Symptoms

K2 to CRM4 Kerberos issue
 

Diagnoses

Recently we had to restore the K2 blackpearl VM that includes K2 blackpearl, K2 Smartforms, and also hosted the SQL server instance containing the K2 database.

I have a weird issue presenting itself here. We are starting to see issues with the K2 SmartOjbect tester when running from any pc that is not the K2 server (regardless of account logged in). None of our service accounts are locked and this was working before. However now I am getting 401: Unauthorized errors when trying to call CRM smartobject methods via the K2 smartobject tester (locally) - I have no issues when running the smartobject test from the server.
 

Resolution

We added another HTTP SPN (a non-fully qualified one) for the CRM service account and then configured constrained delegation with protocol transition between the K2 service account and CRM service account this resolved the 401 error that we were seeing when executing the Smartobject Service Tester tool from a client machine.