Hi,
first a short explanation of my problem.
I have installed NAV 2009 SP1 in a 3-tier setup on 3 different machines. I can connect to the database using RTC, but I can not connect to the Webservice because of authentication problems with the SQL server.
I have been searching everywhere and tried every suggestion I have been able to find on mibuso, google and different blogs. I am running out of things to try so here I am begging for help![:D]( ":D")
Here are some more detailed information about my setup:
NAV service-tier and WS server: app01l (Windows Server 2008 R2)
SQL database server: sql01l (Windows Server 2008 R2 & SQL Server 2008)
NAV Service and Webservice are running under NETWORK SERVICE account.
SQL service is running under MYDOMAIN\sql_service account.
app01l delegation is set to "Trust this computer for delegation to any service (Kerberos only)".
sql01l delegation is set to "Trust this computer for delegation to any service (Kerberos only)".
SPN for MYDOMAIN\sql_service account: (I guess they're not needed when I have enabled delegation to any service on the server?)
MSSQLSvc/sql01l:1433
MSSQLSvc/sql01l.nph.local:1433
HTTP namespace reservations:
I have checked the HTTP namespace reservations with the HttpNamespacManger tool found here:
(http://blogs.msdn.com/paulwh/archive/20 ... -8080.aspx)
It shows:
[url=http://+:7047/]http://+:7047/[/url]
NAV Service runs on default port 7046 and the Webservice on 7047.
The RTC works fine from any machine in our domain.
I can access the Webservice through http://localhost:7047/RHLcronus/WS/Services on the app01l server.
I can not access http://app01l.nph.local:7047/RHLcronus/WS/Services from anywhere. It pops up asking for username and password and when I type that in i get this error message:
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
<s:Body>
<s:Fault>
<faultcode xmlns:a="urn:microsoft-dynamics-schemas/error">a:Microsoft.Dynamics.Nav.Types.NavDatabasePasswordException</faultcode>
<faultstring xml:lang="da-DK">The login failed when connecting to SQL Server sql01l.</faultstring>
<detail>
<string xmlns="http://schemas.microsoft.com/2003/10/Serialization/">The login failed when connecting to SQL Server sql01l.</string>
</detail>
</s:Fault>
</s:Body>
</s:Envelope>
On sql01l in the eventlog I get this message:
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: 192.168.153.32]
(I did look for previous errors and the message suggests, but there are none)
I hope someone in here can see where the problem is. I would really appreciate any help I can get.
Thank you!
Nicolai Hansen
first a short explanation of my problem.
I have installed NAV 2009 SP1 in a 3-tier setup on 3 different machines. I can connect to the database using RTC, but I can not connect to the Webservice because of authentication problems with the SQL server.
I have been searching everywhere and tried every suggestion I have been able to find on mibuso, google and different blogs. I am running out of things to try so here I am begging for help
Here are some more detailed information about my setup:
NAV service-tier and WS server: app01l (Windows Server 2008 R2)
SQL database server: sql01l (Windows Server 2008 R2 & SQL Server 2008)
NAV Service and Webservice are running under NETWORK SERVICE account.
SQL service is running under MYDOMAIN\sql_service account.
app01l delegation is set to "Trust this computer for delegation to any service (Kerberos only)".
sql01l delegation is set to "Trust this computer for delegation to any service (Kerberos only)".
SPN for MYDOMAIN\sql_service account: (I guess they're not needed when I have enabled delegation to any service on the server?)
MSSQLSvc/sql01l:1433
MSSQLSvc/sql01l.nph.local:1433
HTTP namespace reservations:
I have checked the HTTP namespace reservations with the HttpNamespacManger tool found here:
(http://blogs.msdn.com/paulwh/archive/20 ... -8080.aspx)
It shows:
[url=http://+:7047/]http://+:7047/[/url]
NAV Service runs on default port 7046 and the Webservice on 7047.
The RTC works fine from any machine in our domain.
I can access the Webservice through http://localhost:7047/RHLcronus/WS/Services on the app01l server.
I can not access http://app01l.nph.local:7047/RHLcronus/WS/Services from anywhere. It pops up asking for username and password and when I type that in i get this error message:
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/">
<s:Body>
<s:Fault>
<faultcode xmlns:a="urn:microsoft-dynamics-schemas/error">a:Microsoft.Dynamics.Nav.Types.NavDatabasePasswordException</faultcode>
<faultstring xml:lang="da-DK">The login failed when connecting to SQL Server sql01l.</faultstring>
<detail>
<string xmlns="http://schemas.microsoft.com/2003/10/Serialization/">The login failed when connecting to SQL Server sql01l.</string>
</detail>
</s:Fault>
</s:Body>
</s:Envelope>
On sql01l in the eventlog I get this message:
Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: 192.168.153.32]
(I did look for previous errors and the message suggests, but there are none)
I hope someone in here can see where the problem is. I would really appreciate any help I can get.
Thank you!
Nicolai Hansen