3 tiers Problem

sbilly · **Posted:** Thu May 17, 2012 7:26 pm

HI all,
I tried to install Tiers architecture.
I did like in the Walkthrough: Installing the Three Tiers on Three Computers.
My problem is when I execute RTC from the NAVSERV everything work, but when I try to execute it from NAVClient, I have an error

ajageavi · **Posted:** Fri May 18, 2012 6:25 am

Check windows login of client system and also check domain user

Carlos_Pt · **Posted:** Fri May 18, 2012 10:28 am

post your error

sbilly · **Posted:** Fri May 18, 2012 11:26 am

I have this error :
the login failed when connecting to sql server myserver.local
And this's the error on tne event viewer :
Login failed for user 'AUTORITE NT\ANONYMOUS LOGON'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: 172.19.5.102]
172.19.5.102 is the ip of navserver

kine · **Posted:** Fri May 18, 2012 11:32 am

Than you have problem with the SPNs and delegation. Check all what is needed how it is described in the documentation. Do not forget to clear the Kerberos tickets each time to force the system to use the actual settings (klist purge).

sbilly · **Posted:** Fri May 18, 2012 11:44 am

I did the delegation like in the MSDN article.
This the delegation for the Logon Account for the Microsoft Dynamics NAV Server Service

Attachment:

Sans titre.jpg [ 76.71 KiB | Viewed 650 times ]

smgsqlhvb01 is my sql server
i want to tell you that the the Logon Account for SQL Server Service is AUTORITE NT\SERVICE RÉSEAU

kine · **Posted:** Fri May 18, 2012 12:30 pm

You need to check that correct SPNs exists for your NAV server for the NAV Server account and MSSQLsvc service for the SQL server computer account. Check als the output setspn -x for duplicities.

sbilly · **Posted:** Mon May 21, 2012 12:52 am

I want to ask what shall I do if I want configure RTC to work with many domaine account like in classic.
What's the configuration that I must do?

kine · **Posted:** Mon May 21, 2012 6:52 am

What do you mean with "Many domain accounts"? The account under whcih is the server running have nothing to do (directly) with windows authentication accounts in NAV, which users could use to login.

sbilly · **Posted:** Mon May 21, 2012 11:54 am

Thanks for ur help, but I still have a last question :
which SPN I must add when the SQL Server service didn't use a domaine account for example AUTORITE NT\SERVICE RÉSEAU ??

kine · **Posted:** Mon May 21, 2012 12:22 pm

It is described e.g. on my blog. If you are using system account, you need to register the SPN for the computer account (domain\computername$)

sbilly · **Posted:** Mon May 21, 2012 12:24 pm

please can u give me the link for ur blog

kine · **Posted:** Mon May 21, 2012 12:50 pm

You mean the one mentioned in my signature under each my post? :-)

But there is one special for you: http://dynamicsuser.net/blogs/kine/arch ... -spns.aspx

sbilly · **Posted:** Mon May 21, 2012 12:56 pm

hihiihihihi
I didn't see it

Thanks man for all

mibuso.com

3 tiers Problem

Who is online