Is anonymous authentication required on the CRM 2011 website?

Proposed Is anonymous authentication required on the CRM 2011 website?

  • Thursday, September 08, 2011 6:02 PM
     
      Has Code
    After disabling anonymous access on the CRM website I see an error in the event log when an application attempts to use the organization service. The application receives a 500. Enabling anonymous access solves the issue. This deployment in on-premises and not IFD.

    Is there any information available on anonymous access requirements and CRM 2011? The only documents I found deal with the CRM 4.0 Outlook client accessing CRM 2011 or IFD.
     
    Error Details from Event Log:

    WebHost failed to process a request.
     Sender Information: System.ServiceModel.ServiceHostingEnvironment+HostingManager/39086322
     Exception: System.ServiceModel.ServiceActivationException: The service '/CrmPlusCoreSolutionDev/XRMServices/2011/Organization.svc' cannot be activated due to an exception during compilation.  The exception message is: Security settings for this service require 'Anonymous' Authentication but it is not enabled for the IIS application that hosts this service.. ---> System.NotSupportedException: Security settings for this service require 'Anonymous' Authentication but it is not enabled for the IIS application that hosts this service.
       at System.ServiceModel.Activation.HostedAspNetEnvironment.ValidateHttpSettings(String virtualPath, Boolean isMetadataListener, Boolean usingDefaultSpnList, AuthenticationSchemes& supportedSchemes, ExtendedProtectionPolicy& extendedProtectionPolicy, String& realm)
       at System.ServiceModel.Channels.HttpChannelListener.ApplyHostedContext(String virtualPath, Boolean isMetadataListener)
       at System.ServiceModel.Channels.HttpTransportBindingElement.BuildChannelListener[TChannel](BindingContext context)
       at System.ServiceModel.Channels.DatagramChannelDemuxer`2..ctor(BindingContext context)
       at System.ServiceModel.Channels.ChannelDemuxer.GetTypedDemuxer(Type channelType, BindingContext context)
       at System.ServiceModel.Channels.ChannelDemuxer.BuildChannelListener[TChannel](BindingContext context, ChannelDemuxerFilter filter)
       at System.ServiceModel.Channels.ChannelBuilder.BuildChannelListener[TChannel]()
       at System.ServiceModel.Channels.SecurityChannelListener`1.InitializeListener(ChannelBuilder channelBuilder)
       at System.ServiceModel.Channels.SymmetricSecurityBindingElement.BuildChannelListenerCore[TChannel](BindingContext context)
       at System.ServiceModel.Channels.SecurityBindingElement.BuildChannelListener[TChannel](BindingContext context)
       at System.ServiceModel.Channels.Binding.BuildChannelListener[TChannel](Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, BindingParameterCollection parameters)
       at System.ServiceModel.Description.DispatcherBuilder.MaybeCreateListener(Boolean actuallyCreate, Type[] supportedChannels, Binding binding, BindingParameterCollection parameters, Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, ServiceThrottle throttle, IChannelListener& result, Boolean supportContextSession)
       at System.ServiceModel.Description.DispatcherBuilder.BuildChannelListener(StuffPerListenUriInfo stuff, ServiceHostBase serviceHost, Uri listenUri, ListenUriMode listenUriMode, Boolean supportContextSession, IChannelListener& result)
       at System.ServiceModel.Description.DispatcherBuilder.InitializeServiceHost(ServiceDescription description, ServiceHostBase serviceHost)
       at System.ServiceModel.ServiceHostBase.InitializeRuntime()
       at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)
       at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
       at System.ServiceModel.ServiceHostingEnvironment.HostingManager.ActivateService(String normalizedVirtualPath)
       at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath)
       --- End of inner exception stack trace ---
       at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath)
       at System.ServiceModel.ServiceHostingEnvironment.EnsureServiceAvailableFast(String relativeVirtualPath)
     Process Name: w3wp
     Process ID: 2352
    
     
    Thanks,
    Chris

    Chris Reid

All Replies

  • Tuesday, November 27, 2012 8:56 PM
     
     

    Hello Chris,

    Ever get an answer on this post ?

    I have to proove to my client that the "allow anonymous" setting is required. So some official documentation from MICROSOFT would go a long way ...

  • Tuesday, November 27, 2012 9:21 PM
     
     

    Hi Danvee,

    I am not aware of any documentation from Microsoft on the topic. However allow anonymous is required.

    Chris


    Chris Reid

  • Wednesday, November 28, 2012 3:29 PM
     
     Proposed

    Hi Chris,

    I reposted your question and got the answer I was looking for :

    http://technet.microsoft.com/en-us/library/hh699686.aspx

    Thanks,

    Dan.