You’re offline. This is a read only version of the page.
5
We just created CRM 2016 prem site, migrated from 2015 CRM to new site, put dev URL and certificate, everything worked.
Then we changed to production certificate, URL. Also updated DNS.
After change, CRM 2016 site is not working with Kerberos authentication.
After 3 login fails, some users got 401 error.
The server is 2012R2, IIS is version 8.
IIS CRM site https(443)
Application pool: CRMAppPool (.Net 4.0 integrated, NetworkService identity)
'.NET Authorization Rules' set "Allow all users"
In IIS, I set window authentication provider NTLM on top of Negotiate, the site is mostly working (email couldn't send out), but Outlook client won't work with NTLM authentication.
We tried add SPNs, that makes situation worse.
Server 'IE Enhanced Security' set off - no use.
Windows Authentication useAppPoolCredentials set True -- no use.
increased value for:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP\Parameters\
MaxFieldLength
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP\Parameters\
MaxRequestBytes
no use
If the site is rebind to dev url, everything works again.
*This post is locked for comments
I have the same question (0)
Hi JYZ,
These articles might be helpful.
Share
Report
All responses (
Answers (
