Answered by:
Authentication issue after upgrade to CRM 2011

Question
-
Hello,
I have an authentication issue after in-place upgrade from CRM 4.0 to CRM 2011. Some DYNAMIC components of CRM form cannot be read from IIS (CSS, JS…), but static components (icons, basic layout) including data are read succesfully.
It doesn't matter if UserName and Password are entered into dialog corretly - data are read OK, but CSS and JS are still missing.
Authentication dialog appears, when IE reads page components. I used Fiddler tool and found, that there are problems with dynamic components, for example:
GET /VTPUP/%7B634716580660000000%7D/WebResources/Application_ribbon.js HTTP/1.1
GET /VTPUP/%7B634716580660000000%7D/WebResources/Ribbon_main_system_library.js HTTP/1.1
The HTTP result is
HTTP Error 401 - Unauthorized: Access is denied (and this is why authentication dialog appears while reading form)
I turned on platform tracing and found interesting lines
[2012-05-04 14:49:43.090] Process: w3wp |Organization:00000000-0000-0000-0000-000000000000 |Thread: 39 |Category: Platform |User: 00000000-0000-0000-0000-000000000000 |Level: Verbose | MapOrgEngine.GetOrganizationFromPath
>MapOrgEngine: Retreived the OrgId[{3CD033BC-2695-E111-86CA-0050569A2D5F}] for URL[http://rup-svr-vtpup:5555/VTPUP/XRMServices/2011/Organization.svc].
[2012-05-04 14:49:43.093] Process: w3wp |Organization:00000000-0000-0000-0000-000000000000 |Thread: 39 |Category: Platform |User: 00000000-0000-0000-0000-000000000000 |Level: Warning | MapOrgUtility.SetOrganizationInformation
>MapOrgEngine: Unable to retrieve the OrgId for URL[http://rup-svr-vtpup:5555/VTPUP/XRMServices/2011/Organization.svc].
It's confusing - GetOrganizationFromPath returns OrgId and SetOrganizationInformation result is "Unable to retrieve the OrgId ".
I tried to install the latest Rollup and to Repair installation with no success.
CRM and SQL are on the same box.
Any ideas?
Thanks
Jiri
Friday, May 4, 2012 1:18 PM
Answers
-
Thank you for your answers. I tried reinstall with no success. Check SPN - no success.
Today, I checked thread
http://social.microsoft.com/Forums/en/crmdeployment/thread/601c02cf-03f2-4ce9-b673-84b3803766f7
I suppose, "magic button" was in "Kernel Mode Authentication - enable".
Now it works properly...
Jiri
- Marked as answer by Jiri Richtr (ORTEX) Wednesday, May 9, 2012 6:16 AM
Wednesday, May 9, 2012 6:15 AM
All replies
-
I would maybe perform a fresh install of CRM 2011 and re-import your old org to upgrade it again, but do use the updated media as you have suggested.
Jamie Miley
Check out my about.me profile!
http://mileyja.blogspot.com
Linked-In Profile
Follow Me on Twitter!Friday, May 4, 2012 1:48 PMModerator -
This might be SPN issue.
Check if there are any duplicate SPN's are located, if there then remove it from the server.
setspn -x to check the duplicate SPN's in the server.
If the SPN is not created with the machine name then you need to create the SPN record using the below syntax.
setspn -a http/servername servername
Thanks & Regards,
Khaja Mohiddin
http://www.dynamicsexchange.com
http://about.me/KhajaMohiddinFriday, May 4, 2012 4:08 PM -
Thank you for your answers. I tried reinstall with no success. Check SPN - no success.
Today, I checked thread
http://social.microsoft.com/Forums/en/crmdeployment/thread/601c02cf-03f2-4ce9-b673-84b3803766f7
I suppose, "magic button" was in "Kernel Mode Authentication - enable".
Now it works properly...
Jiri
- Marked as answer by Jiri Richtr (ORTEX) Wednesday, May 9, 2012 6:16 AM
Wednesday, May 9, 2012 6:15 AM