David
Tue Mar 18 17:36:18 CDT 2008
Just wanted to let the group know that I solved this problem, anyone else
experiencing this may want to know how to resolve it.
First of all CRM uses Kerberos as an unthentication method as does
SharePoint Server.
If you are running the software on a seperate server to the AD Server you
will need to register the HTTP protocol SPN (Service Principal Name) with
Kerberos otherwise Kerberos tickets will be declined by the server.
To register the HTTP SPN you will need to download and install support tools
for your server.
Once installed open a command prompt and navigate to the installation
directory of the support tools.
Once in the directory run setspn -L <machine name> to list the protocols
registered for the machine. You probably wont have HTTP listed.
To register the HTTP protocol run setspn -A HTTP/<machine name>.<FQDN>
<machine name>
you can also do setspn -A HTTP/<machine name> <machine name>
If you also need authentication on the HTTPS protocal then use the same
commands as above but replace HTTP with HTTPS.
Hope this comes in handy for anyone experiencing the problems I was.
Regards
"Peter Lynch" <discussions@microsoft.com> wrote in message
news:vtQCj.41547$nw4.9704@fe1.news.blueyonder.co.uk...
> or try this
>
> Get the CRM web site ID in IIS, under websites
>
>
> Disable IIS from doing Kerberos authentication using the IIS
>
> admin script (in <system drive>:\Inetpub\AdminScripts) and running
>
> these two commands:-
>
>
>
> adsutil.vbs SET W3SVC\NTAuthenticationProviders "NTLM"
>
> adsutil.vbs SET W3SVC\<MSCRM Site ID>\NTAuthenticationProviders "NTLM"
>
>
>
> To put it back to the way it was run:-
>
>
>
> adsutil.vbs SET W3SVC\NTAuthenticationProviders "Negotiate,NTLM"
>
> adsutil.vbs SET W3SVC\<MSCRM Site ID>\NTAuthenticationProviders
>
> "Negotiate,NTLM"
>
>
> Let us know how you get on!
>
> Good luck...
>
>
> "Peter Lynch" <discussions@microsoft.com> wrote in message
> news:RjQCj.41545$nw4.40784@fe1.news.blueyonder.co.uk...
>> Try this one...
>>
>>
>>
>>
http://support.microsoft.com/kb/917818
>>
>>
>>
>>
>>
>> "David Hodgson" <david.hodgson@homenetz.co.uk> wrote in message
>> news:A4468BC9-08A7-4549-991A-1EB4E5BADA43@microsoft.com...
>>> Hi,
>>>
>>> I have for the last few weeks been having an issue accessing my CRM 4
>>> install from workstation machines. When I tried to access I was asked
>>> for a UID and Password, after three attempts I was given a 401 error
>>> saying not authorised.
>>>
>>> I also have an installation of SharePoint server on the same machine and
>>> got the same issue as accessing CRM. Just last night a found an article
>>> on the microsoft KB for switching the Authentication to NTLM only not
>>> Kerberos and NTLM. I followed the instructions and this solved the issue
>>> on the MOSS side of things, I am no longer asked for a UID and Password.
>>>
>>> Now I was wondering if someone could tell me how I change the CRM system
>>> to Authenticate using NTLM only so I can test if this will resolve the
>>> problem on that side.
>>>
>>> I look forward to any responses.
>>>
>>> Thanks
>>
>>
>
>