Exchange Server Forums

New to Exchange and OWA question

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Outlook Web Access >> New to Exchange and OWA question

Page: [1] 2 next > >>

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

New to Exchange and OWA question - 29.Mar.2006 3:49:55 PM

SUSANVV

Posts: 75
Joined: 26.Mar.2006
Status: offline

This is going to sound stupid but I can't find an answer anywhere. Do we need and ISA server to have Internet Access to OWA? Everything I see indicates Yes.

TIA for any help.

Sue Van

Post #: 1

Featured Links*

RE: New to Exchange and OWA question - 29.Mar.2006 3:52:57 PM

leederbyshire

Posts: 968
Joined: 4.Jan.2006
Status: offline

No, you don't need it. ISA can make your OWA server more secure (if configured correctly, of course), but it's not necessary.

_____________________________

Lee.
___________________________________

Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________

(in reply to SUSANVV)

Post #: 2

RE: New to Exchange and OWA question - 29.Mar.2006 4:06:32 PM

SUSANVV

Posts: 75
Joined: 26.Mar.2006
Status: offline

Thanks for the fast reply. OWA works internally. What do I have to do to make it work from the Internet? I get the log on screen for OWA and I can log in but I get an Action Cancelled screen, hit the refresh button...... It looks like the frame for OWA but that is it. What am I missing?

TIA again.

Sue Van

(in reply to leederbyshire)

Post #: 3

RE: New to Exchange and OWA question - 29.Mar.2006 4:19:04 PM

leederbyshire

Posts: 968
Joined: 4.Jan.2006
Status: offline

Do you have Forms-based Authentication enabled (you see the blue logon screen instead of the small grey login dialog)? If so, see if it makes any difference when you select the Basic interface, instead of the Premium one.

_____________________________

Lee.
___________________________________

Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________

(in reply to SUSANVV)

Post #: 4

RE: New to Exchange and OWA question - 29.Mar.2006 4:28:07 PM

SUSANVV

Posts: 75
Joined: 26.Mar.2006
Status: offline

lThanks for the help. I had not yet installed the SSL which is required for the Forms based logon, but I will today. I will be back to let you know how I make out.

Sue Van

(in reply to leederbyshire)

Post #: 5

RE: New to Exchange and OWA question - 29.Mar.2006 4:35:10 PM

leederbyshire

Posts: 968
Joined: 4.Jan.2006
Status: offline

If you had FBA, then you would have the option to try the Basic interface; as it is, you will be seeing the Premium interface. This uses client-side WebDAV calls, and these may be getting blocked by your firewall. See if you can try it externally from a non-MS browser, like Firefox; that will make it send the Basic interface, since only MS browsers receive the Premium one.

_____________________________

Lee.
___________________________________

Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________

(in reply to SUSANVV)

Post #: 6

RE: New to Exchange and OWA question - 31.Mar.2006 9:26:33 PM

SUSANVV

Posts: 75
Joined: 26.Mar.2006
Status: offline

I have installed a SelfSSL for the time being. It works internally. We have a static IP. On our router/firewall we have a port redirecting to 443. When I try to access it from the Internet, I get an HTTP1/1 404 error instead of a login box. Any ideas? I am using IIS 6 and no ISA server.

TIA for any help.

Sue Van

(in reply to SUSANVV)

Post #: 7

RE: New to Exchange and OWA question - 31.Mar.2006 9:43:48 PM

leederbyshire

Posts: 968
Joined: 4.Jan.2006
Status: offline

Have a look in your IIS logs, and see what the difference is between the responses to the internal and the external /Exchange/ GETs.

_____________________________

Lee.
___________________________________

Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________

(in reply to SUSANVV)

Post #: 8

RE: New to Exchange and OWA question - 31.Mar.2006 10:40:06 PM

eeandf

Posts: 47
Joined: 28.Jul.2003
From: USA
Status: offline

Did you or your ISP provider create subdomain, for example "owa.yourdomain.com"? and owa.yourdomain.com points to your exchange box, and you are accessing owa from outside your network at https://owa.yourdomain.com? do you have ports 443 open?

(in reply to leederbyshire)

Post #: 9

RE: New to Exchange and OWA question - 31.Mar.2006 10:41:37 PM

SUSANVV

Posts: 75
Joined: 26.Mar.2006
Status: offline

Thanks for the reply. I have a copy of the logs. The Internal gets owaauth and the External does not. I already figured that out. but why isn't the authorization page coming up. There is a big long string after Mozilla/4.0+ for the External. The other difference I say was the internal has Mozilla/5.0+. I am using MSIE 6.0 for both. I do not see any negative word in the external.

TIA for any help.

Sue Van

(in reply to leederbyshire)

Post #: 10

RE: New to Exchange and OWA question - 31.Mar.2006 10:51:52 PM

leederbyshire

Posts: 968
Joined: 4.Jan.2006
Status: offline

Can you paste the lines generated by the external connection? Let's see what it gets instead of the owaauth.dll .

