Quantcast
Channel: NAV Three Tier — mibuso.com
Viewing all articles
Browse latest Browse all 10032

webservice error SQL authentication failed / delegation error

$
0
0
NAV 2009 R2

Hi,

I have some trouble using the webservice.
We're using the 3 tier environment without any problem for some years now.
Now we also want to use the webservice so I walked through this thread:
How to: Configure Web Services with Delegation

The NAVServerService and The NAVWebservice are running with the same domain user account.
Also the SQL-Server is running with the same account.

SPN for the domain user account running the services:

DynamicsNAV/NAVSERVER.domain.de:7046
DynamicsNAV/NAVSERVER:7046
http/NAVSERVER.domain.de:7047
http/NAVSERVER:7047
MSSQLSvc/SQLSERVER.domain.de:1433
MSSQLSvc/SQLSERVER:1433

I've set the delegation for the domain user account as described in the walkthrough for the 3-Tier installation.

So the user is trusted for delegation to the MSSQLSvc on SQLSERVER, with Kerberos only.

With RTC everything works properly.

When I try to call the webservice with a Browser (IE or chrome) with a domain user (i.e. domain\user1) I get:

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"&gt;
<s:Body>
<s:Fault>
<faultcode xmlns:a="urn:microsoft-dynamics-schemas/error">
a:Microsoft.Dynamics.Nav.Types.NavDatabasePasswordException
</faultcode>
<faultstring xml:lang="de-DE">
The login failed when connecting to SQL Server SQLSERVER.
</faultstring>
<detail>
<string xmlns="http://schemas.microsoft.com/2003/10/Serialization/"&gt;
The login failed when connecting to SQL Server SQLSERVER.
</string>
</detail>
</s:Fault>
</s:Body>
</s:Envelope>

Calling the webservice from any client with the domain user account running the services is working properly.

In the event log from the NAVSERVER I can see, that a domain user (i.e. domain\user1) logon correct with logon type 3 (network).
But in the event log from the SQLSERVER I can see, a logn error "NT-AUTHORITY\ANONYMOUS LOGON" with event id 18456.

So I think there is a problem with the delegation.
But I can't find any configuration issue.

Any help is appreciated - thank you.


best regards

Dirk

Viewing all articles
Browse latest Browse all 10032

Trending Articles