Dynamics NAV service Tier - login failed for ANONYMOUS LOGON

tpeters

I am setting up a service tier for MS Dynamics NAV 2009, but am unable to connect due to a login failure.

Login failed for user 'DOMAIN\ANONYMOUS LOGON'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors.

Error: 18456, Severity: 14, State: 11.
I have the following servers:

SQL Server: sql-dev

Dynamics service tier: dynamicsService
The SQL and Dynamics services are both running under the same domain account.

I have four spns setup:

MSSQLSvc/sql-dev.mycompany.com:1433

MSSQLSvc/sql-dev:1433

MicrosoftDynamicsNAVServer$Dev/dynamicsService.mycompany.com:7046

MicrosoftDynamicsNAVServer$Dev/dynamicsService:7046
Finally, I have Delegation setup for the domain account for both the Dynamics and SQL service. This looks to be the correct setup according to the MS documentation, but it is not working. Any thoughts to where I have gone wrong? Thanks.

archer89

check sql rights of the service account in your database.

tpeters

The service account is in the SQL sysadmin role. The SQL error message is, "Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'." so I believe it is a problem with the delegation.

zohaibu95@hotmail.com

Make sure your user is added in NAV.

Kishorm

You may have done this already but if not then try running the Best Practices Analyzer tool provided by Microsoft - not always helpful but can be sometimes. You can download it from partnersource...

https://mbs.microsoft.com/partnersource/northamerica/deployment/migration-tools/BestPracticesAnalyzerNAV2009

tpeters

Thanks Kishorm, I hadn't run that, but I have now. On my service tier the only issue showing up says Dynamics NAV 2009 Server has not been installed. I have gone through the installation and have the Role Tailored client and the Server options installed. The NAV service is installed and started. I'm not sure why that error would be showing up or how to resolve it.

Kishorm

Sounds like an issue with the service tier then. Check the event viewer to see if there is any additional information logged in there.

tpeters

There's nothing in the event log on the service tier, only on the database server. I'm able to connect to the database from the service tier, but not from my client to the service tier to the database. The best practice analyzer isn't showing a problem with the spn, but something with the delegation isn't working since I still see an attempt at anonymous login on the database from the service tier.

Kishorm

Again not sure if you've seen this or not but might be worth having a look through, especially the section on delegation...

https://msdn.microsoft.com/en-us/library/dd301254.aspx

tpeters

Thanks, I've been going through that page, but do not have it work yet.

PureHeart

tpeters wrote: »

Thanks, I've been going through that page, but do not have it work yet.

Did you manage to fix this?

tpeters

Yes, it was resolved. In the end it was working with Microsoft and an updated version of the Best Practice Analyzer Tool which showed an issue with the SPN.

endotrio

Hello,

Recently i has issue with sql authentication with Error: 18456, Severity: State: 13

The state 13 is related with SQL Server service paused.

In your case state 11 is related with "Valid login but server access failure"

I found a good answer about sql server error 18456 on the following site.

http://www.get-itsolutions.com/sql-server-error-18456/

thnx