_____________________________

Lee.
___________________________________

Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________

(in reply to SUSANVV)

Post #: 11

RE: New to Exchange and OWA question - 31.Mar.2006 11:08:41 PM

SUSANVV

Posts: 75
Joined: 26.Mar.2006
Status: offline

Here is the first line of the access process. Thanks for your help.
2006-03-31 18:29:33 W3SVC1 192.168.0.6 GET /exchange - 443 - 68.236.199.183 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+DigExt;+.NET+CLR+1.0.3705;+.NET+CLR+1.1.4322) 401 2 2148074254

TIA again.

Sue Van

(in reply to leederbyshire)

Post #: 12

RE: New to Exchange and OWA question - 31.Mar.2006 11:25:32 PM

leederbyshire

Posts: 968
Joined: 4.Jan.2006
Status: offline

Have a look at the properties of your 'Exchange' Virtual Directory in IIS Manager. What authentication methods (anonymous, basic, integrated) are enabled on the Directory Security page?

(in reply to SUSANVV)

Post #: 13

RE: New to Exchange and OWA question - 31.Mar.2006 11:33:13 PM

leederbyshire

Posts: 968
Joined: 4.Jan.2006
Status: offline

It will help to study the IIS logs if you disable logging on the 'Exchweb' VDir in IIS manager, then you only get to see the requests sent to 'Exchange'. A typical logon with FBA will look like this:

21:27:04 GET /exchange - 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) - 401 2

21:27:09 GET /exchange - 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) https://w2k3s1/exchweb/bin/auth/owalogon.asp?url=https://w2k3s1/exchange&reason=0 302 0

21:27:09 GET /exchange/ - 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) https://w2k3s1/exchweb/bin/auth/owalogon.asp?url=https://w2k3s1/exchange&reason=0 200 0

21:27:09 GET /exchange/<username>/ Cmd=navbar 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) https://w2k3s1/exchange/ 200 0

21:27:09 GET /exchange/<username>/Inbox/ Cmd=contents 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) https://w2k3s1/exchange/ 200 0

21:27:09 SEARCH /exchange/<username>/Inbox/ - 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) /Inbox/?Cmd=contents">https://w2k3s1/exchange/<username>/Inbox/?Cmd=contents 207 0

Followed by a few SUBSCRIBEs and SEARCHes .

(in reply to leederbyshire)

Post #: 14

RE: New to Exchange and OWA question - 31.Mar.2006 11:48:48 PM

SUSANVV

Posts: 75
Joined: 26.Mar.2006
Status: offline

The line that I submitted was the only line for the logon attempt. I have others but each line represents a logon attempt. For the internal access there were many lines for the process. I keep coming up with a "Page Under construction" and no logon.

Anonymous is the only one enabled on the default web site in IIS.

Thanks again. I really appreciate this.

Sue Van

(in reply to leederbyshire)

Post #: 15

RE: New to Exchange and OWA question - 1.Apr.2006 12:01:26 AM

leederbyshire

Posts: 968
Joined: 4.Jan.2006
Status: offline

Can you see what is enabled on the Exchange VDir underneath the Default Web Site?

(in reply to SUSANVV)

Post #: 16

RE: New to Exchange and OWA question - 1.Apr.2006 2:21:49 AM

SUSANVV

Posts: 75
Joined: 26.Mar.2006
Status: offline

I'm not sure where you mean. If you mean the folders Exhcange, Exadmin, etc, to the best of my knowledge they are enabled. If you mean the web services, all but the Unknown CGI and unknown ASP are enabled-those two are not. Using our IP and a port that we are forwarding through I now get a basic login but after that I get a message that the site is under construction. Again, all this is from the Internet. Locally we get the premium login.

I changed the authentication to Windows Integrated and that is when I got the basic login.

Thanks again for your help. I have no idea what to try next.

Sue Van

(in reply to leederbyshire)

Post #: 17

RE: New to Exchange and OWA question - 1.Apr.2006 9:49:59 AM

menko

Posts: 114
Joined: 22.Jan.2006
Status: offline

Hi Susan,

First two+1 additional questions:

- Do you use only one Exchange server or dor you have a Frontend - Backend configuration?

- What is the exact URL you type on the Internet to access OWA?

- Are you really testing from the Internet or are you testing the Internet URL from your internal network?

_____________________________

Regards,

Menko den Ouden
MCSE+I+Messaging

(in reply to SUSANVV)

Post #: 18

RE: New to Exchange and OWA question - 1.Apr.2006 1:22:21 PM

SUSANVV

Posts: 75
Joined: 26.Mar.2006
Status: offline

Hi Menko,
We are using one Exchange server for Exchange. The exact URL that I typed is an IP address and the port that is redirected to 443. And I am doing it from the Internet. As I said, internally (I type the mailserver name, not the IP) I get the premium logon and then get my mailbox. Externally I get the basic logon and "Under Construction" for a page.

Thank you for any help. Why would they be handled differently?

Sue Van

(in reply to menko)

Post #: 19

RE: New to Exchange and OWA question - 1.Apr.2006 1:58:35 PM

menko

Posts: 114
Joined: 22.Jan.2006
Status: offline

Ok,

Forget the port number.. type HTTPS://internetaddress/exchange and start testing from there ;)

_____________________________

Regards,

Menko den Ouden
MCSE+I+Messaging

(in reply to SUSANVV)

Post #: 20