I am running into a weird issue with a new SQL Reporting Services 2014 server I built. I installed SQL Reporting 2014 on Windows Server 2012 R2 and configured Kerberos, but the site is extremely slow. After some reconfiguration and log captures I have determined the issue has to do with the Kerberos setup, however I am running a similar configuration with SQL Reporting Services 2008 on Windows Server 2008 R2 and do not run into the same errors.The error I see while using Wireshark is KRB Error: KRB5KDC_ERR_BADOPTION NT Status: STATUS_NO_MATCH. When I drill down the into the error I can see the kerberos string is testprjmnmtreports14.company.com, which is the URL we are using to access the site. I made sure to add that name as an SPN for the service account that is running SQL Reporting Services, however I still receive the error.Then I tried configuring the site to run without a hostheader, so I accessed the site with the server name, ECTSTSQLRS5, and the site works perfectly fine, no errors are reported either. So it seems I have isolated the issue down to Kerberos but I am not sure how to resolve it. Here is some more information about my environment:[b]DNS/URL used:[/b] testprjmnmtreports14.company.com[b]Server Name (FQDN):[/b] ECTSTSQLRS5.company.int[b]AD Domain Name: [/b]company.int[b]Server Version: [/b]Windows Server 2012 R2[b]AD Functional Level: [/b]2008 R2I also have the following SPNs set for my SQL service account:http/testprjmngmtreports14.company.comhttp/testprjmngmtreports14http/ECTSTSQLRS5.COMPANY.INThttp/ECTSTSQLRS5As you can see I am trying to use a .com address but my AD domain is .int which I think is the issue, but I do not have the same problem on my other server that is running Windows Server 2008 R2. Has anyone see this issue before? What do I need to do to allow my new site on 2012 R2 to work with this DNS Alias?
↧