online article "Configuring Reporting Services for Scale-Out Deployment" http://msdn.microsoft.com/en-us/library/ms156453.aspx I installed a files-only install of SSRS on the web servers then used SSRS Configuration Manager to actually configure the web farm with 2 front-end Reporting servers pointing to the same ReportServer database on the back-end. All set up went well. When I came to test out Report Manager, I hit security issues. The first one was simple. The Developer Edition of SQL Server is not set up for Remote connections by default so I had to enable TCP/IP in the SQL Configuration Manager for the Database Servers. The next issue was more involved. I was getting an error trying to connect to SQL Server through Report Manager. At this point I actually had no reports built at all. I was just testing access to SSRS through this architecture. The error was interesting "NT AUTHORITY/ANONYMOUS LOGON" - failed to connect to Database. I checked that everything was set up using Windows Integrated Security and that the default service accounts were in place and granted appropriate permissions as part of the SSRS install. All looked good. It turns out that I was trying to implement "double-hop" authentication using Kerberos but that Delegation in Active Directory was not set up correctly. So the system gave up on Kerberos and tried NTLM anonymous access. Hence the error. If I had installed everything using the Domain Admin account, the install would have set up delegation correctly for me behind the scenes. The issue was uncovered by an interesting document on the MSDN Forum for Reporting Services: http://social.msdn.microsoft.com/forums/en-US/sqlreportingservices/thread/3266f4ac-51f7-4534-b5f0-eda19a86d9d6/ The actual document that helped me most was buried deep in that post about Microsoft Dynamics CRM "Microsoft CRM 3.0: Additional Setup Tasks Required if Reporting Services Is Installed on Different Server". This outlined the different scenarios and solutions. Even though I was not using CRM, the document was definitive in its advice. Cut a long story short, I was able to set up the correct SPNs (ServicePrincipalNames) on the service account and Trusted Delegations on the Computers to make the proof of concept work. If only I had installed using the Domain Admin account, I could have bypassed this whole thing. But, as I tell my students, if everything works, you don't learn as much! Put it down to experience. cheers Brian Licensing for Scale Out Reporting Services solution: //m.amiribrahem.com/community/node/43349