Answered by:
Setting up SPN for SSRS in a CRM load balance environment

Question
-
I'm getting this exception randomly in a CRM load balance LIVE environment when running Reports from CRM.
System.ServiceModel.Security.SecurityNegotiationException: A call to SSPI failed, see inner exception. System.Security.Authentication.AuthenticationException: A call to SSPI failed, see inner exception.System.ComponentModel.Win32Exception: The target principal name is incorrect
So my next step is update SPNs for SSRS and CRM domain accounts running its services. In an environment as:
- 2 CRM servers:
live-srv-crm01 ; live-srv-crm02
- 2 SSRS servers:
live-srv-ssrs01 ; live-srv-ssrs02
FQDN's servers follow this syntax:
live-srv-crm01.companyname.azure
I have NOT any SPN setup for the domain accounts running Reporting Services service in any of the SRSS servers.
My SPN for the account running CRM App pool are:
http/live-srv-crm01.companyname.com
http/live-srv-crm01
http/internalcrm.companyname.com
http/internalcrm
- Will troubleshoot this setting up SPN for each domain account running Reporting Services service?
http/live-srv-ssrs01
http/live-srv-ssrs01.companyname.azure
http/live-srv-ssrs02
http/live-srv-ssrs02.companyname.azure
- Or would I need to update SPNs for domain account running CRM app pool?
http/live-srv-crm-01.companyname.azure
http/live-srv-crm02
http/live-srv-crm02.companyname.azure
- To test if executing step 1 works, do I need to
iisreset
?
Thursday, November 20, 2014 12:57 PM - 2 CRM servers:
Answers
-
Hi,
You need to Set up SPn on CRM Application server.
Thanks!
Kalim Khan
- Marked as answer by RDevelopment Friday, December 5, 2014 3:58 PM
Friday, November 21, 2014 5:46 PM
All replies
-
Is this FetchXml report? I have faced this before.
In FetchXML based reports we are getting this error. This is caused because the FetchXML query needs to be able to resolve to a HTTP SPN (service principal names) in order to fully communicate between the server. In a scenario where the Microsoft Dynamics CRM application pool is being run by a domain account, the query will be looking for a HTTP SPN that does not exist by default.
Check more below link.
http://gotcrm.blogspot.co.uk/2013/01/crm-2011-rsprocessingaborted-error-when.html
Thanks!
Kalim Khan
- Proposed as answer by Kalim Khan Thursday, November 20, 2014 3:33 PM
Thursday, November 20, 2014 1:19 PM -
Thanks.
Do these updates need and iisreset for changes to make effect?
Thursday, November 20, 2014 1:52 PM -
Hi,
IISRest would not be required.
Thanks!
Kalim Khan
Thursday, November 20, 2014 3:33 PM -
So, I would need set up SPNs for CRM too?
Or will it work just adding SPN for SSRS?
Friday, November 21, 2014 8:59 AM -
Hi,
You need to Set up SPn on CRM Application server.
Thanks!
Kalim Khan
- Marked as answer by RDevelopment Friday, December 5, 2014 3:58 PM
Friday, November 21, 2014 5:46 PM