Configuring SharePoint 2013 for BI scenarios
Download as PPTX, PDF13 likes8,673 views
The document provides a comprehensive overview of configuring SharePoint 2013 for business intelligence scenarios, detailing the roles of user authentication, service applications, and architectural requirements for BI solutions. It discusses the transition from classic to claims authentication, outlines necessary configurations, and lists specific requirements for various BI components like Excel Services, PowerPivot, and Reporting Services. Additionally, it highlights the importance of Kerberos authentication and provides guidelines for setting up and managing these integrations effectively.
Configuring SharePoint 2013 for BI scenarios
- 1. Configuring SharePoint 2013 for BI Scenarios ROBI VONČINA, SHAREPOINT SERVER MVP KOMPAS XNET D.O.O. SHAREPOINT AND PROJECT CONFERENCE ADRIATICS 2013 ZAGREB, NOVEMBER 27-28 2013
- 2. sponsors
- 3. ROBI VONČINA MVP, MCSE, MCT • Degree in economics • Started as MS Office instructor • System administrator • I started working with SharePoint from 2003 version on • Leader of SloSPUG
- 5. The Microsoft BI framework Personal BI Team BI Organizational BI My Context Our Context The Org’s Context BI solution created by user. Context is only for user & exists as document. BI Solution created by power user. Context is for a small team & it’s managed on a server. BI Solution created by IT, Established corporate context & is reusable, scalable and backed up.
- 6. Yesterday’s challenges • User authentication • Claims vs. Classic mode • Service application architecture • Inconsistencies across BI features • Identity Delegation Authentication Service Application • Constrained delegation limitations • Kerberos • Configuration • Production Support Delegation Kerberos
- 7. Today’s opportunity • User authentication • Claims vs. Classic mode • Service application architecture • Inconsistencies across BI features • Identity Delegation • Constrained delegation limitations • Kerberos • Configuration • Production Support
- 8. What to know • Claims authentication • Claims first design • BI architecture consistency • SQL reporting services is now a service application • Kerberos RBCD • Resource based constrained delegation across domain & forest • BISM & EffectiveUsername • SQL reporting services is now a service application
- 9. Claims in SharePoint 2013 • Web applications are claims enabled by default • Classic mode authentication is now deprecated • New PowerShell commandlets to convert to claims authentication • PowerPivot, SQL reporting services, dashboard designer all work with claims enabled sites • BI service applications require windows-claims for outbound windows identity delegation • Claims-to-Windows Token Services (C2WTS) only leveraged when identity provider is Windows
- 11. Excel Services family requirements Office Pro Plus license xVelocity model enabled as required SharePoint Enterprise CAL PowerPivot add-in included, must be enabled Included on SP media PowerView and-in included, enabled as needed Requires AS SP Mode for xVelocity and Power View interactivity Deploys as service application SQL Server BI or Enterprise Deploys as SQL service on independent servers Load balancing performed by Excel Services Requires AS SP Mode and Excel Services Deploys as SP Service application
- 12. Reporting Services requirements Integrated Mode Deploys as SP service application Alerting Self service subscriptions Power View Required for BISM/Power View
- 13. PerformancePoint requirements Deploys as SP service application For analytic charts/grids
- 14. Installing SharePoint BI Components Excel Services PerformancePoint Other Stuff Reporting Services PowerPivot Analysis Services
- 15. Standard 2 server farm FE Profile Excel Services Search ……. DB SSAS SSIS SharePoint Foundation SQL Server Server OS Server OS
- 16. BI integration – 2 server farm WFE Profile Excel Services Search ……. SSRS PP DB SSAS SSIS SharePoint Foundation SQL Server Server OS Server OS
- 19. Accounts • Application Pool – DEVsp2013_app_pool • Application pool account for web applications (content) • Claims to windows token service account – DEVsp2013_c2wts • Special permissions for this account on SP box • Constrained Kerberos delagation • SharePoint BI Account – DEVsp2013_bi • Constrained Kerberos delegation
- 20. Claims to Windows Token Service $accntc2wt = Get-SPManagedAccount -Identity DEVsp2013_c2wts $farm=get-spfarm $c2wt=$farm.Services |where {$_.name -eq "c2wts"} $c2wt.ProcessIdentity.CurrentIdentityType="SpecificUser" $c2wt.ProcessIdentity.ManagedAccount=$accntc2wt $c2wt.ProcessIdentity.Update() • #Add dependency - bug cmd.exe /c "sc config c2wts depend= CryptSvc"
