Solved

451 5.7.3 Cannot achieve Exchange Server authentication Error Exchange 2007

Posted on 2008-10-13
18
2,070 Views
Last Modified: 2008-11-04
Hi everyone,
Im in the middle of an Exchange 2003 to Exchange 2007 transition, and i have come to an issue. Ill explain our mail setup, we have one exchange 2003 server which also hosts our spam filters (not a good setup but works for now). The spam filters on that machine has the smtp port set to 25 and i had to set the smtp port on exchange to 26, now with the exchange 2007 server added i cant send internal mail to the old exchange server it just sits in the que with this error "451 5.7.3 Cannot achieve Exchange Server authentication" now i have done some reading and found out that this probably due the the non standard smtp port that exchange 2003 is running on, as i have checked securities and authentication. Now what im asking is how do i tell exchange 2007 to send mail to port 26 on the old exchange server?
0
Comment
Question by:zeroburnfire
  • 9
  • 5
  • 2
18 Comments
 
LVL 23

Expert Comment

by:Justin Durrant
ID: 22703885
Is Integrated Windows Authentication turned on the Default SMTP Virtual Server?
0
 

Author Comment

by:zeroburnfire
ID: 22703920
Yes it is, that was one of the first things i checked! On both exchange servers IWA is turned on.
0
 
LVL 23

Expert Comment

by:Justin Durrant
ID: 22703971
I am not sure the port can be changed.. have you tried switching from 26 to 25 just to be sure that is the issue?
0
 

Author Comment

by:zeroburnfire
ID: 22704047
Ok just tried that, and with out any luck same issue! Hmm... i guess im totally out of ideas on why im getting this error message then!
0
 
LVL 23

Expert Comment

by:Justin Durrant
ID: 22704088
0
 
LVL 23

Expert Comment

by:Justin Durrant
ID: 22704107
Are you using TLS?
0
 

Author Comment

by:zeroburnfire
ID: 22704134
Yea i had looked at that post and realized maybe that was an issue with being on port 26 thats why i asked my question.

On both servers TLS is not checked off for security. Should i check them off and give it a try?
0
 

Author Comment

by:zeroburnfire
ID: 22704319
One thing that i know for a fact and this might help out. Today i added a new send connector to send mail out to the net as it was just queuing the emails. When i did that, thats when internal emails stoped going through to the other exchange server.  I referred to MS KB556055 to do that.
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 
LVL 23

Expert Comment

by:Justin Durrant
ID: 22704493
0
 

Author Comment

by:zeroburnfire
ID: 22704519
Yea that was the guide that i followed when doing my prep and install of exchange 2007.
0
 

Author Comment

by:zeroburnfire
ID: 22710569
Anybody else have any ideas?
0
 

Author Comment

by:zeroburnfire
ID: 22730932
ok found this in my log files and the only thing i see wrong is under cn=uhca probbly should read cn=uhca1 as thats the domain. Am i correct in thinking that?

2008-10-16T00:09:10.514Z,08CAFC3BFD8D6359,SMTP,"cn=first routing group,cn=routing groups,cn=first administrative group,cn=administrative groups,cn=uhca,cn=microsoft exchange,cn=services,cn=configuration,dc=uhca1,dc=local",+,e237e528-e744-429b-8f6a-6e34a0344161
2008-10-16T00:09:10.514Z,08CAFC3BFD8D6359,SMTP,"cn=first routing group,cn=routing groups,cn=first administrative group,cn=administrative groups,cn=uhca,cn=microsoft exchange,cn=services,cn=configuration,dc=uhca1,dc=local",>,"mail.uhca1.local[10.10.0.6, 10.10.0.75]"
2008-10-16T00:09:10.514Z,08CAFC3BFD8D6359,SMTP,"cn=first routing group,cn=routing groups,cn=first administrative group,cn=administrative groups,cn=uhca,cn=microsoft exchange,cn=services,cn=configuration,dc=uhca1,dc=local",>,Established connection to 10.10.0.6
2008-10-16T00:09:11.092Z,08CAFC3BFD8D6359,SMTP,"cn=first routing group,cn=routing groups,cn=first administrative group,cn=administrative groups,cn=uhca,cn=microsoft exchange,cn=services,cn=configuration,dc=uhca1,dc=local",>,Established connection to 10.10.0.75
2008-10-16T00:09:12.827Z,08CAFC3BFD8D6359,SMTP,"cn=first routing group,cn=routing groups,cn=first administrative group,cn=administrative groups,cn=uhca,cn=microsoft exchange,cn=services,cn=configuration,dc=uhca1,dc=local",-,Retry
0
 
LVL 33

Accepted Solution

by:
Exchange_Geek earned 500 total points
ID: 22755823
"cn=first routing group,cn=routing groups,cn=first administrative group,cn=administrative groups,cn=uhca,cn=microsoft exchange,cn=services,cn=configuration,dc=uhca1,dc=local"

If you are talking about about cn=uhca not being shown as cn=uhca1.

"dc=uhca1,dc=local" ------- this is your domain, this looks fine.
"cn=uhca,cn=microsoft exchange" -------- this is your exchange organization name

Check at this location and inform us what is mentioned for E2k3 box. (DO NOT CHANGE ANYTHNG)

Exchange 2000 / 2003:

1. Start the Exchange System Manager.

2. Locate and click Servername, click Protocols, and then click SMTP.
 
3. Right-click the Default SMTP Virtual Server object, and then click Properties.

4. On the General tab, click the Advanced button, click the Edit button, and then set the Transmission Control Protocol (TCP) port number.
0
 

Author Comment

by:zeroburnfire
ID: 22759611
The port is set to 26. This is because we have a email filter set up on the same server that accepts all the mail on port 25 and sends it to the exchange server on port 26.
0
 
LVL 33

Expert Comment

by:Exchange_Geek
ID: 22761902
Great, in that case please use telnet from E2k7 box to drop and email on E2k3 to check if the mail flow works fine over RGC.
0
 

Author Comment

by:zeroburnfire
ID: 22777096
Ok issues solved! This came back to my orginal question about the ports. Yesterday our email filter decided to crap out and support sucks on it so i turned it off and set my smtp port on exchange 03 back to 25. Once i did that my error went away and mail is flowing great between my 2 exchange servers! So if you use any port other than 25 when doing a transition from exchange 2003 to exchange 2007 make sure exchange 2003 is on 25! Since im new here and i solved my own question i have no idea on points, but im willing to give them out to all that helped me.
0

Featured Post

Do email signature updates give you a headache?

Constantly trying to correctly format email signatures? Spending all of your time at every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

Join & Write a Comment

Are you using email marketing software? If not, you're missing out on effortless marketing and the reaching of desired conversion rates through email marketing software.
Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This Micro Tutorial will demonstrate the easy use of Gmail embedding images in your email so the recipient of your email can view them in context.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now