Share
Report
10
Hi to all,
I am new in my company and I have to start dealing with CRM.
We had CRM 3 running along with SQL 2005 on the same machine.
Then in the beginning of 2011 we hired a consultant to migrate the DB to a standalone SQL Server (2008R2) and upgraded CRM to 4.0 (with lot of custom WFs)
Now I have to develop some new staff in CRM,
I started by trying to replicate the CRM and SQL Servers on VMs, they work fine except that the reports run locally (on the CRM VM installation) but when trying from outside (another machine) I have 401 error. (after checking on the Prod server it seems that we have the same problem and nobody knew about it. The consulting was unable to fixe it : so I have to do it) :)
I have to fix the VMs before.
In the CRM log : this was related to kerberos with EventID=4. (The kerberos client received a KRB_AP_ERR_MODIFIED error from the server ....)
After digging into it I found out that I had to configure the SPNs.
I tried the to follow the procedure on "Additional Setup Tasks When Microsoft SQL Server Reporting Services Is Installed on a Separate Server from Microsoft Dynamics CRM 3.0 or Microsoft SQL Server " (Path B)
-changed the CRMAppPool to a new domain user (in stead of Network service)
- added the SPNs to this user with ADSIedit
-retarted the servers
But, I cannot not have it work : I get the same error
When I check the SPNs on the CRM and SQL Servers , I get the following :
setspn -L crm-server
Registered ServicePrincipalNames for CN=CRM-SERVER,CN=Computers,DC=<mydomain>
MSSQLSvc/crm-server.<mydomain>:1433
HOST/CRM-SERVER
HOST/crm-server.<mydomain>.com
setspn -L testopal-sql
Registered ServicePrincipalNames for CN=TESTOPAL-SQL,CN=Computers,DC=<mydomain>
MSSQLSvc/Test-SQL.<mydomain>:1433
MSSQLSvc/Test-SQL.<mydomain>.com
TERMSRV/TEST-SQL
TERMSRV/Test-SQL.<mydomain>
WSMAN/Test-SQL.<mydomain>
RestrictedKrbHost/Test-SQL.<mydomain>
HOST/Test-SQL.<mydomain>
WSMAN/TES-SQL
RestrictedKrbHost/TEST-SQL
HOST/TEST-SQL
I think I have multiple SPNs on the computers, but I have added the SPNs only for the domain user refrencing only the CRM server (test server I mean).
I don't understand where all those SPNs come from for the SQL server.
Which entries should I delete ?
If there is any other suggestion I am taking it :)
BTW, I get this on the PROD servers :
setspn -L be-sql
Registered ServicePrincipalNames for CN=BE-SQL,CN=Computers,DC=<mydomain>
TERMSRV/BE-SQL
WSMAN/BE-SQL. <mydomain>
WSMAN/BE-SQL
RestrictedKrbHost/BE-SQL
HOST/BE-SQL
RestrictedKrbHost/BE-SQL.<mydomain>
HOST/BE-SQL .<mydomain>
setspn -L apps-crm
Registered ServicePrincipalNames for CN= APPS-CRM,CN=Computers,DC=<mydomain>
MSSQLSvc/APPS-CRM. <mydomain>:1433
SMTPSVC/ APPS-CRM
SMTPSVC/ APPS-CRM. <mydomain>
HOST/ APPS-CRM
HOST/ APPS-CRM. <mydomain>
Thanks in advance
*This post is locked for comments
I have the same question (0)
All responses (
Answers (
