Maybe I am missing something but I think this is what I already have in place... Basic and Windows are enabled in IIS on the OWA directory.
Main Topics
Browse All Topics
Loading Advertisement...
Question
OWA Prompts for Login Twice
I am logging into OWA on my Exchange 2007 server and it is working...however, it is asking for me to login twice. The first page looks like the ISA Server form and the second looks like the Exchange OWA form. I am guessing that something is wrong with ISA passing the Auth to Exchange but I am not sure exactly where it is breaking down. In ISA, under Auth Delegation it is set to "No Auth - but the client can Auth Directly" and in the listener, it is set to HTML form Authentication with Windows (AD) selected below that. Any advice?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Subscribe now for full access to Experts Exchange and get
Instant Access to this Solution
- Plus...
- 30 Day FREE access, no risk, no obligation
- Collaborate with the world's top tech experts
- Unlimited access to our exclusive solution database
- Never be left without tech help again
Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.
- "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
- "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
- "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.
See what Experts Exchange can do for you.
Got a question?
We've got the answer.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
Need individual assistance?
Our experts are ready to help.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Want to learn from the best?
Read articles from industry experts.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Working on a long term project?
Store your work and research.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
What Makes Experts Exchange Unique?
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Trusted by the world's most respected brands.
Faithfully serving IT professionals since 1996.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Free Tech Articles
-
WARNING: 5 Reasons why you should NEVER fix a computer for free.
It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
-
SCCM OSD Basic troubleshooting
SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
-
Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
-
Create a Win7 Gadget
This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
-
Outlook continually prompting for username and password
There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
-
Backup Exchange 2010 Information Store using Windows Backup
There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...
Cloud Class Webinars
- Avoiding Bugs in Microsoft Access
Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
- Top 10 Best New Features in Visio 2010
Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
- IT Consultant Business Secrets Revealed
Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
- Disaster Recovery and Business Continuity
Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
- Organize Your Visio Diagrams with Containers and Lists
Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
- How to Us Objects, Properties, Events and Methods in Microsoft Access
Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...
Join the Community
Give a Little. Get a Lot.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Answers
Hi, please check http://www2.cit.cornell.ed
or either reset from AD
Please check configuration as below http://www.msexchange.org/
See attached...
- OWA.JPG
- 44 KB
OWA
OPEN IIS Console
Expand your "Web Sites"
2) Right click on "OWA" => "Properties" and select the "Directory Security Tab". Click on "Edit" under "Access control and authentication control" (Should be the first box)
3) Make sure ONLY anonymous access is selected.
4) Expand "OWA"virtual directory.
5) Right Click on the "bin" => "Properties" and select "Directory Security" tab. Click on "Edit" under "Access control and authentication control" (Should be the first box)
6) Make sure ONLY anonymous access is selected.
Let me know what you find and if this helps. You may need to restart IIS after making the changes...
from cmd iisreset
Not sure if this makes a difference but I acctually have another ISA Server and another Exchange server in another site on another IP address. It is working fine. This one, for some reason, has all the same settings (that I can tell) (I moved my Exchange Server back to forms based Auth since that is what the one that is working is as well) but it is prompting for two loggins. Something have to be different.
No...the mailbox is on the server I am going to. I am having an issue where the CAS server is not working so I can't get to mailboxes on the other servers. But if I go to the external URL associated with the ISA / Exchange config, it works. I just have to log in twice on the one pair that I am trying to fix.
May be and you may add it in OWA publishing rule :
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="ProgId" content="Word.Document"><m
You can remove roles without rebuilding. http://technet.microsoft.c
If it's a mailbox server I would suggest removing the CAS role and creating a new server with the CAS role only and then publish this with ISA
please
What happens when you do this:
Test-OwaConnectivity URL https://url.com/owa -MailboxCredential (Get-Credential domain\user) -TrustAnySSLCertificate -Verbose
and
Test-WebServicesConnectivi
+ The mailbox that we are trying to access is that a E2K3 mailbox?
+ When we try to browse OWA do we use /owa or /exchange to browse?
+ FBA should be enabled on any one of the servers ISA/E2K7
+ Do you have any E2K3 servers in your ORG??
+ If yes, check with the authentication setting for ExchWeb as well it should be Anonymous
Please check with the above questions and let us know
Does this tell you anything:
[PS] C:\Windows\System32> Test-OwaConnectivity https://tismail.ldichina.c
-Mai
VERBOSE: Test-OwaConnectivity : Beginning processing.
