locked
Application Request Routing (ARR 2.5) and CRM 2011 IFD - help ?!! RRS feed

  • Question

  • 1.

    Our CRM 2011 IFD from outside the firewall works fine when we go directly to the CRM server, access is via:

    https://dynamics.domain.com:444

    Ports 443 and ports 444 have to be open for this to work, and it does work from anywhere.

    2.

    Can't get ARR (Application Request Routing 2.5) to do the same thing.

    The default website has a binding for ports 444 on https, and 80 for http.

    Adding a server farm to ARR, on https port 444:

    CRM:444 -> Wildcard pattern 'dynamics.domain.com:444', condition Match Any for {HTTPS} Matches the pattern 'dynamics.domain.com:444'

    And a server farm to ARR, on https port 443:

    CRM:443 -> Wildcard pattern 'dynamics.domain.com', condition Match Any for {HTTPS} Matches the pattern 'dynamics.domain.com'

    Enable SSL offlading is disabled for all of the above.

    Have also added in sts1, auth, org, and dev, which are the prefixes used when configuring dynamics.  All are set to 'Match Any'.

    Action-> Route to Server farm->Scheme https:, Server farm: CRM, Path: '/{R:0}

    Firewall is of course open to 444 and 443.

    3.

    With the ARR settings in (2), and from outside the firewall, 'https://dynamics.domain.com:444' lands at the default website (IIS7 landing page), not the dynamics site.

    4.

    Using ARR as in (2), from outside the firewall, specifying:

    https://dynamics.domain.com:444/orgname/main.aspx

    yields:The resource cannot be found. Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable.  Please review the following URL and make sure that it is spelled correctly.

    5.

    https://dynamics.domain.com/adfs/fs/federationserverservice.asmx

    is accessible from outside the firewall when going directly to the dynamics machine.  when going through ARR it is not.

    Any help is appreciated.





    • Edited by HMMAAA Monday, April 9, 2012 8:53 PM
    Monday, April 9, 2012 8:07 PM

All replies

  • Did you get a response?  I am using an IFD on premise with adfs auth, and when the token passes back, the entire header is being passed through the address bar and erring out.
    Thursday, April 12, 2012 8:12 PM
  • Nope.  Gave up using ARR, did a complete reinstall using ports 441 and 444, and am now going directly from the firewall to the CRM.  Can't find any guidance on using CRM 2011 IFD with ARR.  I'm sure it's doable, but don't know how and can't burn the time to try to figure it out.

    We have Exchange on premise so there's no problem with using ARR for that and everything else web related.  Would have liked to have had everything through ARR.  Maybe someday someone will figure it out.

    Thanks.

    • Proposed as answer by HHMMA Tuesday, May 8, 2012 5:28 PM
    Tuesday, May 8, 2012 5:26 PM