Options

NAV 2013 R2 Web Services issue

alvi99alvi99 Member Posts: 71
edited 2015-02-02 in NAV Three Tier
Hi, I have just installed a three tier NAV 2013 R2 solution. It works fine but I have a problem with web services:

This address:
http://IPADDRESSONNAVSERVER:7047/NAVPRO ... p/Page/Job

works fine.

This address:
http://FULLNAVSERVERNAME:7047/NAVPROD/WS/comp/Page/Job

return: "The website was not found."

Do I need to do some delegation somewhere?

Thanks

Answers

  • Options
    bbrownbbrown Member Posts: 3,268
    Sound more like a DNS problem. What to Ping or TRACERT report?
    There are no bugs - only undocumented features.
  • Options
    alvi99alvi99 Member Posts: 71
    I will try ping and tracert, thanks
  • Options
    alvi99alvi99 Member Posts: 71
    Ping & tracert did not show any problems. After searching on the issue I think it is related to SPN, something I don't know much about! I will get back with the solution.
  • Options
    alvi99alvi99 Member Posts: 71
    From the event viewer:
    The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server xxxxx_Service. The target name used was HTTP/xxx-xxx.xxx.xx. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (xxx.xx) is different from the client domain (xxx.xx), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
  • Options
    alvi99alvi99 Member Posts: 71
    This spn command did the trick :-)

    setspn -s http/full comp. name Domain\NAV service User
Sign In or Register to comment.