Exchange Server Forums
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
RE: Certificate Errors
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
RE: Certificate Errors - 25.Jun.2010 10:47:02 AM
|
|
|
rbernard
Posts: 21
Joined: 24.Jun.2010
Status: offline
|
Hi Marc,
Here is the result of the test
[PS] C:\Windows\System32>test-outlookwebservices | fl
Id : 1003
Type : Information
Message : About to test AutoDiscover with the e-mail address backup@hvcpa.com.
Id : 1007
Type : Information
Message : Testing server HVSBS08.hvcpa.local with the published name https://ma
il.hvcpa.com/ews/exchange.asmx & https://mail.hvcpa.com/ews/exchange.
asmx.
Id : 1019
Type : Information
Message : Found a valid AutoDiscover service connection point. The AutoDiscover
URL on this object is https://mail.hvcpa.com/autodiscover/autodiscov
er.xml.
Id : 1013
Type : Error
Message : When contacting https://mail.hvcpa.com/autodiscover/autodiscover.xml
received the error Unable to connect to the remote server
Id : 1013
Type : Error
Message : When contacting https://mail.hvcpa.com/autodiscover/autodiscover.xml
received the error A connection attempt failed because the connected
party did not properly respond after a period of time, or established
connection failed because connected host has failed to respond 24.97
.51.50:443
Id : 1006
Type : Error
Message : The Autodiscover service could not be contacted.
|
|
|
|
|
RE: Certificate Errors - 25.Jun.2010 10:57:15 AM
|
|
|
Marc.dekeyser
Posts: 225
Joined: 19.Apr.2010
Status: offline
|
Seems like you really do have an autodiscover issue :)
What happens if you try browsing
https://mail.hvcpa.com/autodiscover/autodiscover.xml ??
If you get an error after the auth popup fo the following:
1. remove-autodiscovervirtualdirectory
2. New-AutoDiscoverVirtualDirectory -websitename "mail.contoso.com" -WindowsAuthentication $true -DigestAuthentication $true
As for the blank external URL on the EWS I recommend recreating the EWS Site aswell.
1.remove-webservicesvirtualdirectory -identity "HVSBS08\EWS
(SBS Web Applications)"
2. new-webservicesvirtualdirectory -identity "HVSBS08\EWS
(SBS Web Applications)" -internalurl https://server.domain.local/Autodiscover/Autodiscover.xml -externalurl
https://mail.hvcpa.com/ews/exchange.asmx
SHould work out...
_____________________________
* No rights or priviliges can be taken from my posts.
* Always make a backup!
* http://kb.geminon.be
|
|
|
|
|
RE: Certificate Errors - 25.Jun.2010 11:49:30 AM
|
|
|
rbernard
Posts: 21
Joined: 24.Jun.2010
Status: offline
|
Marc,
The first line is looking for me to enter an identity.
Is this the server name hvsbs08?
|
|
|
|
|
RE: Certificate Errors - 25.Jun.2010 12:30:25 PM
|
|
|
rbernard
Posts: 21
Joined: 24.Jun.2010
Status: offline
|
Marc,
Sorry but this came back as the result
[PS] C:\Windows\System32>Remove-AutoDiscoverVirtualDirectory -Identity "HVSBS08\
autodiscover(autodiscover.hvcpa.com)"
Remove-AutodiscoverVirtualDirectory : The operation could not be performed beca
use object 'HVSBS08\autodiscover(autodiscover.hvcpa.com)' could not be found on
domain controller 'HVSBS08.hvcpa.local'.
At line:1 char:36
+ Remove-AutoDiscoverVirtualDirectory <<<< -Identity "HVSBS08\autodiscover(aut
odiscover.hvcpa.com)"
|
|
|
|
|
RE: Certificate Errors - 25.Jun.2010 12:38:14 PM
|
|
|
rbernard
Posts: 21
Joined: 24.Jun.2010
Status: offline
|
I just did the other removal of the webservicesvirutaldirectory and that went fine but when I try the "new" command I recieved this.
[PS] C:\Windows\System32>remove-webservicesvirtualdirectory -identity "HVSBS08\E
WS (SBS Web Applications)"
Confirm
Are you sure you want to perform this action?
Removing Web Services virtual directory "HVSBS08\EWS (SBS Web Applications)".
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help
(default is "Y"):y
[PS] C:\Windows\System32>new-webservicesvirtualdirectory -identity "HVSBS08\EWS
(SBS Web Applications)" -internalurl https://server.domain.local/Autodiscover/Au
todiscover.xml -externalurl
New-WebServicesVirtualDirectory : Missing an argument for parameter 'ExternalUr
l'. Specify a parameter of type 'System.Uri' and try again.
