web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Microsoft Dynamics CRM (Archived)

CRM 4 Kerberos EventId=4, SPNs

(0) ShareShare
ReportReport
Posted on by 10

Hi to all,

I am new in my company and I have to start dealing with CRM.

We had CRM 3 running along with SQL 2005 on the same machine.

Then in the beginning of 2011 we hired a consultant to migrate the DB to a standalone SQL Server (2008R2) and upgraded CRM to 4.0 (with lot of custom WFs)

Now I have to develop some new staff in CRM,

I started by trying to replicate the CRM and SQL Servers on VMs, they work fine except that the reports run locally (on the CRM VM installation) but when trying from outside (another machine) I have 401 error.  (after checking on the Prod server it seems that we have the same problem and nobody knew about it. The consulting was unable to fixe it : so I have to do it) :)

I have to fix the VMs before.

In the CRM log : this was related to kerberos with EventID=4. (The kerberos client received a KRB_AP_ERR_MODIFIED error from the server ....)

After digging into it I found out that I had to configure the SPNs.
I tried the to follow the procedure on  "Additional Setup Tasks When Microsoft SQL Server Reporting Services Is Installed on a Separate Server from Microsoft Dynamics CRM 3.0 or Microsoft SQL Server " (Path B)

-changed the CRMAppPool to a new domain user (in stead of Network service)

- added the SPNs to this user with ADSIedit

-retarted the servers

But, I cannot not have it work : I get the same error

When I check the SPNs on the CRM and SQL Servers , I get the following :

 

 

setspn -L crm-server

Registered ServicePrincipalNames for CN=CRM-SERVER,CN=Computers,DC=<mydomain>

    MSSQLSvc/crm-server.<mydomain>:1433

    HOST/CRM-SERVER

    HOST/crm-server.<mydomain>.com

 

setspn -L testopal-sql

Registered ServicePrincipalNames for CN=TESTOPAL-SQL,CN=Computers,DC=<mydomain>

    MSSQLSvc/Test-SQL.<mydomain>:1433

    MSSQLSvc/Test-SQL.<mydomain>.com

    TERMSRV/TEST-SQL

    TERMSRV/Test-SQL.<mydomain>

    WSMAN/Test-SQL.<mydomain>

    RestrictedKrbHost/Test-SQL.<mydomain>

    HOST/Test-SQL.<mydomain>

    WSMAN/TES-SQL

    RestrictedKrbHost/TEST-SQL

    HOST/TEST-SQL

 

I think I have multiple SPNs on the computers, but I have added the SPNs only for the domain user refrencing only the CRM server (test server I mean). 

I don't understand where all those SPNs come from for the SQL server.

Which entries should I delete ?

If there is any other  suggestion  I am taking it :)

 

BTW,  I get this  on the PROD servers :

 

 

setspn -L be-sql

Registered ServicePrincipalNames for CN=BE-SQL,CN=Computers,DC=<mydomain>

TERMSRV/BE-SQL

    WSMAN/BE-SQL. <mydomain>

    WSMAN/BE-SQL

    RestrictedKrbHost/BE-SQL

    HOST/BE-SQL

    RestrictedKrbHost/BE-SQL.<mydomain>

    HOST/BE-SQL .<mydomain>

 

setspn -L apps-crm

Registered ServicePrincipalNames for CN= APPS-CRM,CN=Computers,DC=<mydomain>

    MSSQLSvc/APPS-CRM. <mydomain>:1433

    SMTPSVC/ APPS-CRM

    SMTPSVC/ APPS-CRM. <mydomain>

    HOST/ APPS-CRM

    HOST/ APPS-CRM. <mydomain>

 

Thanks in advance

 

 

*This post is locked for comments

I have the same question (0)
  • Xheo Profile Picture
    10 on at

    Hi,

    Is there any hint  about this issue?

    thanks

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans