Before I start I would like to clarify that I am setting up a test environment to configure & test WebSync before carrying out a deployment at a client. My machines are all running SQL Server 2008 R2 and are configured as follows:
SQLREPLMASTER = Publisher with MyTestDB and a publication PubMyTestDB
SQLREPLDIST = Distributor, IIS 6 configured using the "Configure Web Sync" option from SSMS
SQLREMOTE1 = Subscriber with MyTestDB using a Merge Pull Subscription with a hostname set for a data partition
I have added my windows user email@example.com to the publisher, distributor and Publication Access List and am logging into windows as that user on SQLREMOTE1
I created a ssl cert using the following command line:-
selfssl /t /v:7 /p:9443
I was able to setup a non-Anonymous subscription on SQLREMOTE1 using both RMO and SSMS which works fine with the internet URL of https://sqlrepldist:9443/replication/replisapi.dll and using Windows Auth (I have setup Kerberos delegation) although I did have to trust the cert first on SQLREMOTE1.
I now need to test that a subscriber can synchronise when he doesn't have access to the publisher (since it's behind the firewall) so I have added an entry into the DNS server for sql.mydomain.com with a A record pointing at the static IP of SQLREPLDIST. I have also recreated the subscription using the internet url of: https: sql.mydomain.com:9443/replication/replisapi.dll however it complained bitterly about the cert so I had to recreate that too using this command line and trusted as before:-
selfssl /t /v:7 /p:9443 /n:CN=sql.mydomain.com
When I try to sync I get the following error message(s):-
The response message was received from 'https: sql.mydomain.com:9443/ Replication/replisapi.dll' and is being processed. The merge process could not connect to the Publisher 'SQLREPLMASTER:MyTestDB'. Check to ensure that the server is running.
The merge process could not connect to the Publisher 'SQLREPLMASTER:MyTestDB'. Check to ensure that the server is running.
The process could not connect to Publisher 'SQLREPLMASTER'. Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
Switching the internet URL back to the original one and recreating/ retrusting the cert works so I know it's nothing to do with my permissions or the windows accounts that the agents are running under.
Can anyone shed any light on this? It's got me stumped!