web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Small and medium business | Business Central, N...
Suggested Answer

Windows authentication failure

(0) ShareShare
ReportReport
Posted on by 10

Hello guys,

WIndows authentication method was actually working many years, but suddenly without any change it is not working anymore. Can somebody check what might this message indicate?

SPN exists, IIS server has delegated rights, application server is listening on the 7146 port, service is running

Username auth and navuser pw over the same database and same ports is working properly.

Also since there is not problem only with BC, but with NAV2018 and 2017 - with same kind of error - i am a bit lost what might gone wrong.

Error accessing Website
Type: Microsoft.Dynamics.Nav.Types.NavServerNotFoundException
Message: The remote server did not satisfy the mutual authentication requirement.A server was not found at "net.tcp://dfcz-bvnhdwbc01:7146/DFDSE_BC180DE_DEV11/Service". Either the URL is incorrect or the server is currently not available.
StackTrace:
   at Microsoft.Dynamics.Nav.Client.ConnectionEstablisher.ReportConnectFailed(ConnectFailedEventArgs connectFailedArgs, Exception exception) in s:\repo\src\Platform\Client\Shared\Prod.Client.ServiceConnection\ConnectionEstablisher.cs:line 603
   at Microsoft.Dynamics.Nav.Client.ConnectionEstablisher.TestSpnSettings(ConnectFailedEventArgs connectFailedArgs) in s:\repo\src\Platform\Client\Shared\Prod.Client.ServiceConnection\ConnectionEstablisher.cs:line 799
   at Microsoft.Dynamics.Nav.Client.ConnectionEstablisher.OpenConnection[TChannel](ConnectionRequest connectionRequest, ConnectionOptions connectionOptions, UserSettings& userSettings) in s:\repo\src\Platform\Client\Shared\Prod.Client.ServiceConnection\ConnectionEstablisher.cs:line 202
   at Microsoft.Dynamics.Nav.Client.ServiceConnection.OpenConnection() in s:\repo\src\Platform\Client\Shared\Prod.Client.ServiceConnection\ServiceConnection.cs:line 835
   at Microsoft.Dynamics.Nav.Client.ServiceConnection.Initialize() in s:\repo\src\Platform\Client\Shared\Prod.Client.ServiceConnection\ServiceConnection.cs:line 502
   at Microsoft.Dynamics.Nav.Client.FormBuilder.BuilderSessionInitializer.OpenConnectionToServer() in s:\repo\src\Platform\Client\Shared\Prod.Client.Builder\BuilderSession\BuilderSessionInitializer.cs:line 210
   at Microsoft.Dynamics.Nav.Client.FormBuilder.BuilderSessionInitializer.InitializeCore() in s:\repo\src\Platform\Client\Shared\Prod.Client.Builder\BuilderSession\BuilderSessionInitializer.cs:line 110
   at Microsoft.Dynamics.Nav.Client.FormBuilder.BuilderSessionInitializer.Initialize() in s:\repo\src\Platform\Client\Shared\Prod.Client.Builder\BuilderSession\BuilderSessionInitializer.cs:line 76
   at Microsoft.Dynamics.Framework.UI.UISession.Initialize() in s:\repo\src\Platform\Client\Shared\Prod.ClientFwk\Session\UiSession.cs:line 1212
   at Microsoft.Dynamics.Nav.Client.Web.NavWebUISessionInitializer.InitializeCore(UISession session) in s:\repo\src\Platform\Client\Web\Prod.Client.WebCommon\Session\NavWebUISessionInitializer.cs:line 76
   at Microsoft.Dynamics.Nav.WebClient.NavWebClientUISessionInitializer.InitializeCore(UISession session) in s:\repo\src\Platform\Client\Web\Prod.Client.WebClient\Session\NavWebClientUISessionInitializer.cs:line 52
   at Microsoft.Dynamics.Nav.Client.Web.NavWebUISessionInitializer.Initialize(UISession session) in s:\repo\src\Platform\Client\Web\Prod.Client.WebCommon\Session\NavWebUISessionInitializer.cs:line 57
   at Microsoft.Dynamics.Framework.UI.Client.OpenFormExecutionStrategy.TryInitializeUiSession(UISession session) in s:\repo\src\Platform\Client\Shared\Prod.ClientFwk\Client\Interactions\ExecutionStrategies\OpenFormExecutionStrategy.cs:line 68
   at Microsoft.Dynamics.Framework.UI.Web.WebOpenFormExecutionStrategy.TryInitializeUiSession(UISession session) in s:\repo\src\Platform\Client\Web\Prod.Client.Web\Interactions\ExecutionStrategies\WebOpenFormExecutionStrategy.cs:line 60
   at Microsoft.Dynamics.Framework.UI.Client.OpenFormExecutionStrategy.Execute() in s:\repo\src\Platform\Client\Shared\Prod.ClientFwk\Client\Interactions\ExecutionStrategies\OpenFormExecutionStrategy.cs:line 42
   at Microsoft.Dynamics.Framework.UI.InteractionManager.<>c__DisplayClass8_2.<InvokeInteractions>b__4() in s:\repo\src\Platform\Client\Shared\Prod.ClientFwk\Interactions\InteractionManager.cs:line 141
Source: Microsoft.Dynamics.Nav.Client.ServiceConnection----------------------------------
Type: System.ServiceModel.Security.SecurityNegotiationException
Message: The remote server did not satisfy the mutual authentication requirement.
StackTrace:

