Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Setting up SPN for SSRS in a CRM load balance environment RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I'm getting this exception randomly in a CRM load balance LIVE environment when running Reports from CRM.

    System.ServiceModel.Security.SecurityNegotiationException: A call to SSPI failed, see inner exception. System.Security.Authentication.AuthenticationException: A call to SSPI failed, see inner exception.System.ComponentModel.Win32Exception: The target principal name is incorrect

    So my next step is update SPNs for SSRS and CRM domain accounts running its services. In an environment as:

    • 2 CRM servers: live-srv-crm01 ; live-srv-crm02
    • 2 SSRS servers: live-srv-ssrs01 ; live-srv-ssrs02

    FQDN's servers follow this syntax: live-srv-crm01.companyname.azure

    I have NOT any SPN setup for the domain accounts running Reporting Services service in any of the SRSS servers.

    My SPN for the account running CRM App pool are:

    http/live-srv-crm01.companyname.com

    http/live-srv-crm01

    http/internalcrm.companyname.com

    http/internalcrm

    1. Will troubleshoot this setting up SPN for each domain account running Reporting Services service?

    http/live-srv-ssrs01

    http/live-srv-ssrs01.companyname.azure 

    http/live-srv-ssrs02

    http/live-srv-ssrs02.companyname.azure

    1. Or would I need to update SPNs for domain account running CRM app pool?

    http/live-srv-crm-01.companyname.azure

    http/live-srv-crm02

    http/live-srv-crm02.companyname.azure

    1. To test if executing step 1 works, do I need to iisreset?
    Thursday, November 20, 2014 12:57 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    You need to Set up SPn on CRM Application server.

    Thanks!

    Kalim Khan

    • Marked as answer by RDevelopment Friday, December 5, 2014 3:58 PM
    Friday, November 21, 2014 5:46 PM

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

    Is this FetchXml report? I have faced this before. 

    In FetchXML based reports we are getting this error. This is caused because the FetchXML query needs to be able to resolve to a HTTP SPN (service principal names) in order to fully communicate between the server. In a scenario where the Microsoft Dynamics CRM application pool is being run by a domain account, the query will be looking for a HTTP SPN that does not exist by default.

    Check more below link.

    http://gotcrm.blogspot.co.uk/2013/01/crm-2011-rsprocessingaborted-error-when.html

    Thanks! 

    Kalim Khan

    • Proposed as answer by Kalim Khan Thursday, November 20, 2014 3:33 PM
    Thursday, November 20, 2014 1:19 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks.

    Do these updates need and iisreset for changes to make effect?

    Thursday, November 20, 2014 1:52 PM
  • Question
    Sign in to vote
    1
    Sign in to vote

    Hi,

    IISRest would not be required. 

    Thanks!

    Kalim Khan

    Thursday, November 20, 2014 3:33 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    So, I would need set up SPNs for CRM too?

    Or will it work just adding SPN for SSRS?

    Friday, November 21, 2014 8:59 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    You need to Set up SPn on CRM Application server.

    Thanks!

    Kalim Khan

    • Marked as answer by RDevelopment Friday, December 5, 2014 3:58 PM
    Friday, November 21, 2014 5:46 PM