locked
http error 500 when users from trusted domain connect to CRM 4.0 RRS feed

  • Question

  • all my users from trusted domain get http error 500 when they try to connect to crm 4.0
    last week it worked fine.
    no errors in event log
    trust between domains works

    any thoughts?

    Monday, May 25, 2009 9:07 PM

Answers

  • How are they trying to get there?  alias, server name, etc?

    If all users from a trusted domain are having trouble getting there, it might be a dns issue.  For example, if your alias is http://crm, have them try the fully qualified domain name, http://crm.domain.com
    also try with ip address and environment name, like http://192.168.5.200/crm
    See if any of that works.

    If it does, that would tell me there is some kind of dns issue for these users on the trusted domain. 
    Monday, May 25, 2009 10:45 PM
    Moderator
  • HTTP 500 is typically an "internal server" error coming from IIS.  There really should be errors in the event log.  Can you turn on CRM Tracing as well, it is possible this is coming from the CRM ISAPI filter.  I have seen this error before when Kerberos was not working correctly.  Try enabling Kerberos logging to see if you can get better error details.

    http://support.microsoft.com/kb/262177

    || Aaron Elder - Dynamics CRM MVP || http://www.ascentium.com/blog/crm
    Tuesday, June 2, 2009 4:10 PM
  • I found the problem.
    The problem is in AD connections or more precises in the option witch AD my CRM server decided to use for Trusted DC Name.
    We have two DC's and when my CRM server decided to connect to one DC as Trusted DC then everithing works and when to another then not.

    How to hint to a server to pick up as a trusted DC a concrete DC a don't know yet.
    But I have foun a rpoblem :)
    • Marked as answer by rseero Thursday, August 13, 2009 2:39 PM
    Thursday, August 13, 2009 2:39 PM

All replies

  • How are they trying to get there?  alias, server name, etc?

    If all users from a trusted domain are having trouble getting there, it might be a dns issue.  For example, if your alias is http://crm, have them try the fully qualified domain name, http://crm.domain.com
    also try with ip address and environment name, like http://192.168.5.200/crm
    See if any of that works.

    If it does, that would tell me there is some kind of dns issue for these users on the trusted domain. 
    Monday, May 25, 2009 10:45 PM
    Moderator
  • we connect using server name
    ip also doesn't work also
    http://servername - des not work

    interesting is that if I connect to FQN the username pass will be asked if I write the trusted domain/whatever name I get immediately http 500 if I add some other domain/otheruser I'll be re asked for uservame and pass again
    Tuesday, May 26, 2009 6:54 AM
  • HTTP 500 is typically an "internal server" error coming from IIS.  There really should be errors in the event log.  Can you turn on CRM Tracing as well, it is possible this is coming from the CRM ISAPI filter.  I have seen this error before when Kerberos was not working correctly.  Try enabling Kerberos logging to see if you can get better error details.

    http://support.microsoft.com/kb/262177

    || Aaron Elder - Dynamics CRM MVP || http://www.ascentium.com/blog/crm
    Tuesday, June 2, 2009 4:10 PM
  • Thank you for suggestions

    I’ll look into this (CRM log showed nothing) but haven’t had to much time to look into it.

    I have noticed that the problem goes away after SQL server restart and comes back after some time. (then I restart SQL again)

    I hope to have some time time to look more deeply into this at the end of this week.

    Interesting is that system works for others but not for users from trusted domain…

    Tuesday, June 9, 2009 5:13 PM
  • I found the problem.
    The problem is in AD connections or more precises in the option witch AD my CRM server decided to use for Trusted DC Name.
    We have two DC's and when my CRM server decided to connect to one DC as Trusted DC then everithing works and when to another then not.

    How to hint to a server to pick up as a trusted DC a concrete DC a don't know yet.
    But I have foun a rpoblem :)
    • Marked as answer by rseero Thursday, August 13, 2009 2:39 PM
    Thursday, August 13, 2009 2:39 PM