nav2009 HTTP request was forbidden authentication negotiate
JamesWilca
Member Posts: 4
Hi,
I'm new to nav. I have a dynamics web services installed, but for some reason it refuses to negotiate authentication.
Are there other config settings besides ClientCredentialType?
CustomSettings.config
<add key="ClientCredentialType" value="Windows"></add>
A message sent to adapter "WCF-Custom" on send port "Snd_DynamicSentToConsumer" with URI "http://server:7099/DynamicsNAV/WS/APP/Codeunit/ProjectWebservice" is suspended.
Error details: System.ServiceModel.Security.MessageSecurityException: The HTTP request was forbidden with client authentication scheme 'Negotiate'. ---> System.Net.WebException: The remote server returned an error: (403) Forbidden.
at System.Net.HttpWebRequest.GetResponse()
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
I'm new to nav. I have a dynamics web services installed, but for some reason it refuses to negotiate authentication.
Are there other config settings besides ClientCredentialType?
CustomSettings.config
<add key="ClientCredentialType" value="Windows"></add>
A message sent to adapter "WCF-Custom" on send port "Snd_DynamicSentToConsumer" with URI "http://server:7099/DynamicsNAV/WS/APP/Codeunit/ProjectWebservice" is suspended.
Error details: System.ServiceModel.Security.MessageSecurityException: The HTTP request was forbidden with client authentication scheme 'Negotiate'. ---> System.Net.WebException: The remote server returned an error: (403) Forbidden.
at System.Net.HttpWebRequest.GetResponse()
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
0
Comments
-
You could try setting ServicesUseNTLMAuthentication to true. I am not sure, but I remember doing this in a 2009 webservice situation.0
-
I have a server where it works with ServicesUseNTLMAuthentication set to false.
If you install IIS or not on the navision webservice server, does this change anything?0 -
If you see a 401 is because it negotiates NTLM fallback instead of Kerberos.
In other words SPN or delegate issues.
In this case the sender account did not delegate to the http/navision server in AD.0
Categories
- All Categories
- 75 General
- 75 Announcements
- 66.7K Microsoft Dynamics NAV
- 18.8K NAV Three Tier
- 38.4K NAV/Navision Classic Client
- 3.6K Navision Attain
- 2.4K Navision Financials
- 116 Navision DOS
- 851 Navision e-Commerce
- 1K NAV Tips & Tricks
- 772 NAV Dutch speaking only
- 610 NAV Courses, Exams & Certification
- 1.9K Microsoft Dynamics-Other
- 1.5K Dynamics AX
- 251 Dynamics CRM
- 103 Dynamics GP
- 6 Dynamics SL
- 1.5K Other
- 991 SQL General
- 383 SQL Performance
- 34 SQL Tips & Tricks
- 28 Design Patterns (General & Best Practices)
- Architectural Patterns
- 9 Design Patterns
- 4 Implementation Patterns
- 53 3rd Party Products, Services & Events
- 1.6K General
- 1K General Chat
- 1.6K Website
- 77 Testing
- 1.2K Download section
- 23 How Tos section
- 249 Feedback
- 12 NAV TechDays 2013 Sessions
- 13 NAV TechDays 2012 Sessions