WebServices NavDatabasePasswordException

blackc2004

Hello all,

I'm having a very frustrating time getting web services to work on separate servers. We're running NAV 2009R2 on a MSSQL Server on 2008R2. We also have a separate IIS/Web service box running Windows 2008R2.

I have worked with our partner and read a lot of forums regarding the navdatabasepassword exception and I've got it almost working. Here are the steps I am taking currently to reproduce my error:
1) Reboot all servers, SQL, IIS, etc
2) Log into the IIS Server and access the WS URL: http://localhost:7047/DynamicsNAV/WS/Services
2a) I receive a list of the WS
3) Go to my desktop, access the WS URL: http://calax-iisdev-01:7047/DynamicsNAV/WS/Services
3a) I get a NAVDatabasepasswordexception error
4) Go back to the IIS server and access the same URL: http://calax-iisdev-01:7047/DynamicsNAV/WS/Services
4a) I receive a list of my webservices
5) Go back to my desktop and refresh the URL. I now get my list of services.

This is very frustrating because once you access it locally, it will then work from any other desktop computer. Does anyone have any more suggestions or have you seen this happen before? I need to get this to a point where it's stable and reliable as we would really like to start working on some apps which will consume the WS.

lvanvugt

Hi Black,

This indeed is frustrating. We've been through this parallel to you, i.e. the last days, and got it working. Reading your list and matching it to our experience it's all about the delagations you need to set. Did you get that done already?

Have a look here for details: Walkthrough: Installing the Three Tiers on Three Computers.

blackc2004 wrote:

...
4) Go back to the IIS server and access the same URL: http://calax-iisdev-01:7047/DynamicsNAV/WS/Services
4a) I receive a list of my webservices
5) Go back to my desktop and refresh the URL. I now get my list of services.
...

Indeed, this was very "funny".

blackc2004

I'm pretty sure I've done all those steps. I've tried to follow them as closely as possible.

I've attached screenshots of my SPN's and URLACL's





Shouldn't they be able to just auto create this stuff when you install the service? All my services (MSSQL, IIS, NAV WS server) are all running under the same AD username.

lvanvugt

Hi Black,

These are in general terms the spn's we have with the commands to set them.

Notes
* I am working on a more extensive description; will follow later
* using ADSI Edit tool can do all things much better; will also pay attention to that later
* the post, Troubleshooting multi-machine installations of NAV 2009, is also very useful
* before performing netsh http add urlacl ... make sure to delete the urlacl first; see also httpcfg - problem

blackc2004

Ok, I duplicated all your SPN's and it seems to be working now (I didn't have the HTTP ones). I will give it 24 hours to make sure all the kerb stuff is expired and try again.

fingers crossed!