VERBOSE: The TrustAnySSLCertificate flag has been set. The task will not verify
that the server certificate is valid before it sends the user requests and
credentials to this server.
User credentials will be used for user: ldi\test1
Do you want to test Outlook Web Access connectivity on Client Access server
LDI-MSG-02.LDi.LDiCh
VE
test instance for URL 'https://tismail.ldichina.
-URL argument.
VERBOSE: Test-OwaConnectivity : Starting test. Target URL =
'https://tismail.ldichina
VERBOSE: Test-OwaConnectivity : The TrustAnySSLCertificate flag was specified.
Therefore, any certificate will be trusted.
VERBOSE: Test-OwaConnectivity : The Test-OwaConnectivity cmdlet is sending an
HTTP GET logon request without credentials for authentication type
verification.
VERBOSE: Test-OwaConnectivity : The HTTP request succeeded with result code 200
(OK).
VERBOSE: Test-OwaConnectivity : The logon page is from Microsoft Internet
Security and Acceleration (ISA) Server, not Outlook Web Access.
VERBOSE: Test-OwaConnectivity : Microsoft Exchange reported that it supports
authentication method FBA.
VERBOSE: Test-OwaConnectivity : This virtual directory URL type is External or
Unknown. Therefore, the authentication type will not be checked.
VERBOSE: Test-OwaConnectivity : The Test-OwaConnectivity cmdlet is sending an
HTTP request for logon page
'https://tismail.ldich
VERBOSE: Test-OwaConnectivity : Trying logon with method 'Fba'.
VERBOSE: Test-OwaConnectivity : The HTTP request succeeded with result code 200
(OK).
WARNING: The test was unable to log on to Outlook Web Access because of an
authentication failure.
WARNING: The test for URL 'https://tismail.ldichina.
WARNING: column "Error" does not fit into the display and was removed.
ClientAccessServer MailboxServer URL Scenario Result Laten
cy (m
s)
------------------ ------------- --- -------- ------ -----
https://tismail.ldichin Logon Skipped -1
a.com/owa/
VERBOSE: Test-OwaConnectivity : Ending processing.
ahmedabdelba -- not sure I understood what you were saying. I may need more detail.
saakar_rao -
+ The mailbox that we are trying to access is that a E2K3 mailbox? No, everything is Exchange 2007 running on Windows Server 2008 (execpt ISA 2006 running on Windows Server 2003 R2)
+ When we try to browse OWA do we use /owa or /exchange to browse? I have an automatic redirect to /owa. Either way I access it is the same result.
+ FBA should be enabled on any one of the servers ISA/E2K7 - I think it is enabled on both
+ Do you have any E2K3 servers in your ORG?? - No
+ If yes, check with the authentication setting for ExchWeb as well it should be Anonymous
If you have just AIO server and NO exchange 2003 and you are trying to access OWA using /owa and not /exchange then you don't need to have CAS on a different server it is suppose top work.
The only concern that I can find is the FBA enabled on both you just have to make sure that FBA is enabled on one of the servers either ISA or Exchange
Check with Scenario 4 & 5
http://technet.microsoft.c
When you will access an Exchange 2007 mailbox using /exchange it will prompt you for password twice, and redirect to /owa. If you have just E2K7 in your domain why you want /exchange to work?? do you have any Entourage clients?? If not then you don't need /exchange.
/exchweb is also a legacy VDIR.
/public >> what is the error that you get when u try to access /public??
I do have Entourage Clients...
Public says:
Testing URL https://XXX.XXX.com:443/pu
Categ
Error details: The authentication delegation method defined in the rule does not match the authentication method selected for the published directory on the server hosting the site. Publishing rule authentication delegation method: Basic. Published server authentication methods: Forms-Based Authentication.
Action: You can change the authentication method on the published server or select "No delegation, but client may authenticate directly" in the Authentication Delegation tab of the publishing rule.
Check the below TechNet link
Authentication in ISA Server 2006
http://technet.microsoft.c
3 Ways to Join
Business Accounts
- Perfect for organizations
- Multiple users
- Save over 36%
- Create a Business Account
Answer for Membership
- Earn free access
- Showcase your knowledge
- No credit card required
- Sign Up to Answer
Loading Advertisement...
by: ahmedabdelbasetPosted on 2009-09-16 at 00:21:42ID: 25342782
Hi,
Use basic authentication/integrated on Exchange server and Form based on ISA server .