« Previous Next »

Thread: IIS Components for ARR Server Farm Routing

Last post 09-04-2009 5:07 PM by anilr. 4 replies.

Average Rating Rate It (5)

RSS

Page 1 of 1 (5 items)

Sort Posts:

  • 09-03-2009, 1:22 PM

    IIS Components for ARR Server Farm Routing

    I'm trying to test ARR to route to our test CRM4 server (as a potential base for a CRM4 server farm). The config is very simple: a single server with a fresh install of Windows 2008 R1 with SP2 running IIS and ARR; and an older server running Windows 2003 R2 running IIS and CRM4. (The CRM4 server has been tested and works fine).

    I just can't get ARR to route ANYTHING to the server farm. I've followed the installation instructions (http://learn.iis.net/page.aspx/482/install-application-request-routing/) and the server farm walkthru (http://learn.iis.net/page.aspx/485/define-and-configure-an-application-request-routing-server-farm/), but ARR won't route to the farm (a netmon cap shows ARR doesn't even try to talk to the server in the farm). I've tried several things: just using the default rule that is automatically created; modifying the rule to pick pieces of the URL (rather than {R:0}); creating rules that hard set the url to http://{farm}/test.txt; even destroying everything and recreating.... Nothing works for farm routing.

    However, redirection works fine: when I switch away from server farm routing to redirection, any rule I set up sends me the the destination server.

    I couldn't find a list of required IIS components (I know the management service is required - ARR didn't install correctly without it; it didn't error - it just didn't show up in IIS). I don't know if there's something missing that server farm routing needs (and redirection doesn't). I've just rebuilt the ARR server so I can try fresh (I tried the v2 beta, and lost the gui to get to the rewrite rules).

    Any help would be appreciated.

    Thanks, -B

  • 09-03-2009, 1:51 PM In reply to

    • anilr
    • Top 10 Contributor
    • Joined on 05-23-2006, 10:13 PM
    • Redmond, WA
    • Posts 2,343

    Re: IIS Components for ARR Server Farm Routing

    Is your server farm named "farm" or "{farm}" - I assume it is the former in which case, you need to get rid of curly braces around the farm name in the rewrite rules.

    Anil Ruia
    Senior Software Design Engineer
    IIS Core Server
  • 09-03-2009, 3:14 PM In reply to

    Re: IIS Components for ARR Server Farm Routing

    Thanks for the quick reply, but sorry I wasn't more specific... I was trying to abbreviate above. The farm is not called {farm} - it's called crmdev1. I just re-installed ARR on the sever, DSV000 (beyond the defaults, I just picked IIS components that seem to make sense: management, .net, logging and tracing, basic auth).

    I created a new farm: CRMDev1 with one server, SRV008. If you go to http://srv008, it will automatically load the CRM interface. Additionally, I've created test.txt on that server which just contains the text: "This is a test" (http://srv008/test.txt loads fine).

    During the last build, trace logging didn't report anything useful and a network capture didn't show any traffic from DSV000 to SRV008. This time, however, trace logging shows: 401 Unauthorized; and netmon shows traffic! 

    I'm running all my tests as an administrator on all systems involved (and an sysadmin within CRM). The default website on DSV000 is set with Anonymous Auth (but I tried enabling Basic for fun, no change). SRV008 is set with Integrated.

    I'm guessing I randomly chose the right IIS components with this install (still would like to see a list tho'). But now I'm running into a security problem. http://srv008/test.txt loads fine, http://dsv000/test.txt reports unauthorized. Do I need to enable Windows Auth on DSV000... or better yet, how can I enable pass-thru auth.

    Thanks. -B

  • 09-03-2009, 4:18 PM In reply to

    Re: IIS Components for ARR Server Farm Routing

    It appears the "quick reply" button is neither quick, nor a reply. Sigh, there are days that make me long to push the off button.

    Thanks for the quick response. The farm is not called {farm} ... I was just abbreviating (and keeping real names out of the post).

    I've reinstalled everything ARR-related. Besides the defaults that go with IIS7, I added Basic Auth, .Net Extensibiliy, Logging tools and Tracing, and the Management Service. This time, the installation of ARR seems to be working. It appears that requests to the ARR servers (with the default rule created by creating a server farm) is now sending traffic to the CRM server (verified via network packet capture). But now I'm getting 401 Unauthorized errors ... even if I'm just trying to access a plain text file on the farm server.

    For the record: dsv000 is the ARR server; srv008 is the CRM server. I've created a text file (test.txt) on the CRM server, and http://srv008/test.txt works; http://dsv000/test.txt fails - unauthorized. I'm an admin on all systems involved in the testing. Enabling Basic Auth and (separately) Windows Auth on dsv000's default website didn't help; windows auth is enabled on srv008's website. NetMon shows traffic between srv008 and dsv000... complete with srv008's "401 unauthorized" response.

    I'd still like to see a list of just which IIS7 components are required, but I'd settle for this working :).

    Any suggestions for passing security?

  • 09-04-2009, 5:07 PM In reply to

    • anilr
    • Top 10 Contributor
    • Joined on 05-23-2006, 10:13 PM
    • Redmond, WA
    • Posts 2,343

    Re: IIS Components for ARR Server Farm Routing

    You need to only have anonymous authentication enabled on the ARR server so that the credentials are sent to your application server rather than used at the ARR server - if this still does not work, please collect failed request tracing logs and e-mail them to me at anil (dot) ruia (at) microsoft (dot) com.

    Anil Ruia
    Senior Software Design Engineer
    IIS Core Server
Page 1 of 1 (5 items)
Microsoft Communities