• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

CAS Failover Authentication Prompt

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2010] >> High Availability >> CAS Failover Authentication Prompt Page: [1]
Login
Message << Older Topic   Newer Topic >>
CAS Failover Authentication Prompt - 20.Dec.2011 3:51:24 PM   
ctberry78

 

Posts: 10
Joined: 22.Aug.2011
Status: offline
I have 3 CAS/HT servers in a CAS array and 4 servers in DAG. The CAS array is load balanced with a hardware load balancer. I have enabled kerberos authentication. When I reboot a CAS server I get prompted for a password. I put in password and Outlook reconnects. If I leave Outlook running and reboot a CAS server again I don't get prompted, Outlook just says disconnected and retrying like it should and will reconnect. If I restarted Outlook and reboot a CAS server I get prompted again. I have turned off autodiscover and that didn't help. I am using cached mode and have disabled that. Nothing seems to work. All servers are Windows 2008 R2 SP1 with Exchange 2010 SP2. Clients are XP and 7 with Outlook 2010 SP1. Any ideas?
Post #: 1
RE: CAS Failover Authentication Prompt - 27.Dec.2011 7:40:38 AM   
jveldh

 

Posts: 2335
Joined: 12.Apr.2008
From: The Netherlands
Status: offline
Hi,

And did you configure an alternate service account (ASA) for the CAS Array?

Regards,
Johan

_____________________________

Best regards,

Johan Veldhuis

Visit my Exchange blog

(in reply to ctberry78)
Post #: 2
RE: CAS Failover Authentication Prompt - 4.Jan.2012 8:16:30 PM   
ctberry78

 

Posts: 10
Joined: 22.Aug.2011
Status: offline
Yes, the ASA account was created with all the needed SPNs.

(in reply to jveldh)
Post #: 3
RE: CAS Failover Authentication Prompt - 31.Jan.2012 11:34:03 PM   
wiseowl

 

Posts: 1
Joined: 31.Jan.2012
Status: offline
Which Load Balancer are you using?

I have heard that in some situations, the CAS server may be shown as available to the Load Balancer but is not yet able to service a request.

It is possible that in your case, a shutdown is not being detected fast enough by the load balancer.  Based on a friend's recommendation, try reducing the monitoring interval to 5 seconds and a timeout of 16 seconds.  This means that the LB would send a TCP probe once every 5 seconds and would wait up to 16 seconds to get some response.  If the response does arrive in 16 seconds, the server is marked down.   On an F5 BigIP LTM you can set a "time to UP" interval of 90 seconds, this means that the LTM would not try to see if the server is back UP until 90 seconds have passed.  This should give the server time to finish booting.

Let us know if that works.  I'd like to know if this fixes it myself because I need to do the same for a customer.

Thanks.

(in reply to ctberry78)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2010] >> High Availability >> CAS Failover Authentication Prompt Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter