CRM 2011 Service Principal Names (SPN) generation and usage

When we implement CRM 2011 we always hear or read the term Service Principal Name (SPN) for accurate Kerberos Authentication; however, sometimes understanding Kerberos Authentication is time consuming and needs experience. Sean has written a detailed blog explaining Kerberos Authentication here. Identifying the right SPNs can be daunting and it would be really nice if…

9

Using Fiddler To Check For Kerberos Auth

Frequently I see customers trying to verify if their Kerberos settings (http://bit.ly/QOEvLF) are truly working or not.  In the past we’ve used tools such as NetMon, Kerbtray, Klist, and others to verify this however, recently I found a very simple way to test if Kerberos auth is working or not using Fiddler – a very…

8

Kerberos in Load Balanced Environments

A very common topic we tend to get many questions on is delegation and troubleshooting delegation usually via one of the many topics that impact this: SPN’s, Kerberos, Load Balancers, 401 errors, etc. Many times detailed environment knowledge is required to make any conclusions, so rather than documenting a complex flowchart that covers every possible…

23

How to Decrease 401 Responses in CRM Web Traffic

When analyzing traffic from a web application such as CRM you may notice that many of the requests result in a 401 (Access Denied) before they get the 200 Success response. This is a normal authentication sequence for Kerberos or NTLM. Internet Explorer will first attempt anonymous access before any type of authentication attempts. Some…

1

How to Decrease 401 Responses in CRM Web Traffic

When analyzing traffic from a web application such as CRM you may notice that many of the requests result in a 401 (Access Denied) before they get the 200 Success response. This is a normal authentication sequence for Kerberos or NTLM. Internet Explorer will first attempt anonymous access before any type of authentication attempts. Some…

2