At line:1 char:163
+ new-webservicesvirtualdirectory -identity "HVSBS08\EWS (SBS Web Applications)
" -internalurl https://server.domain.local/Autodiscover/Autodiscover.xml -exter
nalurl <<<<
[PS] C:\Windows\System32>https://mail.hvcpa.com/ews/exchange.asmx
|
|
|
|
|
RE: Certificate Errors - 25.Jun.2010 12:45:49 PM
|
|
|
de.blackman
Posts: 3542
Joined: 4.Apr.2005
From: Toronto, Canada
Status: offline
|
I think you may be copying the command and pasting into the powershell window. Can you make sure you are actually typing the command out?
_____________________________
Ibrahim Benna - Microsoft Exchange MVP
Forum Moderator
Navantis
@IbrahimBenna
|
|
|
|
|
RE: Certificate Errors - 25.Jun.2010 12:49:52 PM
|
|
|
rbernard
Posts: 21
Joined: 24.Jun.2010
Status: offline
|
I typed in the remove-autodiscovervirtualdirectory command and it asks for an identity. I tried the server name but this is not it.
Do you know what that is?
I will tr typing in the "new" command again now.
Thanks
Rick
|
|
|
|
|
RE: Certificate Errors - 28.Jun.2010 7:03:06 AM
|
|
|
Marc.dekeyser
Posts: 225
Joined: 19.Apr.2010
Status: offline
|
Ahum,
Seems I might have been messing up command parameters.
Can you perform the following: (make sure the -Path is correct)
New-WebservicesVirtualDirectory -Path "c:\Program Files\Microsoft\Exchange Server\ClientAccess\Exchweb\EWS" -InternalURL "https://webmail.contoso.com/EWS/Exchange.asmx" -ExternalURL "https://webmail.contoso.com/EWS/Exchange.asmx" -BasicAuthentication $True
_____________________________
* No rights or priviliges can be taken from my posts.
* Always make a backup!
* http://kb.geminon.be
|
|
|
|
|
RE: Certificate Errors - 28.Jun.2010 11:02:09 AM
|
|
|
rbernard
Posts: 21
Joined: 24.Jun.2010
Status: offline
|
Hi Marc,
The first command came back with this
Specify a parameter of type 'System.Uri' and try again.
|
|
|
|
|
RE: Certificate Errors - 28.Jun.2010 12:04:07 PM
|
|
|
rbernard
Posts: 21
Joined: 24.Jun.2010
Status: offline
|
Marc,
I miss typed the first command but this is what I recevied from teh first command below. The second command result is below that one.
[PS] C:\Windows\System32>New-WebservicesVirtualDirectory -Path "c:\Program Files
\Microsoft\Exchange Server\ClientAccess\Exchweb\EWS" -InternalURL "https://webma
il.contoso.com/EWS/Exchange.asmx" -ExternalURL "https://webmail.contoso.com/EWS/
Exchange.asmx" -BasicAuthentication $True
New-WebServicesVirtualDirectory : The virtual directory 'EWS' already exists un
der 'HVSBS08.hvcpa.local/Default Web Site'.
Parameter name: VirtualDirectoryName
At line:1 char:32
+ New-WebservicesVirtualDirectory <<<< -Path "c:\Program Files\Microsoft\Excha
nge Server\ClientAccess\Exchweb\EWS" -InternalURL "https://webmail.contoso.com/
EWS/Exchange.asmx" -ExternalURL "https://webmail.contoso.com/EWS/Exchange.asmx"
-BasicAuthentication $True
Second command below
[PS] C:\Windows\System32>New-WebserviceVirtualDirectory -WebSiteName "SBS Web Ap
plications" -Basicauthentication:$true -WindowsAuthentication:$true -internalurl
https://hvsbs08.hvcpa.local/Autodiscover/Autodiscover.xml -externalurl https://
mail.hvcpa.com/ews/exchange.asmx
The term 'New-WebserviceVirtualDirectory' is not recognized as a cmdlet, functi
on, operable program, or script file. Verify the term and try again.
At line:1 char:31
+ New-WebserviceVirtualDirectory <<<< -WebSiteName "SBS Web Applications" -Bas
icauthentication:$true -WindowsAuthentication:$true -internalurl https://hvsbs0
8.hvcpa.local/Autodiscover/Autodiscover.xml -externalurl https://mail.hvcpa.com
/ews/exchange.asmx
|
|
|
|
|
RE: Certificate Errors - 28.Jun.2010 3:53:46 PM
|
|
|
rbernard
Posts: 21
Joined: 24.Jun.2010
Status: offline
|
Hi Marc,
Do you have any possible recommendations on my last post?
