You’re offline. This is a read only version of the page.
Hello,
If you press Test Connection in the classic Outlook Add-In you may receive the following error:
HTTP-Status 401: Unauthorized.
If you look up for an error in the event log file, you will see the following error:
Event ID: 4
Source: Security-Kerberos
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server xx. The target name used was HTTP/servername.domainname. This indicates that the target server failed to decrypt the ticket provided by the client.
Resolution: add the following two SPN's on the service tier account via ADIEDIT or via setspn tool:
HTTP/FullyQualifiedDomainNameOfNavWebServiceServer
HTTP/NameOfNavWebServiceServer"
The error itself is discussed here:
It will redirect you to the following page:
https://docs.microsoft.com/en-us/dynamics-nav/walkthrough--installing-the-three-tiers-on-three-computers
But the missing SPN is not documented there. CSS created a very old blog posting to list this requirements.
https://blogs.msdn.microsoft.com/nav/2009/01/16/nav-2009-web-services-on-a-three-machine-setup/
Hopefully with this forum posting, you will be able to setup things without error messages. This is really something that pops up on a regular base within CSS, this could be two times a year and then everyone needs to lookup that old blog posting again for the correct format!
Thank you.
*This post is locked for comments
I have the same question (0)
Share
Report
All responses (
Answers (