- 21. Claims to Windows Token Service Permissions • Local Admin • Secpol.msc
- 22. Microsoft BI light-up story for SharePoint 2013
- 23. EXCEL SERVICES
- 24. New Excel Services Application $biAppPool=Get-SPManagedAccount -Identity xnetdevsp13_bi $biApplicationPool = New-SPServiceApplicationPool -Name BI_AppPool -Account $biAppPool -Verbose #Excel $ExcelServis=Get-SPServiceInstance |where {$_.TypeName -eq "Excel Calculation Services"} if($ExcelServis.status -eq "Disabled") { $ExcelServis | Start-SPServiceInstance } while(-not($ExcelServis.status -eq "Online")) { write-host -ForegroundColor Yellow $ExcelServis.status;sleep 5; $ExcelServis=Get-SPServiceInstance |where {$_.TypeName -eq "Excel Calculation Services"} } New-SPExcelServiceApplication -Name ExcelService -ApplicationPool $biApplicationPool Verbose -Default
- 25. SETUP AND CONFIGURATION Analysis Services SharePoint mode
- 26. PowerPivot Analysis Services • Can be installed on SharePoint Server or separate server that has no SharePoint Installed • Install or Uninstall the PowerPivot for SharePoint Add-in • http://msdn.microsoft.com/en-us/library/jj218792.aspx
- 29. Instance name must be PowerPivot
- 32. SETUP AND CONFIGURATION Reporting Services SharePoint mode
- 33. Reporting Services 2012 Architecture • SSRS is now a SharePoint service application • WFE use the SA proxy to communicate with SSRS SA machine instances • You must have the C2WTS running on each machine instance running SSRS
- 37. Create new SSRS Service Application $ssrs=get-spserviceinstance -all |where {$_.TypeName -like "SQL Server Reporting*"} | Start-SPServiceInstance $biappPool=Get-SPServiceApplicationPool Identity bi_apppool $ssrssa=New-SPRSServiceApplication -Name SSRS_Service -ApplicationPool $biappPool DatabaseName SP13_SA_SA_SSRS -DatabaseServer LSQL -Verbose New-SPRSServiceApplicationProxy -Name SSRS_Proxy -ServiceApplication $ssrssa
- 38. Change authentication type "C:Program FilesCommon Filesmicrosoft sharedWeb Server Extensions15WebServicesReportingrsreportserver.config„ • Enable Kerberos Auth <Authentication> <AuthenticationTypes> <RSWindowsNegotiate /> </AuthenticationTypes> <EnableAuthPersistence>true</EnableAuthPersistence> </Authentication> • IISRESET
- 40. Content Types
- 41. SETUP AND CONFIGURATION PowerPivot for SharePoint
- 42. spPowerPivot.msi • Install on all SharePoint Servers in farm Download Microsoft® SQL Server® 2012 SP1 PowerPivot® for Microsoft® SharePoint® from Official Microsoft Download Center http://www.microsoft.com/en-us/download/details.aspx?id=35577
- 51. Permissions
- 53. $w = Get-SPWebApplication -Identity http://NTKBI $w.GrantAccessToProcessIdentity("devsp2013_bi")
- 54. Using PowerPivot Gallery • Use PowerPivot Gallery • http://technet.microsoft.com/en-us/library/ee637435.aspx#icons
- 56. POWERVIEW Demo
- 58. New PerformancePoint Service Application $ppsServis=Get-SPServiceInstance |where {$_.TypeName -eq "PerformancePoint Service"} if($ppsServis.status -eq "Disabled") { $ppsServis | Start-SPServiceInstance } while(-not($ppsServis.status -eq "Online")) { write-host -ForegroundColor Yellow $ppsServis.status;sleep 5; $ppsServis=Get-SPServiceInstance |where {$_.TypeName -eq "PerformancePoint Service"} } $pps=New-SPPerformancePointServiceApplication -name PerformancePoint_Service -ApplicationPool $biApplicationPool DatabaseName "SP13_SA_PerformancePoint" -Verbose New-SPPerformancePointServiceApplicationProxy -Name PerformancePoint_proxy -ServiceApplication $pps -Default -Verbose
- 60. Install update • Microsoft SQL Server 2008 Analysis Services ADOMD.NET • http://go.microsoft.com/fwlink/p/?linkid=160390
- 61. SCALING
- 62. Single server with BI FE Profile Indexer Search Metadata Excel Services …. SSRS SharePoint Foundation SQL Server Server OS PP
- 63. 2 server farm with BI WFE Profile Excel Services Search ……. SSRS PP DB SSAS SSIS SharePoint Foundation SQL Server Server OS Server OS
- 64. Separate roles Profile Excel Service s FE Search ……. SSRS Analysis Services – SharePoint Mode PP SharePoint Foundation SharePoint Foundation Server OS Server OS DB SSA S SQL Server Server OS SSIS SQL Server Server OS
- 65. BI integration – mixed roles FE Profile Crawl Metadata Excel Services SSRS PP SSS SharePoint Foundation Server OS Search SharePoint Foundation SQL Server Server OS DB SSA S Analysis Services – SharePoint Mode SSIS SQL Server Server OS Server OS
