Three tier installation using service account

sendoh

Hi Expert,


I have a situation below(as this just for POC).

AD - 192.168.0.1 - Domain controller(Windows Server 2008 R2)
DB - 192.168.0.2 - Database server(MSSQL 2008R2 in Windows Server 2008 R2)
NST - 192.168.0.3 - Nav Service Tier(NAV2009R2 in Windows Server 2008 R2).

I already set up the object listener as my ReplacewithServerName = NAVPOC\NST$
and based on the walkthorugh I don't need to set SPN as I used Service Account in my NST and in SQL.

when I connect using NST computer(using domain account as NAVPOC\Admin, I can connect to the database and succesfully run the RTC, but when I tried to connect using remote user(using same account NAVPOC\Admin) by setting up "UserName" in Credential configfile. it gives an error

---

Microsoft Dynamics NAV

---

The login failed when connecting to SQL Server 192.168.0.2

---

OK

---

Please help, what I missed?

Thanks.

mik

Hi!

I am no expert but I was wondering because of your post ..

.. and based on the walkthorugh I don't need to set SPN as I used Service Account in my NST and in SQL ..

Please have a look on the installation guide again.
Walkthrough

In my opinion you can not connect from a client without SPN in your current configuration. There is no permission for the service account that he is allowed to impersonate from your middle tier.
Please correct me if I am wrong.

greetings mik

sendoh

meaning I need to create an SPN for network service?

kine

No, you need to create SPNs for the server accounts (DB$ and NST$ in your case). See my blog article about this subject...

sendoh

Hi Kine, will try your advise, Thanks.