Thanks
Rick
|
|
|
|
|
RE: Certificate Errors - 29.Jun.2010 6:45:22 AM
|
|
|
Marc.dekeyser
Posts: 225
Joined: 19.Apr.2010
Status: offline
|
Yah,
Run the following:
a.Copy and paste the following cmdlets into a text file:
Copy Code $LocalServerName = hostname
$ActiveSyncMailboxName = "Windows SBS Mobile Mailbox Policy" + " " + $LocalServerName
$OABVDir = $LocalServerName + "\OAB (SBS Web Applications)"
$OAB = Get-OfflineAddressBook | Select-Object -Property Name
$strDomainDNS = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain().Name
$DomainAdmins = $strDomainDNS + "\Domain Admins"
$OrgName = Get-OrganizationConfig | Select-Object -Property DistinguishedName
$DefaultExchangeCertificate = "CN=" + $LocalServerName
Get-ExchangeCertificate | Where { $_.Subject -eq "$DefaultExchangeCertificate" } | ForEach { Remove-ExchangeCertificate -Thumbprint $_.Thumbprint }
Remove-OWAVirtualDirectory -Identity "Owa (Default Web Site)" -Confirm:$false
Remove-OWAVirtualDirectory -Identity "Exadmin (Default Web Site)" -Confirm:$false
Remove-OWAVirtualDirectory -Identity "Exchange (Default Web Site)" -Confirm:$false
Remove-OWAVirtualDirectory -Identity "Exchweb (Default Web Site)" -Confirm:$false
Remove-OWAVirtualDirectory -Identity "Public (Default Web Site)" -Confirm:$false
Remove-WebServicesVirtualDirectory -Identity "EWS (Default Web Site)" -Confirm:$false
Remove-ActiveSyncVirtualDirectory -Identity "Microsoft-Server-ActiveSync (Default Web Site)" -Confirm:$false
Remove-OabVirtualDirectory -Identity "OAB (Default Web Site)" -Force:$true -Confirm:$false
Remove-UMVirtualDirectory -Identity "UnifiedMessaging (Default Web Site)" -Confirm:$false
Remove-AutodiscoverVirtualDirectory -Identity "Autodiscover (Default Web Site)" -Confirm:$false
Remove-OWAVirtualDirectory -Identity "Exadmin (SBS Web Applications)" -Confirm:$false
Remove-OWAVirtualDirectory -Identity "Exchange (SBS Web Applications)" -Confirm:$false
Remove-OWAVirtualDirectory -Identity "Public (SBS Web Applications)" -Confirm:$false
New-OWAVirtualDirectory -WebsiteName "SBS Web Applications" -OwaVersion "Exchange2007" -ExternalAuthenticationMethods Fba
Set-OWAVirtualDirectory -InternalUrl "https://sites/owa/" -ClientAuthCleanupLevel "Low" -LogonFormat "UserName" -DefaultDomain $strDomainDNS -Identity "Owa (SBS Web Applications)"
New-OWAVirtualDirectory -WebsiteName "SBS Web Applications" -OwaVersion "Exchange2003or2000" -VirtualDirectoryType "Exadmin" -ExternalAuthenticationMethods Fba
New-OWAVirtualDirectory -WebsiteName "SBS Web Applications" -OwaVersion "Exchange2003or2000" -VirtualDirectoryType "Mailboxes" -ExternalAuthenticationMethods Fba
New-OWAVirtualDirectory -WebsiteName "SBS Web Applications" -OwaVersion "Exchange2003or2000" -VirtualDirectoryType "Exchweb" -ExternalAuthenticationMethods Fba
New-OWAVirtualDirectory -WebsiteName "SBS Web Applications" -OwaVersion "Exchange2003or2000" -VirtualDirectoryType "PublicFolders" -ExternalAuthenticationMethods Fba
New-WebServicesVirtualDirectory -WebsiteName "SBS Web Applications" -InternalUrl "https://Sites/EWS/Exchange.asmx" -basicauthentication 1 -windowsauthentication 1
New-ActiveSyncVirtualDirectory -WebsiteName "SBS Web Applications" -InternalUrl "https://Sites/Microsoft-Server-ActiveSync" -ExternalAuthenticationMethods Basic -InternalAuthenticationMethods Basic
New-OabVirtualDirectory -WebsiteName "SBS Web Applications" -InternalUrl "https://Sites/OAB"
Set-OabVirtualDirectory -PollInterval "30" -Identity "oab (sbs web applications)"
New-UMVirtualDirectory -WebsiteName "SBS Web Applications" -InternalUrl "https://Sites/UnifiedMessaging/Service.asmx"
New-AutodiscoverVirtualDirectory -WebsiteName "SBS Web Applications" -InternalUrl "https://Sites/Autodiscover/Autodiscover.xml" -BasicAuthentication 1 -WindowsAuthentication 1
Set-ClientAccessServer -Identity $LocalServerName -AutoDiscoverServiceInternalUri "https://sites/Autodiscover/Autodiscover.xml"
Set-OfflineAddressBook $OAB.Name -VirtualDirectories $OABVDir -Versions Version2,Version3,Version4 -PublicFolderDistributionEnabled:$True
