Claims Authentication Error connecting to BCS - but we're using Windows Authentication

Question

We currently have an External List with a SQL Server SProc as a source in a SharePoint 2010 site. It has been working great for months now. I need to make a change to the External Content Type - and I have made changes in the past - but now strange things
are happening.
I can't view the external content type (or any) in SPD.  I can create a new Secure Store Service Target Application in SPCentralAdmin and everything seems fine, but I can't consume the application in SPD.  I get an error that BCS has rejected the
request.  This is new and curious; I'm a Farm Administrator.
Looking at the logs, I find I get a Claims Authentication error that my ID can't be found (the error is below).  This is also new and is very, very curious as we're not using Claims authentication for any of our sites.  They all use Windows authentication. 
I am also getting recent reports from users who are repeatedly challenged for credentials and wonder if this is related.
In my research, I've found suggestions from starting the CWTS Service (I was dubious, I can start the service, and it doesn't resolve the problem) to setting Metadata Store Permissions in SPCentralAdmin (I was again dubious as I'm a farm administrator -
and I get the same error when I try to make this assignment!)  So I'm at a loss.
Here is the error (the X'd out information was correct in the trace):
SPSecurityContext.WindowsIdentity: Could not retrieve a valid windows identity for NTName='XXXXX\XXXXXX', UPN='[email protected]'. UPN is required when Kerberos constrained delegation is used. Exception: System.ServiceModel.EndpointNotFoundException:
There was no endpoint listening at net.pipe://localhost/s4u/022694f3-9fbd-422b-b4b2-312e25dae2a2 that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. ---> System.IO.PipeException:
The pipe endpoint 'net.pipe://localhost/s4u/022694f3-9fbd-422b-b4b2-312e25dae2a2' could not be found on your local machine.      --- End of inner exception stack trace ---    Server stack trace:     
at System.ServiceModel.Channels.PipeConnectionInitiator.GetPipeNam...
We're not using Kerberos at all. We're using good, old-fashioned Windows Authentication.  The only changes made to the platform recently have been updates.  The error could, of course, be erroneous and I may be charging down the wrong path. 
But although I find many links when I Bing the error, all the links pertain to sites using Claims authentication - even the Error Category in my log is "Claims Authentication" - but we're not using Claims Authentication...
Again, any help at all will be appreciated.  Thanks!

Answer 1

Hi Kevin,
From the error message, we might be missing user permissions to the BCS Metadata Store. Please perform the steps below and test the issue again:
1. Open the SharePoint Central Administration website with either a Farm administrator account or an account that has been delegated permissions to administer the Business Data Connectivity Service Applications.
2. On the Quick Launch, click Application Management.
3. On the Application Management page, under Service Applications, click Manage service applications.
4. In the list of services, select the row of the Business Data Connectivity Service Application that you created in Create the Business Data Connectivity service application and then click Manage and then Set Metadata Store Permissions.
5. Enter the Farm Administrator account and any other delegate administrators if you have them and then click Add.
6. For each account or group that you added that is an administrator of the Business Data Connectivity Service Application, select the Edit, Execute, Selectable In Clients, and Set Permissions checkboxes.
7. Select the Propagate permissions to all BDC Models, External Systems and External Content Types in the BDC Metadata Store. Doing so will overwrite existing permissions checkbox.
8. Click OK.
Also, make sure your account is added as local administrator.
Regards,
Rebecca Tu
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]