I am trying to access an AS DB from outside the domain. I'm using the https://.../msmdpump.dll to specify the server name. Is there a way to qualify the specific AS DB in the supplied server name? Excel allows for both Windows authentication as well as providing username and password, which seems to be a mistake - it appears it uses the same dialog box in creating a connection to AS and DB, so provides the ability to pass l/p. Can I provide a valid Domain login in these fields for connecting to AS? My machine is of course in a different domain then AS - is there a way to pass the remote domains credentials from this machine?
Thanks
If the laptop conaining Excel 2007 is not on the same domain as SSAS or the msmdpump.dll web server, then I would suggest one of two options:
1. Launch Excel with the runas command:
Code Block
C:\WINDOWS\system32\runas.exe /net /user:SSASDomain\username "C:\program files\Microsoft Office\Office12\EXCEL.EXE"Then connect with "Use Windows Authentication" in Excel.
2. If that's not an acceptable solution, then enable basic security on the msmdpump virtual directory (which is still secure because you're using HTTPS) and connect using "Use the following User Name and Password" in Excel. Note that their password will be stored in the xlsx in clear text and on disk elsewhere on their computer. And if these users can publish to Excel Services, there will be a bunch of other complexities to worry about. (If Excel Services publishing is needed for these users, I would suggest you have them submit their xlsx files to internal IT who can remove the basic security and flip the connections over to Integrated Security before publishing to Excel Services.)
If msmdpump.dll is not on the same server as SSAS, you may have troubles getting #1 to work since Kerberos delegation across domains starting with a connection in Excel isn't possible that I know of. But #2 should work.
As for specifying the database, I believe that is configured on the next screen in the connection wizard in Excel 2007. If you meant "can msmdpump.dll point to several servers?" I think the answer is no. There's a msmdpump.ini which controls which SSAS server it connects to. But you can certainly deploy multiple msmdpump.dll virtual directories.
Keep us posted with your progress or with other lessons learned if you run into some gotchas. Hope the above helps.
No comments:
Post a Comment