iisreset /noforce
cd $env:windir\system32\inetsrv
.\appcmd.exe unlock config "-section:system.webserver/security/authentication/windowsauthentication"
.\appcmd.exe set config "SBS Web Applications/ews" "-section:windowsAuthentication" "-useKernelMode:False" /commit:apphost
.\appcmd.exe set config "SBS Web Applications/AutoDiscover" "-section:windowsAuthentication" "-useKernelMode:False" /commit:apphost
.\appcmd.exe set config "SBS Web Applications/oab" "-section:windowsAuthentication" "-useKernelMode:False" /commit:apphost
.\appcmd.exe set site "Default Web Site" /Bindings:http/*:80:
.\appcmd.exe start site "Default Web Site"
.\appcmd.exe start site "SBS Web Applications"b.Name the text file sbscasreinstall.ps1, and then save it in C:\windows\system32.
c.Open Exchange Powershell: Click Start, click All Programs, click Microsoft Exchange Server 2007, right-click Exchange Management Shell, and then click Run as administrator.
d.On the User Account Control page, click Continue.
e.In the Exchange Management Shell, type .\sbsCASreinstall.ps1, and then press ENTER.
f.Close the Exchange Management Shell.
note that this will return errors but should recreate all virtual directories under the SBS web applications. Your above command seemed to already have a EWS VDir under the default web site so lets make sure you have it under SBS web application by following this!
From:
http://technet.microsoft.com/en-us/library/dd767439(WS.10).aspx
_____________________________
* No rights or priviliges can be taken from my posts.
* Always make a backup!
* http://kb.geminon.be
|
|
|
|
|
RE: Certificate Errors - 29.Jun.2010 5:25:12 PM
|
|
|
rbernard
Posts: 21
Joined: 24.Jun.2010
Status: offline
|
Thanks Marc,
THis is what the command returned.
[PS] C:\Windows\System32>.\sbsCASreinstall.ps1
Encountered end of line while processing a string token.
At C:\Windows\System32\sbscasreinstall.ps1:45 char:25
+ .\appcmd.exe start site " <<<< SBS Web Applications
Any thoughts.
I may be going back to the site tomorrow.
Is there any way to get more support on this without spending alot of money?
|
|
|
|
|
RE: Certificate Errors - 1.Jul.2010 4:14:57 AM
|
|
|
Marc.dekeyser
Posts: 225
Joined: 19.Apr.2010
Status: offline
|
PSS is not that expensive and they'll be able to solve your issue. I'm currently at a loss as to why it's not working. WOuld have to have a hand on the server and I don't think that's a good idea without a support call :)
_____________________________
* No rights or priviliges can be taken from my posts.
* Always make a backup!
* http://kb.geminon.be
|
|
|
|
|
RE: Certificate Errors - 1.Jul.2010 8:05:47 AM
|
|
|
rbernard
Posts: 21
Joined: 24.Jun.2010
Status: offline
|
Thanks for all your help Marc.
I have tried to get the boss to allow me to call for support and I'll have to re visit that.
Thanks again
Rick
|
|
|
|
|
RE: Certificate Errors - 1.Jul.2010 8:35:29 AM
|
|
|
Marc.dekeyser
Posts: 225
Joined: 19.Apr.2010
Status: offline
|
Well, I wish we could have fixed without opening a support call. We do what we can :0
_____________________________
* No rights or priviliges can be taken from my posts.
* Always make a backup!
* http://kb.geminon.be
|
|
|
|
|
RE: Certificate Errors - 7.Jul.2010 11:40:44 AM
|
|
|
lancemfreeman
Posts: 40
Joined: 26.Nov.2007
Status: offline
|
I wish I could help some here. I have a very similar issue. A while back I set up autodiscovery with the local name without a public cert. It all worked ok then we got a public cert and installed it for OWA. That worked fine.
When we updated to office 2007 we got the certificate error upon opening Outlook 2007.
I read the technet article involving the autodiscover commands and I fixed the certificate pop up error when opening outlook.
However, when I do the testservices|fl in exchange powershell, I get the same errors/responses as the original poster.
I am just not too sure how to get them to show up correctly.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
