LogonThe cross-domain authentication of SSAS has never been a problem, because SSAS ' rights control is based on the role created by Windows users, so there is a principle problem with service-side authentication, and it is easy for many novices to confuse the problem that authorized users must be server-side users that the SSAS server can identify. Instead of your access to the client users, so the official encouragement is the server and the client in the same domain, the server can be very convenient to the domain name authorization, and many cases in reality is the server and the client is not in the same domain, or even both are not in any domain, then the mainstream solution has the following ( Only scenarios for Excel clients are discussed here:
- Netonly runas, the principle is that the service-side account credential information is written to Startupinfo before the Excel process is created, and then the Excel process can access SSAS as a server user. The disadvantage is that each time the user creates a new Excel file, a netonly runas login authentication is required, and when you double-click to open an existing Excel report, you will find that you cannot modify the Update pivot table because the Excel process is not authorized at this time. In terms of the user experience is really patience, interested can refer to
Https://technet.microsoft.com/en-us/sysinternals/cc300361.aspx
2. Configure the client Windows user Password and the SSAS server user password consistent, in order to achieve the purpose of spoofing the server to complete authentication, this scheme seems to be a perfect solution to the problem of the previous solution, can fully configure user rights, the end user does not need to verify the identity every time, However, the actual production environment will cause some unnecessary trouble, such as the client user modified the password, resulting in a user with the same name as the server password inconsistent, then the access rights are terminated
3. HTTP mode access, if the configured Web server is anonymous authentication, there is no permission to control, all access to the client's permissions are the same; If you are configuring Basic authentication (It seems that you can only use basic instead of Windows authentication when you don't have a domain environment), you're not too secure.
4. Excel Client Access to SSAS, in addition to the above scenarios, but also support direct access, you need to open the server port 2383 (the default SSAS port) to the client access, The default Access wizard enters the service-side account password to the last step when you create a new PivotTable, the transport layer exception is reported because this step loses the account password information.
Xpivot plug-in support all the above login authentication method, the following first step, configure the data source "source Config"
Open the data source configuration you will see the following configuration information as a set of data sources, if you need to configure multiple sets of data sources, please use a vertical bar | Delimited, submit the configuration will be in the above drop-down box listing all the data source groups
Cube=adventure Works; This configuration must be the name of the cube, see highlights
Cube Data source=.; This configuration is cube's data source, if it is in the same domain or the fourth access mode only need to configure IP, if it is HTTP access, it needs to be configured as the full Http://....msmdpump.dll path
Cube Initial Catalog=adventureworksdw2012multidimensional-se; This configuration is the SSAS DB instance name, see the database name under databases
Cube Integrated Security=sspi; This configuration is optional, if set, Xpivot ignores login account information and accesses the SSAS directly using the current Windows user
DW Data source=.; The following configuration items are optional, configuration is the DW database connection information, if not configured, can only access the SSAS Cube, Xpivot and DW-related functions are invalid
DW Initial catalog=adventureworksdw2012;
DW Integrated Security=sspi; This configuration item is optional, if not set, you must first log in to Xpiovt to use the DW-related features, it is important to note that if cube Integrated security and DW Integrated security are not set, In order for the identity of the login Xpivot to be able to access the DW and cube successfully, the cube and DW must be configured on the server side using the same account password, except that the former is a Windows user, which is a DB user
Xpivot Landing window is very simple, enter the account password, account name if it is a domain name, you need to enter the full domain name, for example: Domainname\domainuser, the figure shown in the Test1 is a Windows user, so after landing will be in the Xpivot The logon button displays the. \test1 account information, the login window permanently Bind to computer option box if you select the login again, Xpivot will remember this account identity, and at any time on the same computer to open Excel, Will default to use this account identity to access the server, if the login is not checked this box, the identity of the login life cycle is just the current open Excel, close the Excel workbook, this identity will disappear, for temporary switch identity permissions
ShareClick the Share button to open a custom task pane, as shown, the first row of the public disk path can be manually entered and enter the confirmation, you can also click on the right button to navigate to a specific folder path, and then automatically in the following tree form to show all folders and Excel files in this directory.
The right-click menu appears when you right-click a folder or Excel report file
The following is a description of the relevant functions of the context menu:
New folder creates a subfolder that is available only when you right-click a folder, under the currently selected folder
Open file: Excel opens the selected Excel report file
Save file: If you right-click on a folder, the current Excel document will be saved in this folder, and if an Excel file is selected, the current Excel document will be overwritten with the selected Excel document
"Rename" Rename: Can rename folder or Excel file
"Copy Path" copy path: can copy folder or Excel file of the public disk path, for email sharing to colleagues