MapOrgEngine: Unable to retrieve the OrgId for URL
-
Monday, May 14, 2012 1:41 PM
Hi all
When enabling CRM tracing on one of our front ends we get a large number of the following warnings
>MapOrgEngine: Unable to retrieve the OrgId for URL [https://ourinternalcrmurl/CRM2011Live/XRMServices/2011/Organization.svc].
A full example of this would be:
[2012-05-14 11:42:45.241] Process: w3wp |Organization:00000000-0000-0000-0000-000000000000 |Thread: 46 |Category: Platform |User: 00000000-0000-0000-0000-000000000000 |Level: Warning | MapOrgUtility.SetOrganizationInformation
>MapOrgEngine: Unable to retrieve the OrgId for URL[https://ourinternalcrmurl/CRM2011Live/XRMServices/2011/Organization.svc].That would repeat thousands of times per hour.
I think we currently have a problem with Claims based authentication and I'm trying to establish if the warning above has anything to do with it.
Even if it doesn't, does anyone know what causes it?
Many thanks
Simon
All Replies
-
Monday, May 14, 2012 9:24 PM
Please check the following.
1) Check with what account you are running the CRM Application Pool.(Custome Account or Network Service)
2) Select CRM Website -> Authentication -> Windows Authentication -> Advanced Settings -> See if Kernal Mode Authentication is enabled.
3) If the custom account is running the app pool and kernal mode authentication is checked and SPNs are set on custom account please run the following command on CRM server :-
Set the IIS useAppPoolCredentials value to True
- Open an elevated command prompt window. To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then clickRun as administrator.
- Navigate to %windir%\system32\inetsrv.
- Type appcmd.exe set config -section:system.webServer/security/authentication/windowsAuthentication -useAppPoolCredentials:true
4. Do an IISRESET
I hope this helps. If my response answered your question, please mark the response as an answer and also vote as helpful.
Mubasher Sharif
Check out my about.me profile!
http://mubashersharif.blogspot.com
Linked-In Profile
Follow me on Twitter! -
Tuesday, May 15, 2012 10:32 AM
Hi Mubasher
Thanks for your reply. Could you advise on what that command will actually do and why its necessary? The overall site does seem to work - for the most part so I just want to be clear on what the issue is and why that command fixes it
I'm a bit hesitant to do it without knowing more about it because if I get it wrong - there will be no point in 600 people coming to work tomorrow ;-)
Thanks again
Simon
-
Wednesday, May 16, 2012 8:25 AM
Than i will prefer you to just check the Kernal Mode Authentication.
Is it enable?
And as mentioned in your trace that there is a problem in any process.
Please recheck all your process. and there logsI hope this helps. If my response answered your question, please mark the response as an answer and also vote as helpful.
Mubasher Sharif
Check out my about.me profile!
http://mubashersharif.blogspot.com
Linked-In Profile
Follow me on Twitter! -
Wednesday, May 16, 2012 2:35 PM
Hi there
The worker processes on both servers run as a custom domain account
Kernel mode authentication is enabled on the main CRM web site on both web servers.
Does that help?
Many thanks
Simon
-
Wednesday, October 31, 2012 5:37 PM
Did you ever figure this out? I'm experiencing the same issue now.