locked
CRM NLB on windows 2008 RRS feed

  • Question

  • Hey All,
    I've got a project where I need to set up my crm servers in a NLB.  I've found some documentation on setting the SPN for the nlb cluster name - host/crm.clustername.com but that does not work.  I have edited the adwebapplication and adsdkroot entries in the config db as well.

    If I browse to an individual server or on a server crm works just fine with out the changes made.

    Thanks in advance

    Robert
    Monday, October 5, 2009 7:51 PM

Answers

All replies

  • Hi Robert,

    CRM 4 will run ok on an load balanced environment, but setup can be a bit tricky.  There are a many items to consider such as crm role deployments, sql cluster deployment, sql cluster deployment type (active passive / active active), load balancing type, etc.   If the deployment is not planed careful downtime will be much higher than a non-clustered environment.  Post a bit more info on what you are trying to solve and we'll see if we can help.

    Alex Fagundes - www.PowerObjects.com
    Monday, October 5, 2009 9:02 PM
  • Thanks for the response Alex.

    I've already finsihed out the sql cluster and nlb for reporting services and those parts are working fine.  Now its just the part with load balancing crm.  After I add the SPN for the loadbalanced url and browse to it, i just get the windows logon challenge over and over until it finally says not authorized.  on the client I see kerberos event id 4 and on the server I see

    Log Name:      Security
    Source:        Microsoft-Windows-Security-Auditing
    Event ID:      4625
    Task Category: Logon
    Level:         Information
    Keywords:      Audit Failure
    User:          N/A
    Description:
    An account failed to log on.

    Subject:
     Security ID:  NULL SID
     Account Name:  -
     Account Domain:  -
     Logon ID:  0x0

    Logon Type:   3

    Account For Which Logon Failed:
     Security ID:  NULL SID
     Account Name:  
     Account Domain:  

    Failure Information:
     Failure Reason:  Unknown user name or bad password.
     Status:   0xc000006d
     Sub Status:  0xc000006a

    Detailed Authentication Information:
     Logon Process:  Kerberos
     Authentication Package: Kerberos
     Transited Services: -
     Package Name (NTLM only): -
     Key Length:  0

    Thanks again.

    Robert

    Tuesday, October 6, 2009 10:57 AM
  • Just wanted to post, in case anyone else was seeing this:

    http://support.microsoft.com/kb/896861

    Thanks,

    Tracy

    Monday, August 16, 2010 8:56 PM