Kerberos!

This one probably ranks as the toughest one that I have been involved in the recent times.

SQL Server 2008 Analysis Services and IIS cannot use NTLM if there is a double hop during authentication i.e., the SQL Server and the IIS Servers are hosted on two different servers.

The only way to get around this problem is to enable Kerberos and this is no mean task.

The project that I was involved in used SSAS 2008 and MOSS 2007.

Here are the high level steps on how to enable Kerberos, will try and post detailed steps later.

1) Enable Kerberos for the site using SharePoint Central Admin

2) Edit the connection string to add SSPI=Kerberos

3) Add SPNs the service accounts of the App pools of the site, SSP and the service account running SSAS

4) Enable the service accounts to trust for delegation (Kerberos only)

5) Ensure the Kerberos service which provides tickets is running on all the domain controllers that serve the users

If all the above fails there is a bug with 2008 providing a fix

Ice Skating!

Once again its been a long time since I blogged but had so much fun ice skating so its blog time again. To begin with I was very sceptical of even being able to walk on with the Ice Skates on but mustered courage to have a go. After a bit of fight with the skates manage to get them on but got them on too tight.

After wearing the skates had to walk up stairs (this part is quite easy) and then onto the rink. This is where all the fun started. It was tough to move even a couple of inches. I hung on the the rails and then slowly started moving. At the end of one hour had sore elbows (holding onto the rails), stiff back and sore legs (the skates were too tight).

At the end of the hour I was able to slowly move without holding the rails. Did not have even a single fall though.

So, here are the basics from a guru of 1 hour experience :-)

1) Choose the right sized show. Don't hesitate to try a few shoes before choosing one

2) Wear a Jean and some full arm shirt (just in case you fall down)

3) Don't worry about onlookers and friends who might tease you. Its worth the effort once you manged to move around - its fun

4) Don't look down. I felt that I had a better balance when I did not look down

5) Once you get some confidence stay close to the rail but walk slowly very slowly. Its always better to stay close the the rail though just in case you need it :-) and trust me you will need it on the first day

6) Don't lose heart keep practising and you should be able to move a bit on the very first hour itself!

Happy Skating!

Google Maps API Key

Its been a while since I have blogged - thanks to the workload I have. This one was a challenge and had to crack it by accident, couldn't find any help on the net (atleast I couldn't find it).

The google maps API needs an API key provided by Google. This key will be generated for the domain name you specify. Even though I specified the IP Address correctly I kept getting the error - "The Google Maps API key used on this web site was registered for a different web site. You can generate a new key for this web site at http://code.google.com/apis/maps/."

Ok, before you get bored here is the solution. Go to the website properties in IIS and in the IP address drop down choose the IP which will be used by end users. This should be the key with which you should generate the API Key. Change your code and your site with google maps api should be up and running - no restarts required. If it doesn't work try restarting it though ;-)

Happy Mapping!

Search Limitation on MOSS

Well there are quite a few limitations with respect to search on MOSS. But let me pen something very peculiar we came across in this particular project I worked on.

If an user searches for any keyword which is present in the Master Page, all the pages using the master page are returned as part of the search results.

To give you a better understanding, navigate to http://technet.microsoft.com and search for "trademarks". This will explain what I am talking about.

If any of you have come across this or solved this, please email me or post your comment.

Happy Searching!