New to Exchange and OWA question (Full Version)

All Forums >> [Microsoft Exchange 2003] >> Outlook Web Access



Message


SUSANVV -> New to Exchange and OWA question (29.Mar.2006 3:49:55 PM)

This is going to sound stupid but I can't find an answer anywhere. Do we need and ISA server to have Internet Access to OWA? Everything I see indicates Yes.

TIA for any help.

Sue Van




leederbyshire -> RE: New to Exchange and OWA question (29.Mar.2006 3:52:57 PM)

No, you don't need it.  ISA can make your OWA server more secure (if configured correctly, of course), but it's not necessary.




SUSANVV -> RE: New to Exchange and OWA question (29.Mar.2006 4:06:32 PM)

Thanks for the fast reply. OWA works internally. What do I have to do to make it work from the Internet? I get the log on screen for OWA and I can log in but I get an Action Cancelled screen, hit the refresh button...... It looks like the frame for OWA but that is it. What am I missing?

TIA again.

Sue Van




leederbyshire -> RE: New to Exchange and OWA question (29.Mar.2006 4:19:04 PM)

Do you have Forms-based Authentication enabled (you see the blue logon screen instead of the small grey login dialog)?  If so, see if it makes any difference when you select the Basic interface, instead of the Premium one.




SUSANVV -> RE: New to Exchange and OWA question (29.Mar.2006 4:28:07 PM)

lThanks for the help. I had not yet installed the SSL which is required for the Forms based logon, but I will today. I will be back to let you know how I make out.

Sue Van




leederbyshire -> RE: New to Exchange and OWA question (29.Mar.2006 4:35:10 PM)

If you had FBA, then you would have the option to try the Basic interface; as it is, you will be seeing the Premium interface.  This uses client-side WebDAV calls, and these may be getting blocked by your firewall.  See if you can try it externally from a non-MS browser, like Firefox;  that will make it send the Basic interface, since only MS browsers receive the Premium one.




SUSANVV -> RE: New to Exchange and OWA question (31.Mar.2006 9:26:33 PM)

I have installed a SelfSSL for the time being. It works internally. We have a static IP. On our router/firewall we have a port redirecting to 443. When I try to access it from the Internet, I get an HTTP1/1 404 error instead of a login box. Any ideas? I am using IIS 6 and no ISA server.

TIA for any help.

Sue Van




leederbyshire -> RE: New to Exchange and OWA question (31.Mar.2006 9:43:48 PM)

Have a look in your IIS logs, and see what the difference is between the responses to the internal and the external /Exchange/ GETs.




eeandf -> RE: New to Exchange and OWA question (31.Mar.2006 10:40:06 PM)

Did you or your ISP provider create subdomain, for example  "owa.yourdomain.com"? and owa.yourdomain.com points to your exchange box, and you are accessing owa from outside your network at https://owa.yourdomain.com? do you have ports 443 open?




SUSANVV -> RE: New to Exchange and OWA question (31.Mar.2006 10:41:37 PM)

Thanks for the reply. I have a copy of the logs. The Internal gets owaauth and the External does not. I already figured that out. but why isn't the authorization page coming up. There is a big long string after Mozilla/4.0+ for the External. The other difference I say was the internal has Mozilla/5.0+. I am using MSIE 6.0 for both. I do not see any negative word in the external.

TIA for any help.

Sue Van




leederbyshire -> RE: New to Exchange and OWA question (31.Mar.2006 10:51:52 PM)

Can you paste the lines generated by the external connection?  Let's see what it gets instead of the owaauth.dll .




SUSANVV -> RE: New to Exchange and OWA question (31.Mar.2006 11:08:41 PM)

Here is the first line of the access process. Thanks for your help.
2006-03-31 18:29:33 W3SVC1 192.168.0.6 GET /exchange - 443 - 68.236.199.183 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+DigExt;+.NET+CLR+1.0.3705;+.NET+CLR+1.1.4322) 401 2 2148074254

TIA again.

Sue Van




leederbyshire -> RE: New to Exchange and OWA question (31.Mar.2006 11:25:32 PM)

Have a look at the properties of your 'Exchange' Virtual Directory in IIS Manager.  What authentication methods (anonymous, basic, integrated) are enabled on the Directory Security page?




leederbyshire -> RE: New to Exchange and OWA question (31.Mar.2006 11:33:13 PM)

It will help to study the IIS logs if you disable logging on the 'Exchweb' VDir in IIS manager, then you only get to see the requests sent to 'Exchange'.  A typical logon with FBA will look like this:

21:27:04 GET /exchange - 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) - 401 2

21:27:09 GET /exchange - 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) https://w2k3s1/exchweb/bin/auth/owalogon.asp?url=https://w2k3s1/exchange&reason=0 302 0

21:27:09 GET /exchange/ - 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) https://w2k3s1/exchweb/bin/auth/owalogon.asp?url=https://w2k3s1/exchange&reason=0 200 0

21:27:09 GET /exchange/<username>/ Cmd=navbar 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) https://w2k3s1/exchange/ 200 0

21:27:09 GET /exchange/<username>/Inbox/ Cmd=contents 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) https://w2k3s1/exchange/ 200 0

21:27:09 SEARCH /exchange/<username>/Inbox/ - 443 192.168.1.8 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+InfoPath.1;+.NET+CLR+2.0.50727) /Inbox/?Cmd=contents">https://w2k3s1/exchange/<username>/Inbox/?Cmd=contents 207 0

Followed by a few SUBSCRIBEs and SEARCHes .




SUSANVV -> RE: New to Exchange and OWA question (31.Mar.2006 11:48:48 PM)

The line that I submitted was the only line for the logon attempt. I have others but each line represents a logon attempt. For the internal access there were many lines for the process. I keep coming up with a "Page Under construction" and no logon.

Anonymous is the only one enabled on the default web site in IIS.

Thanks again. I really appreciate this.

Sue Van




leederbyshire -> RE: New to Exchange and OWA question (1.Apr.2006 12:01:26 AM)

Can you see what is enabled on the Exchange VDir underneath the Default Web Site?




SUSANVV -> RE: New to Exchange and OWA question (1.Apr.2006 2:21:49 AM)

I'm not sure where you mean. If you mean the folders Exhcange, Exadmin, etc, to the best of my knowledge they are enabled. If you mean the web services, all but the Unknown CGI and unknown ASP are enabled-those two are not. Using our IP and a port that we are forwarding through I now get a basic login but after that I get a message that the site is under construction. Again, all this is from the Internet. Locally we get the premium login.

I changed the authentication to Windows Integrated and that is when I got the basic login.

Thanks again for your help. I have no idea what to try next.

Sue Van




menko -> RE: New to Exchange and OWA question (1.Apr.2006 9:49:59 AM)

Hi Susan,

First two+1 additional questions:

- Do you use only one Exchange server or dor you have a Frontend - Backend configuration?

- What is the exact URL you type on the Internet to access OWA?

- Are you really testing from the Internet or are you testing the Internet URL from your internal network?





SUSANVV -> RE: New to Exchange and OWA question (1.Apr.2006 1:22:21 PM)

Hi Menko,
We are using one Exchange server for Exchange. The exact URL that I typed is an IP address and the port that is redirected to 443. And I am doing it from the Internet. As I said, internally (I type the mailserver name, not the IP) I get the premium logon and then get my mailbox. Externally I get the basic logon and "Under Construction" for a page.

Thank you for any help. Why would they be handled differently?

Sue Van




menko -> RE: New to Exchange and OWA question (1.Apr.2006 1:58:35 PM)

Ok,

Forget the port number.. type HTTPS://internetaddress/exchange and start testing from there ;)





Page: [1] 2   next >   >>