SharePoint 2013 PerformancePoint Database Dropdown Empty

When configuring PerformancePoint Services in SharePoint 2013, I struggled for a while with two problems when trying to create a Data Source for in the PerformancePoint Dashboard Designer:

  • No matter what server name I entered I didn’t get an error.
  • The database dropdown was always empty, irrespective of whatever server name was entered.

After many hours effort, recreating the PerformancePoint Service Application several times, I finally stumbled across this blog entry .  This seemed to tally exactly with what I was encountering, though I didn’t spot the exception in the ULS logs, but at this point I was happy to try anything.  The solution appeared to be to install the ADOMD.NET 10.0 on the SharePoint Server which is running PerformancePoint Services.  I did this but had to do the additional step of running an IISRESET in order to get the change to kick in properly and sure enough after this I managed to connect successfully to the Analysis Services cubes.

Hope this helps and thanks to James Love for this invaluable nugget …

Cheers

Dave Mc

 

Configuring Kerberos for SharePoint. A Couple of Tips …

I’ve been back in the Kerberos Configuration Groove lately. Yes that, multi-step process which foxes so many people.   If you have to engage in this process then I recommend a few things:

If you’re not already aware of it I strongly recommend that you download  a copy of the “Configure Kerberos Authentication for SharePoint 2010 Products” from Microsoft from here and keep it close.

Try to get to understand the process of what is happening rather than just follow by rote.  You’ll find you fix errors much easier.  The document I just mentioned really helps.

Bear in mind that a few things in the document are a bit of overkill IMHO … two in particular are:

Having a domain account running the Claims to Windows Token Service.  I personally would just let this run as  “Local Service”.  Before you security guru’s start jumping all over me on that one, I’ll refer you to the document which says that the account which runs the C2WTS has to be a Local Administrator, Act as Part of the Operating System, Log On As A Service and Impersonate a Client After Authentication.  Also the C2WTS has no remote access capability, as you have to run it on every server which runs Excel Services or PerformancePoint Services.   If this is the case  why on earth have a domain account?  Surely it’s more secure to have one less domain account to worry about, and if you have your LocalSystem account hacked I think you have bigger fish to fry …

On the Reporting Services Configuration the document recommends using Constrained Delegation to Any Authentication Protocol.  This is not necessary if you are connecting to SQL Server and to Analysis Services as the document example is doing.  You only need Constrained Delegation for Kerberos.  Trust me, try it, it works fine.  Using any authentication protocol is less secure than Kerberos Only and SSAS and SQL Server don’t understand things like claims at the moment, so it’s totally pointless.

Other than that the document whilst a weighty tome at over 200+pages, is a very good reference.  I only hope as we move forward that Microsoft manage to simplify the process so that some pages can be removed …

Cheers

Dave Mc

“User Does Not Have Permission to Perform this Action”

One of those really annoying messages which gives little or no hint as to what user is having the issue.  I saw this when using ULS Viewer to check for other issues I was having with a SharePoint farm.

IOWSTIMER.EXE (0x09A8) 0x0C20 SharePoint Foundation Database 5586 Critical
Unknown SQL Exception 297 occurred. Additional error information from SQL Server
is included below. The user does not have permission to perform this
action.

What the heck was this about?  Why was I only seeing it on one of the Web Front End Servers not all of them? how to solve it?

Well I can’t necessarily answer the second point, but it was due to the Service Account which ran the Timer Service not having sufficient permission on the SQL Server that was hosting the website Content Database.  I found the  answer in this rather obscure Technet Forum thread .  Basically you need to run the following bit of SQL code:

GRANT VIEW SERVER STATE TO [your timer account]

You will find this does in fact solve the issue. Bizarre…

Cheers

Dave Mc

PowerPivot and Reporting Services 2008 R2 SP1 Foible …

I made a bit of a mistake this week on a particular deployment I was involved in but it threw up a problem that if you do a single server deployment or a deployment of a certain topolgy you might run up against.

I installed Reporting Services 2008 R2 on a server and configured it for Integrated Mode with SharePoint 2010.  I then applied Service Pack 1 to the installlation – so far so good.

I then tried to install PowerPivot onto the same server and despite all of the SQL Server installation checks passing, once the installer got onto the business of actually doing the install it failed saying that the version of sqlncli.msi (SQL Server 2008 R2 Native Client) on the installer was not correct. Didn’t take me long to realise that SP1 had upgraded the version of Native Client and the PowerPivot installation was trying to override it.  Did seem to be any way around the issue apart from uninstall Service Pack 1 for SQL Server 2008 R2, and well done to Microsoft for allowing a rollback!

Once I uninstalled Service Pack 1, rebooted and reran the PowerPivot installation – all was good.  Moral of story, make sure you install all the SQL bits and pieces you need before you install Service Pack 1 for SQL Server 2008 R2.

Cheers

Dave Mc

 

 

Getting the Full Logging Message in SQL Server …

I needed to help a customer today to read some SQL Server Job History messages, but we were getting that awful 1024 truncation going on.  Happily there is a great fix for this here on SQL Server Central.  Basically you have to tell SQL Server to log to a table in msdb, then the full details are available.  There’s a sneaky bit of SQL to get the meaningful stuff out, I won’t spoil the original author’s thunder by posting it here.  Check out the solution for yourself.  Oh you need to register with SQL Server Central to get the full article.  FYI, the author of this blog post has NO affiliation with SQL Server Central. It’s just a great resource…

Cheers

Dave Mc

Configuring Kerberos with SQL Server

I’m putting this here, as I keep needing it!

To have SQL Server use Kerberos configuration, you need to set up two SPNs for the SQL Server Account:

setspn.exe MSSQLSvc/{NETBIOS NAME OF SQL SERVER}:{PORT NO} {SQL SERVER SERVICE ACCOUNT}
setspn.exe MSSQLSvc/{FQDN NAME OF SQL SERVER}:{PORT NO} {SQL SERVER SERVICE ACCOUNT}

Make sure that the SQL Server Service account is delegated for Kerberos in AD and so is the SQL Server itself.

Then in SSMS run the following:

SELECT auth_scheme FROM sys.dm_exec_connections WHERE session_id=@@spid

Should say ‘KERBEROS’.

Cheers

Dave Mc

SharePoint 2010 Rocks With Silverlight …

 
Is SharePoint 2010 the first Microsoft product to really rock with Silverlight? At last a product which doesn’t just use Silverlight for displaying the enevitable ‘bouncing balls’ … I was a bit gobsmacked when I clicked on the link shown below ….
 

and lo and behold, I saw the following Silverlight screen for selecting the template of the site I wanted to create. Wicked!

 

SharePoint 2010 just gets better and better!

Cheers

Dave Mc