Posts

Showing posts from November, 2012

CRM 2011 Kerberos Troubleshooting - Report Wizard FetchXml Related Issue

Hi all, Recently one of our clients had issue when running reports created through the report wizard. After some investigations, it turned out that the FetchXMLDataSource is having some connection issue with an error log recorded something like:  A call to SSPI failed, see inner exception. This is surely a kerberos authentication issue. After a few good hours reading documentations on how to set up proper kerberos for CRM 2011, I managed to get all working nicely. I summarised all what I've done so that it may help you down the track: Check the CRMAppPool service account whether you are using NetworkService or a domain account. The best practice is to use custom domain account (separate from your CRM admin account as well). In my case I have something like domain\CRM2011APP. If you set this up during installation it should at least be in the PrivUserGroup and PrivSqlServerGroup as well. Open your AD manager and check if that account has kerberos delegation enabled (On de