Hello everybody,
I install SQL Report 2012 into a failover farm of servers to store databases and jobs dedicated to the datawarehouse (call it SQL-DWH). As SSIS cannot manage the failover, I install SSRS and SSIS on in another machine (SQL-REPORT).
At the end, I have job into SQL-DWH and SSIS packages on SQL-REPORT.
Finally, the package select data into a third instance (SQL-DATA).
When I validate the job on SQL-REPORT everything is fine and I can execute it without problem. But when I execute it from SQL-DWH I have security issue by trying to connect to SQL-DATA as an anonymous user (Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON') instead of delegate the authorization even if the step is configure to run as a proxy who is a SQL Server login. All settings related to kerberos and SPN have been check and it seems to be OK when we validate and execute the job from the server which run the instance containing the SSIS packages.
My question is simple: is it possible to schedule a job from another server than the instance which contains SSIS packages executed by this job? If yes, can the SSIS server delegate the autorization received from another server to a third server? What can I check to be sure that kerberos is use in whole the chain?
Thanks for your help
Edit : I forgot an important info, all services are running logged to the same user who is sysadmin into the 3 instances.