- 66. Scaling the BI Services Reporting Services Add Reporting Services – SharePoint to all application servers Add Reporting Services Add-In to all front end servers (+) xVelocity/Analysis Services/PowerPivot Install on standalone server for AS/SP Install on application server for both Separate PowerPivot Add-in available as a download (SQL Feature Pack) http://www.microsoft.com/en-us/download/details.aspx?id=34702
- 67. AUTHENTICATION
- 68. SharePoint service applications Web Application Service Application Proxy Machine Instance Application Servers (machine instance) Service Instance C2WTS WF E All BI applications are SharePoint service applications
- 70. The Claims to Windows Token Service (C2WTS) UPN
- 71. C2WTS Service SSRS Example C2WTS S4U Logon SAML Kerb AD SSRS SAML Kerb Claims Bob Kerberos SAML Windows Claims WFE APP SQL
- 72. C2WTS Implications on Windows 2008 Act as operating system Requires Constrained Delegation
- 73. Kerberos • Use DNS A records for SharePoint portal • Alias/CName does not work
- 74. Kerberos • Create SPNs SETSPN SETSPN SETSPN SETSPN SETSPN -S -S -S -S -S MSSQLSvc/L-SQL.dev.local:1433 devsql_admin MSSQLSvc/L-SQL:1433 devsql_admin MSSQLSvc/L-SQL.dev.local devsql_admin MSOLAPSvc.3/L-SQL.dev.local devsql_analysis MSOLAPSvc.3/L-SQL devsql_analysis SETSPN -Q HTTP/NTKBI SETSPN -L devsp2013_app_pool SETSPN -S HTTP/NTKBI devsp2013_app_pool SETSPN -S HTTP/NTKBI.dev.local devsp2013_app_pool SETSPN -S SPBI/C2WTS devsp2013_c2wts SETSPN -S SPBI/BI devsp2013_BI SETSPN -X
- 75. Kerberos • Set up delegation for NTKBI app pool
- 77. Kerberos • Verify SharePoint connects to SQL with Kerberos Select s.session_id, s.login_name, s.host_name, c.auth_scheme, c.connect_time from sys.dm_exec_connections c inner join sys.dm_exec_sessions s on c.session_id = s.session_id ORDER BY c.connect_time DESC
- 78. Kerberos • Verify Kerberos on Windows client using • Klist • Klist purge
- 79. Configure Kerberos for PPS, Excel, Visio, C2WT
- 81. KERBEROS DEMO
- 82. Windows 2012 Kerberos Improvements Large Tickets Claims FAST Armoring RBCD SetSPN And More… KDC Proxy KDC Events Operations Logs Performance Counters http://technet.microsoft.com/en-us/library/hh831747.aspx
- 83. “EffectiveUserName” • EffectiveUserName • Analysis Services Feature • Pass EffectiveUserName in connection (security context) • Requires caller have Admin rights in Analysis Services • RSDS Implements EffectiveUserName
- 84. BI Semantic Model (BISM) BIS M
- 85. Health Analyzer • Good Tool, but too many false positives • PowerPivot has special rules • Correct the real problems, disable the others • How to • http://whitepages.unlimitedviz.com/2012/06/the-health-analyzer-andpowerpivot-for-sharepoint/
- 86. Office Web Apps • New-SPWOPISuppressionSetting • http://technet.microsoft.com/en-us/library/jj219443.aspx
- 87. questions?
- 88. thank you. SHAREPOINT AND PROJECT CONFERENCE ADRIATICS 2013 ZAGREB, NOVEMBER 27-28 2013
Editor's Notes
- #13: The xVelocity in-memory analytics engine is the next generation of the VertiPaq™ engine that was introduced in SQL Server 2008 R2, with PowerPivot for Excel 2010 and PowerPivot for SharePoint 2010. Vertipaq™ is an in-memory columnstore engine that achieves breakthrough performance for analytic queries by employing techniques such as columnar storage, state-of-the-art compression, in-memory caching and highly parallel data scanning and aggregation algorithms. In SQL Server 2012, the xVelocity in-memory analytics engine has been enhanced to support both self-service BI (PowerPivot) as well as corporate BI (Analysis Services tabular mode) scenarios.The xVelocity engine has two usage scenarios in the context of Business Intelligence:Information workers can use PowerPivot for Excel to integrate data from a number of sources, cleanse and model the data, enrich the data with business logic, analyze the data and build reports and visualizations. Since PowerPivot uses the xVelocity engine under the covers, information workers are not limited by the restrictions of Excel. They can work with several millions of rows of data and still benefit from split-second response times.BI developers and IT professionals can use SQL Server Data Tools to create an Analysis Services Tabular project and build a BI Semantic Model. The model can contain data from a number of sources, business logic expressed in the form of DAX calculations, role-based security and large data volumes that can be managed using partitions in the xVelocity engine. When the model is deployed to an Analysis Services server, information workers can use tools like Excel and Power View to interact with the model and achieve split-second response times from the xVelocity engine.