Exchange Server Forums
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
OWA Attachments require authentication
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
 Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM
|
|
TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!
|
OWA Attachments require authentication - 16.Sep.2008 3:31:40 PM
|
|
|
cheri.loehr
Posts: 17
Joined: 27.Dec.2005
Status: offline
|
Enviro: Exchange 2003 SP 2 on Windows 2003 Sp 2
Workstation: XP SP3
I have one end user that uses OWA on a regular bases. When this person opens an attachment a second authentication window appears. Although we can cancel the window and the document opens, we would like to get rid of this second authentication window?
This does not happen with every attachment, nor is it pinpointed to one specific attachment type.
I have replicated the issue on my own workstation.
Any and all assistance is greatly appreciated.
Sincerely,
Cheri
|
|
|
|
|
RE: OWA Attachments require authentication - 17.Sep.2008 8:16:57 AM
|
|
|
leederbyshire
Posts: 968
Joined: 4.Jan.2006
Status: offline
|
It probably means that you don't have Anonymous Access enabled on the exchweb Virtual Directory.
_____________________________
Lee.
___________________________________
Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________
|
|
|
|
|
RE: OWA Attachments require authentication - 17.Sep.2008 8:24:14 AM
|
|
|
cheri.loehr
Posts: 17
Joined: 27.Dec.2005
Status: offline
|
Thank you for your reply!
I do have Anonymous access enabled. I checked this first thing after researching the issue.
Any other thoughs?
-Cheri
|
|
|
|
|
RE: OWA Attachments require authentication - 17.Sep.2008 8:27:48 AM
|
|
|
leederbyshire
Posts: 968
Joined: 4.Jan.2006
Status: offline
|
Next thing would be to look in the IIS Log File for the request that causes the 401 status to be returned. The 401 is what causes the logon prompt to appear.
_____________________________
Lee.
___________________________________
Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________
|
|
|
|
|
RE: OWA Attachments require authentication - 17.Sep.2008 11:03:00 AM
|
|
|
cheri.loehr
Posts: 17
Joined: 27.Dec.2005
Status: offline
|
You are quick and I greatly appreciate immediate replies. I hope to have this resolved before end user leaves site today.
I have looked at the IIS log from yesterday. Almost every person has a "401" next to them. Many entries I can decipher as being related to smart phones. This end user is not receiving issue via smart phone..only via OWA on computer. There is so much information I couldn't possibly enter it here for assistance in decipher. No 401 entry for person in question has verbage indicating why log on window appears or indications of access is denied. Possibly I am not looking for correct indicators.
Do you have any other indicators to look for?
-Cheri
|
|
|
|
|
RE: OWA Attachments require authentication - 17.Sep.2008 11:12:00 AM
|
|
|
leederbyshire
Posts: 968
Joined: 4.Jan.2006
Status: offline
|
The IIS log is really the best place to look. All users get a 401 initially, because the browser sends the first request to /Exchange with no credentials. The 401 response is a signal to the browser to either ask for credentials, or use a set that has already been accepted at the start of the current session. If you see a 401 in the middle of a session (which you will do in this case), it means that the server has been asked to supply something for which it believes the existing credentials are inadequate.
Note that attachments are delivered by a server-side script named redir.asp. See if you can find any requests for that. Also note that the logged times are in GMT.
_____________________________
Lee.
___________________________________
Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________
|
|
|
|
|
RE: OWA Attachments require authentication - 17.Sep.2008 12:36:45 PM
|
|
|
cheri.loehr
Posts: 17
Joined: 27.Dec.2005
Status: offline
|
I reproduced the scenario and copied only entries associated with the process from the log file. Will this help:
2008-09-17 15:38:46 x.x.x.x SEARCH /exchange/end.user/Deleted+Items/ - 443 domain name\end.user 10.161.35.44 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+InfoPath.1;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322) https://OWA link/exchange/end.user/Deleted%20Items/?Cmd=contents&allowShowDeleted=1 207 0 29208 3628
2008-09-17 15:38:52 x.x.x.x GET /exchange/end.user/Deleted+Items/RE:+Generator+Forecast-24.EML Cmd=open 443 - 10.161.35.44 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+InfoPath.1;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322) - 401 2148074254 332 407
2008-09-17 15:38:52 x.x.x.x GET /exchange/end.user/Deleted+Items/RE:+Generator+Forecast-24.EML Cmd=open 443 domain name\end.user 10.161.35.44 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+InfoPath.1;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322) - 200 0 14293 2546
2008-09-17 15:38:52 x.x.x.x GET /exchange/end.user/Deleted+Items/RE:+Generator+Forecast-24.EML/ - 443 - 10.161.35.44 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+InfoPath.1;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322) https://OWA link/exchange/end.user/Deleted%20Items/RE:%20Generator%20Forecast-24.EML?Cmd=open 401 2148074254 332 517
2008-09-17 15:38:52 x.x.x.x GET /exchange/end.user/Deleted+Items/RE:+Generator+Forecast-24.EML/ - 443 domain name\end.user 10.161.35.44 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+InfoPath.1;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322) https://OWA link/exchange/end.user/Deleted%20Items/RE:%20Generator%20Forecast-24.EML?Cmd=open 200 0 1795 2656
2008-09-17 15:38:54 x.x.x.x GET /exchange/end.user/Deleted+Items/RE:+Generator+Forecast-24.EML/new+forecast.xls/C58EA28C-18C0-4a97-9AF2-036E93DDAFB3/new+forecast.xls attach=1 443 - 10.161.35.44 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+InfoPath.1;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322) https://OWA link/exchange/end.user/Deleted%20Items/RE:%20Generator%20Forecast-24.EML?Cmd=open 401 2148074254 332 600
2008-09-17 15:38:54 x.x.x.x GET /exchange/end.user/Deleted+Items/RE:+Generator+Forecast-24.EML/new+forecast.xls/C58EA28C-18C0-4a97-9AF2-036E93DDAFB3/new+forecast.xls attach=1 443 domain name\end.user 10.161.35.44 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+InfoPath.1;+.NET+CLR+2.0.50727;+.NET+CLR+1.1.4322) https://OWA link/exchange/end.user/Deleted%20Items/RE:%20Generator%20Forecast-24.EML?Cmd=open 200 0 15367 2739
I am getting the feeling the last entry is telling something but I have limited experience with deciphering IIS log files/
Again, it doesn't matter where the email is with an attachment or what type of an attachment it is.
-Cheri
|
|
|
|
|
RE: OWA Attachments require authentication - 17.Sep.2008 1:19:23 PM
|
|
|
leederbyshire
Posts: 968
Joined: 4.Jan.2006
Status: offline
|
Every single entry is duplicated. The first in each pair (showing '-' in the user column) is sent with no credentials, and results in a 401. The second (showing 'domain\user') result in the successful 200. This is not actually unusual, but I've no idea why only the ones involving attachments cause the login prompt to appear. Are you using Forms-based Auth (the blue login screen)?
_____________________________
Lee.
___________________________________
Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________
|
|
|
|
|
RE: OWA Attachments require authentication - 15.Oct.2008 5:47:20 PM
|
|
|
russell0311
Posts: 1
Joined: 15.Oct.2008
Status: offline
|
did you manage to find a solution to this as I ahve the same issue
thanks
Russell.
|
|
|
|
|
RE: OWA Attachments require authentication - 16.Oct.2008 2:06:09 PM
|
|
|
josephca4
Posts: 5
Joined: 11.Aug.2008
Status: offline
|
Hi did you get an anwser to this post got same issue. I beleive it is a registry value or done in the asp pages but cannot remeber were.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
