Microsoft KB Archive/916168

From BetaArchive Wiki

Article ID: 916168

Article Last Modified on 6/12/2006



APPLIES TO

  • Microsoft Dynamics CRM 3.0




SYMPTOMS

When you try to access Reports in Microsoft Dynamics CRM 3.0, you receive the following error message:

Error An error has occurred. For more information, contact your system administrator.

If the DevErrors value is set to "On" in the Web.config file, you receive the following error message:

With Dev Errors: Server Error in '/' Application.
The request failed with HTTP status 401: Unauthorized.

CAUSE

This problem occurs because the authentication method that is used for the Microsoft SQL Server Reporting Services Web site does not request the Kerberos version 5 protocol.

RESOLUTION

To resolve this problem, follow these steps:

  1. Perform the additional setup tasks that are required for Reporting Services. To obtain the instructions for these additional setup tasks, visit the following Microsoft Web site:
  2. Set the correct NTAuthenticationProviders values in the Microsoft Internet Information Services (IIS) metabase for the Reporting Services Web site. To do this, follow these steps:
    1. Set the correct NTAuthenticationProviders values at the root level. To obtain the instructions for setting the correct NTAuthenticationProviders values, click the following article number to view the article in the Microsoft Knowledge Base:

      215383 How to configure IIS to support both the Kerberos protocol and the NTLM protocol for network authentication

    2. Determine the Web site ID for the Reporting Services Web site. To do this, follow these steps:
      1. Start IIS Manager.
      2. Click Web Sites, and then note the ID of the Web site that is hosted by the CRM server on which Reporting Services is installed.
    3. Open a Command Prompt window, and then type the following:

      SystemDrive:\Inetpub\AdminScripts

    4. Use the Identifier value to set the NTAuthenticationProviders value for the Web site level.

      In the following code example, SRS_WEB_SITE_ID represents the Web site ID of the Reporting Services Web site.

      cscript adsutil.vbs set w3svc/ <SRS_WEB_SITE_ID> /NTAuthenticationProviders "Negotiate,NTLM"
      cscript adsutil.vbs set w3svc/NTAuthenticationProviders "Negotiate,NTLM"
       


STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

Steps to reproduce the problem

  1. Start IIS Manager.
  2. Click Web Sites, and then note the ID of the Web site that is hosted by the CRM server on which Reporting Services is installed.
  3. Open a Command Prompt window, and then type the following:

    C:\Inetpub\AdminScripts

  4. At the command prompt, type the following:

    cscript adsutil.vbs set w3svc\WebSiteID\ntauthenticationproviders "NTLM"

    NoteWebSiteID represents the Web site ID that you noted in step 2.
  5. Access Reports in Microsoft CRM.


REFERENCES

For more information about how to troubleshoot Kerberos delegation, visit the following Microsoft Web sites:

For more information about how to troubleshoot Kerberos-related issues in IIS, click the following article number to view the article in the Microsoft Knowledge Base:

326985 How to troubleshoot Kerberos-related issues in IIS


For more information about how to enable the DevErrors value in the Web.config file, click the following article number to view the article in the Microsoft Knowledge Base:

857192 How to modify the Web.config file to show more detailed error messages in Microsoft CRM



Additional query words: SRS

Keywords: kberrmsg kbtshoot kbprb kbmbsmigrate kbmbsreports KB916168