Hi All,
I recently lost one of our servers and had to build a Microsoft Nav server from scratch. I have 3tiers on 3 computers. I have my Database tier, My NavSvr tier and My client tier. Currently on my new NavSvr I have Nav classic client and RTC working fine and connecting to the database, on my Client tier I have classic Client working fine but RTC is throwing me Various Errors. I am prettu sure I have narrowed this down to SPN and delegation issues but this is where I am stuck. As far as I am aware I have used the SetSpn CMD on my domain Controller correctly but obviously I haven't as it should work. Any advice would be greatly appreciated.
My Eventviewer is throwing this error "The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server database_admin. The target name used was host/navsvr. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server."
It is wirth pointing out that I changed the SPN recently and now instead to failing instantly with "cannot login to sql on the database" error it now attempts to load for maybe 2 minutes failing on "A call to sspi-see inner exception"
I hope I have made this somewhat clear.
Thanks Again
Niall
*This post is locked for comments
Check this link and make sure all the SPN's are correct
blogs.msdn.microsoft.com/.../troubleshooting-multi-machine-installations-of-nav-2009
Perhaps this can be helpful: support.microsoft.com/.../kerberos-service-principal-name-on-wrong-account
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,240 Super User 2024 Season 2
Martin Dráb 230,149 Most Valuable Professional
nmaenpaa 101,156