Answer:
A server securely authenticates a user when they start a session. This could be upon the access to the website of the portal. It is not considered secure to allow servers to then request data from another server by impersonating the user authentication. This is known as the Double Hop authentication security issue and is only securely solved by implementing a Kerberos protocol to pass an original user authentication onto additional servers (such as the OLAP cube server). This is not needed if the data cubes reside on the same server as the portal and excel services processes, as is recommended with the initial hardware architecture. Note that Kerberos authentication is simply a set of software configuration steps within the data mart servers and the Active Directory server.
| |
|
|
