Kerberos Diagnostic Tool
The Kerberos diagnostic tool can be used to find and fix Kerberos issues that cause the data sources to be unavailable and login failures (usually when using Windows Authentication).
To get to the Kerberos Diagnostic tool, add "/kerberos" to the end of the Pyramid URL (for example: https://www.pyramid.bi/kerberos)
This will get you to the front-end diagnostic tool. Most of the information on this page is easy to understand, there are also explanations for each section. Pay special attention to the “Has a valid SPN?” section, it lists all available SPNs for the Pyramid web server. In case the correct SPN does not exist, a red warning icon will appear. To fix this, you will need to manually add the SPN. For more information on adding SPNs, please go here.
To check the kerberos setting for the SSAS, click on “add backend”, now you will need to enter the server details:
- in Remote Address fill in the host name of the SSAS
- in Service select “SSAS Server”
- in Service Account, select the user that is running the SSAS service (You can find that out by double opening the services window and clicking on the “SQL Server Analysis Services” > Log On tab).
Once you've filled in the form, click on Submit.
In the Backend Server section under “Has a valid SPN?” you will see all available SPNs for the SSAS. In case the correct SPN does not exist, a red warning icon will appear. To fix this, you will need to manually add the SPN. For more information on adding SPNs, please go here.