I have had several cases where a customer will have Kerberos properly configured but refresh in the browser fails.
In the UI, the error will appear.
"Unable to get the required information about this cube. The cube might have been reorganized or changed on the server. The PivotTable was not refreshed."
IMPORTANT: I have also seen just a straight “Data Refresh Failed” error:
There are a variety of places you can look to see if this is indeed an error with the kerberos.dll.
You can test a .udl to the datasource from the server running Excel Services.
*Since the OS is 64 bit, you will need to call it a certain way (see below):
On the server you are running Excel Calculation Services on please perform the following:
1. Right click on your desktop (or wherever you are having the problem) and create a new text doc.
2. Rename it to .udl (make sure you do NOT have on "hide known extensions") Save > Close > Place this on the Root of C:. Execute the command below from a command line or Start/Run: C:\Windows\syswow64\rundll32.exe "C:\Program Files (x86)\Common Files\System\Ole DB\oledb32.dll",OpenDSLFile C:\test.udl
3. Double click, choose Microsoft OLE DB Provider for Analysis Services 10.0 on the first tab (Provider).
4. On the 2nd tab (Connection) enter the AS Server name (or AS servername\instance for a named instance) in the Data Source box. Leave Location empty. For the server name enter the shortname/netbios name.
5. On the 2nd tab (Connection) choose "Use Windows NT Integrated security".
6. On the 2nd tab (Connection) choose the button "Test Connection".
7. If it fails, do a control-C and a cut/paste of the exact error and send it to me.
8. Now go to the 4th tab (All) and scroll down to highlight SSPI. Click on "Edit Value" and enter Kerberos as the Property Value.
9. Go back to the 2nd tab (Connection) and choose "Test Connection".
If you see the error, "Test connection failed because of an error in initializing provider. The following system error occurred: The function requested is not supported.", you need to upgrade the kerberos.dll (see KB 969083).
You can look in the ULS logs.
If you see the below error in the ULS Logs, you need to upgrade the kerberos.dll (see KB 969083).
54:58.9
w3wp.exe
(0x0274)
0x1018
Excel Services
Application
External Data
6k27
Medium
OLEDBConnection::InitConnection: The following system error occurred: The function requested is not supported.
ef3848b3-7281-49e7-b801-70398b90f4ec
You can look in Event Viewer:
If you see the error KDC_ERR_ETYPE_NOTSUPP in the Event Viewer, you need to upgrade the kerberos.dll (see KB 969083).
You can look in a Network Trace.
If you see the error NT Status: STATUS_NOT_SUPPORTED in a Network Trace, you need to upgrade the kerberos.dll (see KB 969083).
To resolve this apply the Hotfix in this KB:
A Kerberos authentication fails together with theerror code 0X80090302 or 0x8009030f on a computer that is running Windows Server 2008 or Windows Vista when the AES algorithm is used
http://support.microsoft.com/kb/969083
A real easy thing to do is look at the Kerberos.dll in C:\Windows\System32\kerberos.dll
C:\Windows\System32\kerberos.dll > right click > Properties > Details
It needs to be at least 6.0.6002.22138.
If it is not, apply the Hotfix.