NAV 2009 R2
Hi,
I have some trouble using the webservice.
We're using the 3 tier environment without any problem for some years now.
Now we also want to use the webservice so I walked through this thread:
How to: Configure Web Services with Delegation
The NAVServerService and The NAVWebservice are running with the same domain user account.
Also the SQL-Server is running with the same account.
SPN for the domain user account running the services:
DynamicsNAV/NAVSERVER.domain.de:7046
DynamicsNAV/NAVSERVER:7046
http/NAVSERVER.domain.de:7047
http/NAVSERVER:7047
MSSQLSvc/SQLSERVER.domain.de:1433
MSSQLSvc/SQLSERVER:1433
I've set the delegation for the domain user account as described in the walkthrough for the 3-Tier installation.
So the user is trusted for delegation to the MSSQLSvc on SQLSERVER, with Kerberos only.
With RTC everything works properly.
When I try to call the webservice with a Browser (IE or chrome) with a domain user (i.e. domain\user1) I get:
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
<s:Body>
<s:Fault>
<faultcode xmlns:a="urn:microsoft-dynamics-schemas/error">
a:Microsoft.Dynamics.Nav.Types.NavDatabasePasswordException
</faultcode>
<faultstring xml:lang="de-DE">
The login failed when connecting to SQL Server SQLSERVER.
</faultstring>
<detail>
<string xmlns="http://schemas.microsoft.com/2003/10/Serialization/">
The login failed when connecting to SQL Server SQLSERVER.
</string>
</detail>
</s:Fault>
</s:Body>
</s:Envelope>
Calling the webservice from any client with the domain user account running the services is working properly.
In the event log from the NAVSERVER I can see, that a domain user (i.e. domain\user1) logon correct with logon type 3 (network).
But in the event log from the SQLSERVER I can see, a logn error "NT-AUTHORITY\ANONYMOUS LOGON" with event id 18456.
So I think there is a problem with the delegation.
But I can't find any configuration issue.
Any help is appreciated - thank you.
best regards
Dirk
Hi,
I have some trouble using the webservice.
We're using the 3 tier environment without any problem for some years now.
Now we also want to use the webservice so I walked through this thread:
How to: Configure Web Services with Delegation
The NAVServerService and The NAVWebservice are running with the same domain user account.
Also the SQL-Server is running with the same account.
SPN for the domain user account running the services:
DynamicsNAV/NAVSERVER.domain.de:7046
DynamicsNAV/NAVSERVER:7046
http/NAVSERVER.domain.de:7047
http/NAVSERVER:7047
MSSQLSvc/SQLSERVER.domain.de:1433
MSSQLSvc/SQLSERVER:1433
I've set the delegation for the domain user account as described in the walkthrough for the 3-Tier installation.
So the user is trusted for delegation to the MSSQLSvc on SQLSERVER, with Kerberos only.
With RTC everything works properly.
When I try to call the webservice with a Browser (IE or chrome) with a domain user (i.e. domain\user1) I get:
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
<s:Body>
<s:Fault>
<faultcode xmlns:a="urn:microsoft-dynamics-schemas/error">
a:Microsoft.Dynamics.Nav.Types.NavDatabasePasswordException
</faultcode>
<faultstring xml:lang="de-DE">
The login failed when connecting to SQL Server SQLSERVER.
</faultstring>
<detail>
<string xmlns="http://schemas.microsoft.com/2003/10/Serialization/">
The login failed when connecting to SQL Server SQLSERVER.
</string>
</detail>
</s:Fault>
</s:Body>
</s:Envelope>
Calling the webservice from any client with the domain user account running the services is working properly.
In the event log from the NAVSERVER I can see, that a domain user (i.e. domain\user1) logon correct with logon type 3 (network).
But in the event log from the SQLSERVER I can see, a logn error "NT-AUTHORITY\ANONYMOUS LOGON" with event id 18456.
So I think there is a problem with the delegation.
But I can't find any configuration issue.
Any help is appreciated - thank you.
best regards
Dirk