Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.

Reply
Anonymous
Not applicable

impersonation 'Identification' is incorrect

impersonation 'Identification' is incorrect, should be 'Impersonation'; This is the message in the GatewayErrors.log with a datasource configured to use 'SSO via kerberos for directquery queries'

1 ACCEPTED SOLUTION
Anonymous
Not applicable

look no further, I found the solution:

 

For the delegation settings on the gateway service account,

Check 'Trust this user for delegation to specified services only'

And not 'Use Kerberos only' but 'Use any authentication protocol'

View solution in original post

4 REPLIES 4
v-yuezhe-msft
Employee
Employee

@Anonymous,

Do you connect to SQL Server in Power BI Desktop? What is your gateway service account and SQL Server service account? 

Please make sure that you have configured all steps following the guide in "Configuring Kerberos Constrained Delegation for the gateway and data source" section of this article.



Regards,
Lydia

Community Support Team _ Lydia Zhang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Anonymous
Not applicable

Thank you for your interest in my problem
 
Guy

 

 

 

I installed Network Monitor on the Server where the Gateway is and I receive the 2 messages in my Traffic:
 
KerberosV5: As Request Cname: u99gdc@acv-csc.be Realm: ACV-CSC.ACV-CSC-PRIV.be  Sname: krbtgt\ACV-CSC.ACV-CSC-PRIV.BE
KerberosV5: KRB_Error - KDC_ERR_PREAUTH_REQUIRED (25)

 

@Anonymous,

As per this blog KDC_ERR_PREAUTH_REQUIRED does not indicate there is a problem at all. Do you use SQL Server data source? Have you configured all the required settings?

Regards,
Lydia

Community Support Team _ Lydia Zhang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Anonymous
Not applicable

look no further, I found the solution:

 

For the delegation settings on the gateway service account,

Check 'Trust this user for delegation to specified services only'

And not 'Use Kerberos only' but 'Use any authentication protocol'

Helpful resources

Announcements
Microsoft Fabric Learn Together

Microsoft Fabric Learn Together

Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City

PBI_APRIL_CAROUSEL1

Power BI Monthly Update - April 2024

Check out the April 2024 Power BI update to learn about new features.

April Fabric Community Update

Fabric Community Update - April 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors
Top Kudoed Authors