Webservice access from outside of domain

lup83

Hi
We've set up 3-tier environment using the webservice to gain access from a web-application which is not in the domain. We are however getting a "the login failed when connecting to the SQL-server".



When using the RTC client the SQL server can be accessed so we suppose our spn's are OK.

MSSQLSvc/SQL02
MSSQLSvc/SQL02.Domain.local:1433

DynamicsNAV/Navinas.Domain.local:7046
DynamicsNAV/NAVINAS:7046
http/NAVINAS
http/NAVINAS.domain.local


I've been trying to set up the httpcfg for the domain account running the
NAV service and NAV webservice
SID= S-1-5-21-66081788-624508030-944726268-1172

---

URL : http://+:7047/
ACL : (A;;GX;;;S-1-5-21-66081788-624508030-944726268-1172)(A;;GX;;;WD)

---

URL : http://+:7047/DynamicsNAV/
ACL : (A;;GX;;;S-1-5-21-66081788-624508030-944726268-1172)(A;;GX;;;WD)(A;;GX;;;LS)

---

When accessing the webservices from the web server

http://navinas:7047/DynamicsNAV/WS//Services

I am prompted for a login and I can access the services only by using the Domain administrator account. All other logins fails.
Any suggestions would be appriciated

Maci

Same situation here!

Any sugestion? Thanks!

lup83

Hi Maci

We got the problem solved by following these 3 steps.

1. In the middle tier group policy check following policy permissions. (This is optional but worth checking when still you get Delegation error)
Add these policies for this domain user under which NAV middle tier service runs.
A. “Enable this user and computer for delegation”
B. Run gpupdate /force in CMD prompt to update the policy.

2. Additionally you can also check the “UserAccountControl” flag value to 17367552
(TRUSTED_FOR_DELEGATION+TRUSTED_TO_AUTH_FOR_DELEGATION) according to following KB:
http://support.microsoft.com/kb/305144/en-us


3. We deleted the duplicate SPNs by running the commany SETSPN –X

Hopes it helps you!

max_hl

U always can use
xmlhttp.open('POST',Server_URL,FALSE,domain\user,password)

It is the task specific.. We use one account 4 one domain