Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Before I start I would like to clarify that I am setting up a test environment to configure & test WebSync before carrying out a deployment at a client. My machines are all running SQL Server 2008 R2 and are configured as follows:

SQLREPLMASTER = Publisher with MyTestDB and a publication PubMyTestDB
SQLREPLDIST = Distributor, IIS 6 configured using the "Configure Web Sync" option from SSMS
SQLREMOTE1 = Subscriber with MyTestDB using a Merge Pull Subscription with a hostname set for a data partition

I have added my windows user richard@mydomain.local to the publisher, distributor and Publication Access List and am logging into windows as that user on SQLREMOTE1

I created a ssl cert using the following command line:-

selfssl /t /v:7 /p:9443

I was able to setup a non-Anonymous subscription on SQLREMOTE1 using both RMO and SSMS which works fine with the internet URL of https://sqlrepldist:9443/replication/replisapi.dll and using Windows Auth (I have setup Kerberos delegation) although I did have to trust the cert first on SQLREMOTE1.

I now need to test that a subscriber can synchronise when he doesn't have access to the publisher (since it's behind the firewall) so I have added an entry into the DNS server for with a A record pointing at the static IP of SQLREPLDIST. I have also recreated the subscription using the internet url of: https: however it complained bitterly about the cert so I had to recreate that too using this command line and trusted as before:-

selfssl /t /v:7 /p:9443 /

When I try to sync I get the following error message(s):-

The response message was received from 'https: Replication/replisapi.dll' and is being processed. The merge process could not connect to the Publisher 'SQLREPLMASTER:MyTestDB'. Check to ensure that the server is running.
The merge process could not connect to the Publisher 'SQLREPLMASTER:MyTestDB'. Check to ensure that the server is running.
The process could not connect to Publisher 'SQLREPLMASTER'. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.

Switching the internet URL back to the original one and recreating/ retrusting the cert works so I know it's nothing to do with my permissions or the windows accounts that the agents are running under.

Can anyone shed any light on this? It's got me stumped!

share|improve this question
I was only allowed to post one hyperlink but there should be three – irtimaled Oct 7 '10 at 22:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.