KNOWLEDGE BASE

Error "The call to the function LsaLogonUser failed" When Viewing Workbooks with Kerberos Delegation


Published: 07 Apr 2015
Last Modified Date: 30 Aug 2016

Issue

After publishing a MS SQL Server or MSAS-based workbook to Tableau Server with Viewer Credentials, the following error occurs when attempting to load the view:

com.tableausoftware.nativeapi.dll.TableauException: The call to the function LsaLogonUser failed.
Unable to connect to the server. Check that the server is running and that you have access privileges to the requested database.
Errors occurred while trying to load the workbook "<workbook>". The load was not able to complete successfully.

Environment

  • Tableau Server 8.3 and newer
  • MSAS or MS SQL Server
  • Kerberos

Resolution

  • Work with your Active Directory Domain Administrator to ensure that the Tableau Server Run As User has permissions to read the client object of the Active Directory User accessing the workbook.
  • If the users affected are in a different domain, verify they are logging on using the domain nickname configured in Tableau and/or update the domain nickname.

Cause

  • The Tableau Server Run As user account does not have permissions in Active Directory to read the workbook user's client object.
  • The domain nickname configured in Tableau does not match what the user is logging on with.
Did this article resolve the issue?