web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / After moving CRM 2016 ...
Microsoft Dynamics CRM (Archived)

After moving CRM 2016 to a new server - all plugins fail to run (The target principal name is incorrect)

(0) ShareShare
ReportReport
Posted on by deanparkr 142

We have just moved our Dynamics CRM 2016 instance to a new server. I have configured the SPN's and they all seem to work ok except for the sandbox service.

Kerberos authentication is working fine to log users in, and reports are running ok too. But any plugin that runs in the sandbox all return:

System.Security.Authentication.AuthenticationException: Authentication failed on the remote side (the stream might still be available for additional authentication attempts). ---> System.ComponentModel.Win32Exception: The target principal name is incorrect


I have looked at the SPN settings and it is configured in what appears to be the correct format:

MSCRMSandboxService/<Machine Name>

Are there any other sandbox related SPN's that need to be set up? It seems like we are just missing the last piece of a puzzle!

*This post is locked for comments

I have the same question (0)
  • Suggested answer
    razdynamics Profile Picture
    razdynamics 17,308 User Group Leader on at

    Hi Dean, After installing CRM on a new server always test the CRM Services and Event Logs before redeploying your production CRM database, Are you able to check your CRM Server Event logs for other errors? Maybe the Async Services also and IIS etc

    Best Wishes, Raz

  • Amarsen Profile Picture
    Amarsen 55 on at

    Have you managed to resolve this issue? 

  • Suggested answer
    deanparkr Profile Picture
    deanparkr 142 on at

    Hi

    From memory it turned out to be an issue with the SPN settings on the servers running CRM.

  • Amarsen Profile Picture
    Amarsen 55 on at

    Thank you for confirming. I believe the issue I have is related to SPN settings as well.

  • Community Member Profile Picture
    Community Member on at

    we are also running into the same issue for a 3rd party solution plugin which runs under sandbox. the SPN are setup similar to pre-prod environment where the same sandbox plugin are working. The only deference between prod and pre-prod is the load balance setup. Does any one find any solution yet?

  • Suggested answer
    ALTOSHAAM Profile Picture
    ALTOSHAAM 180 on at

    Please consider verifying ALL required SPNs are in place, using the spreadsheet from this post: community.dynamics.com/.../crm-2011-service-principal-names-spn-generation-and-usage

    Although it is for CRM 2011, it is still relevant for D365 and gives the most precise SPN configuration so far.

    Most likely, you are missing SPNs for each of your frontend nodes:

    HTTP\frontend1

    HTTP\frontend1.domain.com

    HTTP\frontend2

    HTTP\frontend2.domain.com

    They should be registered to an account, that are running your CrmAppPool

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans