Navision 4.0 on SQL Application Role issue

ara3nara3n Member Posts: 9,257
Hello
In pervious version of navision e.g. 3.7 Navision creates a $ndo$shadow application role on sql server. I've created a new 4.0 db on sql and looking at roles, I don't see that role. Instead, there are multiple roles with random numbers e.g. $ndo$ar$B866D3884E4BAC3E17BA28032554C85. I’ve tried this on 3 different sql servers, and the roles are the same way with different numbers. Also using windows authentication and adding a windows Group to the list, the users under the group need to have a db_owner role in order to connect to db. Otherwise they get an error. The combination of login and password is incorrect. Has anybody installed 4.0 on sql and can replicate these problems? Thank you.
Ahmed Rashed Amini
Independent Consultant/Developer


blog: https://dynamicsuser.net/nav/b/ara3n

Comments

  • kinekine Member Posts: 12,562
    Yes, the application roles are named in this way. But I have no problem with loging... have you updated your xp_ndo.dll and registered the new extended procedure xp_ndo_enumusergroups which is new for Navision 4.0?
    Kamil Sacek
    MVP - Dynamics NAV
    My BLOG
    NAVERTICA a.s.
  • ara3nara3n Member Posts: 9,257
    Yes I've registered the extended procedure xp_ndo_enumusergroups and pointed to xp_ndo.dll. Adding window users works but not windows groups still doesn't. Also If you add new tables to you have run synchronize to give permission to the users for that table in SQL otherwise they'll get a SQL an error that they don't have permission to the table.
    Ahmed Rashed Amini
    Independent Consultant/Developer


    blog: https://dynamicsuser.net/nav/b/ara3n
  • fbfb Member Posts: 246
    In a document named Update for Microsoft Business Solutions - Navision 4.0: Late Changes in Functionality dated October 2004, you can find the following:
    In Navision 4.0 you must enter the Windows group in the Windows Login table and enter the Windows account for each individual user that is a member of that group. You do not need to assign any Navision roles to the individual users as long as the roles that the Windows group is assigned contain all the permissions that the users need.
    There is a bunch of other interesting stuff in that document -- it would be worth your while to hunt it down and read it...
  • ara3nara3n Member Posts: 9,257
    Thank you that explains it.
    Ahmed Rashed Amini
    Independent Consultant/Developer


    blog: https://dynamicsuser.net/nav/b/ara3n
  • toortoor Member Posts: 52
    Hey there,
    fb wrote:
    In a document named Update for Microsoft Business Solutions - Navision 4.0: Late Changes in Functionality dated October 2004

    where can i find that document? I've searched it on the product cd and in partner source, but can't find it.

    Is that document (the stuff about windows logins) relevant for 4.01, too?

    Thanks in advance

    tobias
  • ara3nara3n Member Posts: 9,257
    Yes, SP1 and 4.0 have the same security model. The SP1 has improved the synch perfornamce, and allows single user synchronization.
    Ahmed Rashed Amini
    Independent Consultant/Developer


    blog: https://dynamicsuser.net/nav/b/ara3n
  • fbfb Member Posts: 246
    where can i find that document?
    For the US at least, the "Late Changes" document is included in the 'Changes' exe/zip file, available from the v4.0 Product Release announcement:

    https://mbs.microsoft.com/partnersource ... page=false
  • toortoor Member Posts: 52
    Hey,

    thank you very much for the fast reply.

    The mentioned link to the changes.exe doesn't contain the late changes document. There are 4 docs and one pdf in, but not the late changes.

    On the german iso-images of the 4.00 product cd isn't it, too.

    Can someone please send me the doc by mail (send a pn, i don't want to publish my mail address here)?

    Thanks
    tobias
    fb wrote:
Sign In or Register to comment.