Connecting NAV client remotely

aitorNAV · January 17, 2019, 11:57am

Hi everyone,
I’m trying to connect a windows client to a remote server, and I’m finding issues. It’s my frist time I’m not using clickOnce, so any help will be really appreciated.
The instance in the server is configured like this:

The publi IP for the server is XX.XX.XX.XX

I’m trying to connect from the vlient to this direction:

XX.XX.XX.XX:7046/DynamicsNAV110

And I see this error:

“Cannot find any server in “net.tcp://…” The URL is incorrect or the server os not available actually”

Am I trying correctly? Have I forgot any configuration?

Thnak you very much

PalleA · January 17, 2019, 12:05pm

This has nothing to do with clickOnce at all.

You have to try several things.

Can you ping your public ip-address and get a reponse?

Have you done a port forward on you router so port 7046 is available

Have you changed/created a servicetier so it is running NavUserPassword and NOT windows?

Have you created a databaseuser inside NAV?

Have you created/installed a Certificate on the Server and on the client?

If you have no idea of what I am talking about take a look at the training material Installation & Configuration…

This is no easy task.

aitorNAV · January 17, 2019, 12:18pm

Hi Palle,

Can you ping your public ip-address and get a reponse?

Yes, I can

Have you done a port forward on you router so port 7046 is available

Do you mean to open the firewall? This may be some issue I must talk with the system provider of our client, may be there is some type of redirection…

Have you changed/created a servicetier so it is running NavUserPassword and NOT windows?

Yes, I’m using NavUserPasssword, and the client is installed in different laptops, inside the network. Now the issue is to connect form outside the network

Have you created a databaseuser inside NAV?

Yes, the installation is in use from a longtime ago

Have you created/installed a Certificate on the Server and on the client?

Yes, the certificates are installed into the server, and also in my laptop, where I’m doing the tests

Thanks for your answer Palle, I talk about ClickOnce because untill now, all the remote instalaltions I’ve made hace been with that system, but for this customerI want to connect the windows client. If the URL I’m trying to connect is the correct one, probable I should try to talk with the system provider about the redirections…

PalleA · January 17, 2019, 12:40pm

You could also see if you can do a telnet to the servicetier

If you have not installed the windows 10 telnet client then run a Commandprompt as administrator and type

cd c:\windows\system32\

pkgmgr /iu:”TelnetClient”

Then start Telnet

Open xx.xx.xx.xx 7046

If you get a response the the firewall is open

PalleA · January 17, 2019, 12:44pm

Or use this website [emoticon:c4563cd7d5574777a71c318021cbbcc8]

https://networkappers.com/tools/open-port-checker

PalleA · January 17, 2019, 12:47pm

Or use this sysinternal tool which is my favorite

https://support.microsoft.com/da-dk/help/310099/description-of-the-portqry-exe-command-line-utility

aitorNAV · January 17, 2019, 12:56pm

Thank for your tips Palle,

If i open in telnet, I get error in the conecction. May be I’m doing something wrong, because in the webPage you adde in your second page, I get this:

I’m gonna try to discover how the portqry works…

aitorNAV · January 17, 2019, 1:04pm

I was running the telnet incorrectly. When I do “open” after a while it opens a black windows with “Press any key to continue” . Is this correct??

PalleA · January 17, 2019, 1:21pm

According to the website (picture) then the port is open and you should be able to connect.

Have you trye the EXACT same link onsite (inside the firewall) ?

PalleA · January 17, 2019, 1:21pm

yes.

aitorNAV · January 17, 2019, 2:31pm

What do yo mean whit trying onsite?

If in tha port ccheck web looks good, I should put the xx.xxx.xxx.xx:7046/DynamicsNAV110 URL into the client, am I right?

As I said before, may be this issue will be because the redirections made in the router, I should contact the system provider…

PalleA · January 17, 2019, 6:50pm

I have no Idea if you are right or not, as I have not seen any of your configuration information.

On site means on a computer within the network where server is installed. You started saying that it works in the network…

aitorNAV · January 18, 2019, 9:15am

In the different laptops of the network they are using SRV-DC:7046/DYnamicsNAV110, where SRV-DC is the name of the server

PalleA · January 18, 2019, 9:20am

Cool - Then xx.xx.xx.xx:7046/DynamicsnAV110 should be right. Your problem must be a firewall then.

How does the ClientUserSettings.Config look like?? (Its a hidden file)

You can find it if you go to a commandprompt - type cd \ and enter

then

attrib clientuser*.config /s

aitorNAV · January 18, 2019, 9:39am

I’ve found 2 files, in this folders:

c:\ProgramData\Microsoft\Microsoft Dynamics NAV\110

c:\Users\aitor\AppData\Roaming\Microsoft\Microsoft Dynamics NAV\110

In both files, the Server was with the internal IP. I changed it to the public, the one I was using to connect the client, and the issue persists…

PalleA · January 18, 2019, 10:46am

Its the one in c:\users\aitor… that you have to change…

You have to find the certificate-name and change the word NavServiceCert with it…

aitorNAV · January 18, 2019, 11:40am

This is how the file looks like in my laptop:

<?xml version="1.0" encoding="utf-8"?>
<configuration>
  <appSettings>
    <add key="Server" value="X.XXX.XX.XX" />
    <add key="ClientServicesPort" value="8046" />
    <add key="ServerInstance" value="DynamicsNAV110" />
    <add key="TenantId" value="" />
    <add key="ClientServicesProtectionLevel" value="EncryptAndSign" />
    <add key="UrlHistory" value="" />
    <add key="ClientServicesCompressionThreshold" value="64" />
    <add key="ClientServicesChunkSize" value="28" />
    <add key="MaxNoOfXMLRecordsToSend" value="5000" />
    <add key="MaxImageSize" value="26214400" />
    <add key="ClientServicesCredentialType" value="NavUserPassword" />
    <add key="ACSUri" value="" />
    <add key="AllowNtlm" value="true" />
    <add key="ServicePrincipalNameRequired" value="False" />
    <add key="ServicesCertificateValidationEnabled" value="true" />
    <add key="DnsIdentity" value="NavServiceCert" />
    <add key="HelpServer" value="DESKTOP-S2J1OED" />
    <add key="HelpServerPort" value="49000" />
    <add key="ProductName" value="" />
    <add key="UnknownSpnHint" value="(net.tcp://X.XX.XX.XX:8046/DynamicsNAV110/Service)=NoSpn;" />
  </appSettings>
</configuration>

As you can see, the port is 8046, because I’ve redirected the ports into the router, like this:

And we’re also using navServiceCert…

PalleA · January 18, 2019, 11:52am

Well that looks perfect.

One more option to check… Your certificate. Where is it installed??

Run a command prompt as Administrator

Run mmc.exe

Add snap-in Certificates

check that your certificate is installed in Trusted Root Certificates

aitorNAV · January 18, 2019, 11:59am

In that folder I have NavServiceTRCA. I also have it in revocation list, and in personal folder. It looks that you are also working with the same certificate, so I will say that I’ve used the manual for those certificates to make the installation…

PalleA · January 18, 2019, 12:03pm

Then you have to change the name in the config file to NavServiceTRCA…

The NAV client needs to know what certificate it should use, As you can see you have a lot of certificates installed in Trusted Root Certificates…