Hi to all,
I've an environment that includes 3 machines: the sp2010 frontend (W2K8 R2), the sp2010 backend (SQL2008 R2), the analysis services backend (SQL2008 R2).
I've successfully setup my environment with Kerberos constrained delegation and the entire thing works fine with both performancepoint and excel services (the requirement was to pass the user's domain identity to the analysis backend): thanks to the
excellent SP2010 Kerberos Guide.
Now I've extended this portal to the Extranet zone, assigned it a new host header and upgraded my SPNs to include the new fqdn and also added it to the necessary accounts in Active Directory.
In the intranet environment everything is fine. I've published the Sharepoint site to the external network onto the ISA 2006 and setup the Kerberos constrained delegation from the isa computer account to the Sharepoint SPN.
So here is the point: I can correctly access the Sharepoint site from external with Kerberos authentication, performancepoint is fine but I cannot open excel workbooks from this zone, I already trusted both the file and the data connection locations with
the external fqdn but still no luck. Even the sample workbook does not open. The error is "error while trying to execute the requested action. Retry".
Anyone has any hint on the possible causes?
View Complete Post