Server stack trace:
   at System.ServiceModel.Channels.WindowsStreamSecurityUpgradeProvider.WindowsStreamSecurityUpgradeInitiator.ValidateMutualAuth(EndpointIdentity expectedIdentity, NegotiateStream negotiateStream, SecurityMessageProperty remoteSecurity, Boolean allowNtlm)
   at System.ServiceModel.Channels.WindowsStreamSecurityUpgradeProvider.WindowsStreamSecurityUpgradeInitiator.OnInitiateUpgrade(Stream stream, SecurityMessageProperty& remoteSecurity)
   at System.ServiceModel.Channels.StreamSecurityUpgradeInitiatorBase.InitiateUpgrade(Stream stream)
   at System.ServiceModel.Channels.ConnectionUpgradeHelper.InitiateUpgrade(StreamUpgradeInitiator upgradeInitiator, IConnection& connection, ClientFramingDecoder decoder, IDefaultCommunicationTimeouts defaultTimeouts, TimeoutHelper& timeoutHelper)
   at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.SendPreamble(IConnection connection, ArraySegment`1 preamble, TimeoutHelper& timeoutHelper)
   at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.DuplexConnectionPoolHelper.AcceptPooledConnection(IConnection connection, TimeoutHelper& timeoutHelper)
   at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)
   at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at Microsoft.Dynamics.Nav.Types.Channels.ChunkingDuplexSessionChannel.OnOpen(TimeSpan timeout) in s:\repo\src\Platform\ClientServerShared\Prod.Types\Channels\ChunkingDuplexSessionChannel.cs:line 97
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)

Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at System.ServiceModel.ICommunicationObject.Open()
   at Microsoft.Dynamics.Nav.Client.ConnectionEstablisher.PingServer(Boolean useSpn) in s:\repo\src\Platform\Client\Shared\Prod.Client.ServiceConnection\ConnectionEstablisher.cs:line 822
Source: mscorlib

I have the same question (0)
  • miro.c.tr Profile Picture
    10 on at

    I found out, that there is issue in Kerberos log:

    A Kerberos error message was received:

    on logon session

    Client Time:

    Server Time: 13:26:32.0000 12/1/2021 Z

    Error Code: 0x29 KRB_AP_ERR_MODIFIED

    Extended Error:

    Client Realm:

    Client Name:

    Server Realm: LOCAL.DEUFOL.COM

    Server Name: host/dfcz-bvnhdwbc01

    Target Name: host/dfcz-bvnhdwbc01@LOCAL.DEUFOL.COM

    Error Text:

    File: 9

    Line: 1396

    Error Data is in record data.

    So I have deleted the SPNs and created them again, but that didnt worked out.

  • Suggested answer
    Marco Mels Profile Picture
    on at

    Hello,

    Feel free to raise this issue to Microsoft support via your partner or CSP.

    Thanks.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > Small and medium business | Business Central, NAV, RMS

#1
OussamaSabbouh Profile Picture

OussamaSabbouh 3,151

#2
Jainam M. Kothari Profile Picture

Jainam M. Kothari 1,443 Super User 2025 Season 2

#3
YUN ZHU Profile Picture

YUN ZHU 1,092 Super User 2025 Season 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans