Exchange Server Forums
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
autodiscover on windows 2008
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
autodiscover on windows 2008 - 1.Aug.2008 12:36:43 PM
|
|
|
wilde
Posts: 46
Joined: 9.Oct.2007
Status: offline
|
Hi all,
I've recently published OWA/active sync/rpc . . . and all has worked fine thanks to the brilliant info on this site.
I tried following the guide "Publishing Exchange 2007 Outlook Autodiscover with 2006 ISA” and seem to have run into authentication troubles.
Windows 2008 uses IIS7 so I needed to purchase an SSL (https:// Autodiscover.domain.com) as you do not get the option to "Store certificate in local computer certificate store” when requesting a web server certificate. That and the fact I'm using LDAP authentication on the web listener is the only difference on my system to the manual.
Basically when attempting to use the auto account setup in outlook 2007 it promtps me to "allow this website to configure email@domain.com server settings?” https://autodiscover.domin.com/autodiscover.xml, I click allow and then after time it fails.
In the ISA2006 logging the status does says Status: 12239 The server requires authorization to fulfill the request. Access to the Web server is denied. Contact the server administrator.
BUT the strange thing is, if I manually type in all the outlook anywhere details in outlook2007 it connects fine??? Ie msstd:autodiscover.domain.com connects via https perfectly.
Please check here for screen shots of interest.
http://img179.imageshack.us/my.php?image=captureca2.jpg
I think the issue could be related to the virtual directory "AutoDiscover" not using the autodiscover.domain.com certificate, it is using the exchange.domain.com certificate.
Could this be the issue, if so how do I choose what certificate the virtual directory uses (remember i'm using IIS7 on windows 2008)???
Any help is appreciated.
Thanks
Wilde
< Message edited by wilde -- 4.Aug.2008 9:52:42 AM >
|
|
|
|
|
RE: autodiscover on windows 2008 - 4.Aug.2008 9:41:21 AM
|
|
|
wilde
Posts: 46
Joined: 9.Oct.2007
Status: offline
|
Hi John, thanks for the input.
I now don't believe the issue is certificate related.
Externally
https://autodiscover.domain.com/autodiscover/autodiscover.xml resolves to
https://autodiscover.domain.com/CookieAuth.dll?GetLogon?curl=Z2FautodiscoverZ2Fautodiscover.xml&reason=0&formdir=3
which is an ISA2006 logon page (similar to OWA)
On this page the certificate does show as autodiscover.domain.com.
After logging on I receive the error below
<?xml version="1.0" encoding="utf-8" ?>
- <Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
- <Response>
- <Error Time="14:36:22.9459365" Id="2884917732">
<ErrorCode>600</ErrorCode>
<Message>Invalid Request</Message>
<DebugData />
</Error>
</Response>
</Autodiscover>
I'm extremley close to giving up now, can anyone help?
Thanks
Wilde
|
|
|
|
|
RE: autodiscover on windows 2008 - 11.Aug.2008 7:30:49 PM
|
|
|
John Weber
Posts: 1236
Joined: 20.Apr.2005
From: Portland, Oregon
Status: offline
|
you need to pay attention to not only the DSN resolution, but what the exchange system thinks things are called.
And then what cert is applied to what service the exchange org thinks things are called.
_____________________________
John Weber [Lync MVP] http://tsoorad.blogspot.com
|
|
|
|
|
RE: autodiscover on windows 2008 - 12.Aug.2008 5:57:19 AM
|
|
|
wilde
Posts: 46
Joined: 9.Oct.2007
Status: offline
|
Thanks for the reply John but I do not understand? Please could you elaberate?
I may be way of the mark but one thing i really don't understand is the assigning a certificate to a service such as IIS when i need to use 2 certificate, one for webmail (mailserver.domain.com) and one for autodiscover (autodiscover.domain.com)???
This is officially killing me.
< Message edited by wilde -- 12.Aug.2008 7:26:57 AM >
|
|
|
|
|
RE: autodiscover on windows 2008 - 12.Aug.2008 11:32:10 AM
|
|
|
wilde
Posts: 46
Joined: 9.Oct.2007
Status: offline
|
Right,
I think I'm finally getting it, I am using 2 instant SSL's not a SAN or UC certificate.
Is it not possible to use 2 different certificates with exchange 2007 for the OWA and Autodiscovery services even if you move the autodiscovery virtual directory onto a new website located on the exchange server?
Thanks in advance
|
|
|
|
|
RE: autodiscover on windows 2008 - 12.Aug.2008 8:10:32 PM
|
|
|
John Weber
Posts: 1236
Joined: 20.Apr.2005
From: Portland, Oregon
Status: offline
|
I don't know a good answer to that specific question.
I ALWAYS use a public cert for ANYTHING facing public, and I use internal certs for all else.
And if you need a SAN for one of those, then that is what you MUST do.
_____________________________
John Weber [Lync MVP] http://tsoorad.blogspot.com
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
