blaze2342
asked on
OWA prompting for passwords
We are running Exchange 2003 on Server 2003. When my OWA users log into the website they get prompted for their username.. it lets them in and then once everything is loaded they get prompted again and again and again. As far as I can tell they have access to what they need they just keep getting prompted. I suspect its a permission issue. I've tried recreating the virtual directories using this guide http://www.msexchange.org/tutorials/Resetting-OWA-Folder-IIS-security-permissions-Exchange-2003.html but no luck. Thoughts?
You'll need to look at the IIS Log Files to see which resources are generating a 401 status, causing the login box to appear. This problem is usually caused by not having Anonymous Access enabled on the ExchWeb Virtual Directory in IIS Manager.
ASKER
I found this in the log.. not sure if this is right
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 1 0
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 1 0
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 5 0
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 5 0
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:13:38 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M
ASKER
You know the one thing that isnt popping up right now is the reminders that usually pop up when you log into exchange. The logon prompt is popping up when that normally would pop up. Thoughts?
There should be a lot more than that. You will need to note the exact time that you were asked to log in, and then look in the IIS log to see what resource the browser has asked the server for (possibly without you knowing, since it does things in the background). Note that the times in the IIS log files are in GMT.
ASKER
oh yea.. the log file is huge. I was just grabbing the last couple of lines from it related to the user "cook" that i'm testing with. What do you think about the reminders thing?
2007-09-27 14:17:43 W3SVC1 66.152.24.189 SEARCH /exchange/cook/Inbox/ - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 1 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SEARCH /exchange/cook/Inbox/ - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 207 0 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 5 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 GET /exchweb/6.5.7651.60/contr ols/ctrl_r eminder.ht c - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 304 0 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 1 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 5 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 2 2148074254
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 1 0
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 5 0
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 1 0
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 1 0
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 5 0
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 5 0
2007-09-27 14:18:44 W3SVC1 66.152.24.189 GET /exchweb/6.5.7651.60/contr ols/ctrl_n otify.htc - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 304 0 0
2007-09-27 14:18:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Inbox - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 2 2148074254
2007-09-27 14:18:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Inbox - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 1 0
2007-09-27 14:18:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Inbox - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M SIE+7.0;+W indows+NT+ 5.1;+.NET+ CLR+1.1.43 22;+.NET+C LR+2.0.507 27;+.NET+C LR+3.0.045 06.30) 401 5 0
2007-09-27 14:17:43 W3SVC1 66.152.24.189 SEARCH /exchange/cook/Inbox/ - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SEARCH /exchange/cook/Inbox/ - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:17:44 W3SVC1 66.152.24.189 GET /exchweb/6.5.7651.60/contr
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:17:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Calendar - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:17:46 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Tasks - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:18:44 W3SVC1 66.152.24.189 GET /exchweb/6.5.7651.60/contr
2007-09-27 14:18:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Inbox - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:18:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Inbox - 80 - 66.152.24.187 Mozilla/4.0+(compatible;+M
2007-09-27 14:18:44 W3SVC1 66.152.24.189 SUBSCRIBE /exchange/cook/Inbox - 80 ei\cook 66.152.24.187 Mozilla/4.0+(compatible;+M
All those 401,5s look strange. You shouldn't be getting any of those at all. 401;5 means 'Authorization failed by ISAPI/CGI application'. What that might be, I don't know. Do you have Forms-based Authentication enabled?
ASKER
Nope.
ASKER
Here are my virtual directory permissions:
Exchange - Basic with Domain
ExchWeb - anonymous
OMA - Basic with Domain
Public - Integrated, Basic with Domain
OWAAdmin - Basic with Domain
Microsoft Server Activesync - Basic with Domain
IISADMPWD - Anonymous, Integrated
Exadmin - Integrated
Exchange - Basic with Domain
ExchWeb - anonymous
OMA - Basic with Domain
Public - Integrated, Basic with Domain
OWAAdmin - Basic with Domain
Microsoft Server Activesync - Basic with Domain
IISADMPWD - Anonymous, Integrated
Exadmin - Integrated
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.