InfoPath Submit Error - The remote server returned an error: (401) Unauthorized.

Hi,

I m facing same problem.

Yes i have NLB environment. Can any one help me please?

It was working fine when it was deployed on only one front end :(

I need help please

Generally these 401 errors are due to invalid URLs in the InfoPath Data Connections or the fact that the URL inside the Data Connection does not work from the machine where you are opening it from.

I would suggest that you look at the InfoPath Data connections and try to browse to that specific web service from the server where you have the problem. You will most probably see the the same 401 message.

If it is on the server which contains K2, SharePoint and the K2 Web Services, ensure that you have the DisableLoopbackCheck registry key set on the server.

You can also check whether your web applications use NTLM or Kerberos (Negotiate). If all components are on one server and K2 is set to use Pass-Through Authentication, ensure your web applications are all set to use NTLM authentication. If you have a distributed environment, ensure K2 is using Pass-Through Authentication or go through all the Kerberos authentication setup steps to ensure that you have end-to-end authentication set up correctly.

I hope these pointers help!

at the first i disable the loopback and every thing was good ,, 

but now the site is not opening from the front ends servers ,, but the loop back is disable ,, i dont know what is the problem ,, 

till now i have this problem ,, 

hayfa,, try to disable the loopback and tell me what will happen with you ,, it worked for me for 2 weeks then the problem has been back.

a great think for your response.

please where i must disable the loopback, , in k2 server or on my 2 web front ends?

1. Click Start, click Run, type regedit, and then click OK.

2. In Registry Editor, locate and then click the following registry key:
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa

3. Right-click Lsa, point to New, and then click DWORD Value.

4. Type DisableLoopbackCheck, and then press ENTER.

5. Right-click DisableLoopbackCheck, and then click Modify.

6. In the Value data box, type 1, and then click OK.

7. Quit Registry Editor, and then restart your computer

Thanks hayfa,,,

can you before you disable it,  to check if you can access any sharepoint page from the WFE servers ?!

then disable  it from all the WFE servers  ,,  

then check if you can access sharepoint page ,, 

then try to submit the K2 processes ,, 

Hi,

It is sending data :) a great thank for your , i'm very pleased and i hope it does aloways, not only for 2 weeks as in your case.

Unfortunatly, i have an other issue, hoping you can help me.

I can not open viewflow from any server. It is working only from k2 server, and the famous error appears : HTTP Error 401. The requested resource requires user authentication.

users trying to open viewflow are authorized to do that

Is there any problem with connexion from WFE to K2server webservice ? 

Do you have Kerberos all setup properly?  Is View flow the only thing they are having issues with?  One thing to look at is to open K2server service in console mode and have someone try to do viewflow then watch the messages in console to see if it registers an anonymous connection, If it does then Kerberos is your propblem

thank you for your reply, but i m not using kerberos, i m using NTLM windows authentication .

you are welcome :) .. 

by NTLM you mean pass-throw authentication right ?!

it seems network related issue , can you check the following :- 

1) fire wall is disabled .

2) no proxy is configured

3 ) if there antivirus , make sure that there is rule for k2.

if that did not fix it , try the following :- 

1) run the configuration analysis , this should check the authentication in the K2 web application and the app pool account.

2 ) go to Central Admin ->System setting -> Manage farm solutions, and retract then deploy the following :-

        - core component 

        - workflow core 

        - reporting webpart

hope this helps.. 

thank you for the interest you give to my questions.

In fact, in my K2 server, K2 IIS application pool was running as a configured account. i have to change it to Network Service and it works fine.

Thanks a lot (f)

To me that really says Kerberos problems with SPN's as built in accounts will create their own spns and thus work fine.  But named accounts will not. 

you are most than welcome ,, 

thats weird ,, by change it to network service account this should crash the K2 communication not fix it ,, hehe , 

any way if that solves the problem keep it like this ,, :)

chrisg ,, yeah it seems true , but she is using pass-throw authentication ,, it seems the network service account have access to sharepoint and k2 ,, i dont know how and who did it :S

cheers 

Hi everyone,

this problem is appearing again : (

i find that the pool application is running with poolIdentity account ( i have no idea about how it is changed).

When i set it to "Network service", the error persist.

Any Idea?

first run the k2 service in console mood , and check if the MSMQ message at end pubes out

after this , submit the form and see what its gives you ,, 

the problem is back :S ,,,,

the loopback still disabled ,,

every thing was wroking fine ,, then sudenly its back ,,

did you mange to solve this issue ?!!!! are you sure that the service account has solved this issue ?!

i found another thing ,,, i have WFE server ,, when i submit the form from it ,, the process started normaly but when i submit the form from the Application server ( same K2 server ) i got the error any idea !!!!

It is very strange, we are returning for
the same thread in the same day.

Sorry, but I have not an answer for your question. I don't understand
what you mean by "Application server (same K2)" . Does your
application turn on the same server as k2?

I have a new problem :(

I reported the same config and same authentication Mode... on my
development environment and production environment. Recently i deployed K2
process in production Environment. I disabled loopbackcheck and all things are
the same. forms open correctly and infopath sends data successfully but when i
open view flow from WFE, i m receiving this error :"HTTP Error 401. The
requested resource requires user authentication."

it was working fine until i run the configuration K2
setup to enable SmartAction.  and when displaying  the
configuration analysis, all things are green.

When googling, i found reply talking about 'Enable Kernel" but it
is enabled in development environment and it is working fine.

Any idea.

Thank you.

ok now i will start to lose my mind ,,, 

yesterday ,, all machines could submit any form successfully i did the following to for that ,, 

1) i have two WFE servers i activate the K2 features only on server A, it works the only thing was that i cant submit the form from the k2 server other than that it ok.

but when i opened the the k2 files under the 14 hive just to see which file was causing the problem( last time i will try understand k2 :D) 

I notice that the file version is not the same in Server A and B, so the trivial thing is to unify them ,,, so i run the activation feature for k2 from the central admin , after it finished. 

the problem is back and on all servers ,,,  :S

and for hayfa.gl 

Application server : is the sharepoint application server , i installed the k2 server at the same server so its (application server (same K2)) :) 

i think you have different issue , open the infopath in the client mood , and try to submit ,, whats happen. ???

then does this error appear when u press the smartAction or when any form submit. ????

what was ur servers topology ?!