Link to home
Start Free TrialLog in
Avatar of nocalerts
nocalerts

asked on

OWA 403 forbidden after reboot of server.

We had a mailflow issue this morning with our exchange front end. I rebooted it and fixed the problem. But now when we go to our OWA site we are getting a 403 Forbidden error. If I start the address with HTTPS it works but doesn't do the correct redirect when we type in just the host and domain like it used to.  I'm sure it is just an easy setting change but I haven't been able to find a solution to my exact issue.


Thanks
Avatar of LeeDerbyshire
LeeDerbyshire
Flag of United Kingdom of Great Britain and Northern Ireland image

The 403 error is just telling you that you need to use https with a resource that has the SSL Required checkbox activated.  You need to find out why the redirect doesn't work.  What happens when you try it without /owa (or /exchange if you have E2000/2003)?  Do you just get the default web site page?
Avatar of nocalerts
nocalerts

ASKER

We have a html document that does the redirect in the web root. so when you go to owa.ourdomain.com you hit that page that sends you to https: we don't have to put the /owa on because the redirect has the full path. We are on 2010.

Thanks
What do you currently see in the browser when you try to use the redirect (i.e. you go to straight to owa.yourdomain.com without /owa)?  Some kind of error message?  Or a blank page?  Does the address in the address bar change to something else, or does it remain as  https://owa.yourdomain.com ?

Can you find the iis log entries generated by a login where the redirect doesn't work?
The address doesn't change and this is what I get on the page.

Server Error
403 - Forbidden: Access is denied.
You do not have permission to view this directory or page using the credentials that you supplied.
ASKER CERTIFIED SOLUTION
Avatar of LeeDerbyshire
LeeDerbyshire
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
This is the HTML code we are using. I believe this is the only redirect we have set up, and as I said it was workign before the reboot.

<!--
  default.htm
  Copyright (c) 2002 - 2006 Citrix Systems, Inc. All Rights Reserved.
  Web Interface 4.5.1.8215
-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
<head>
    <title>Title</title>
    <meta http-equiv="REFRESH" content="0; URL=login.aspx">
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    <meta name="ROBOTS" content="NOINDEX, NOFOLLOW, NOARCHIVE">
</head>
<body onLoad='location="https://OWA.OURDOMAIN.com/owa";'>
 </body>
</html>


 I will check the SSL settings.
Thanks
That was it. The require SSL box got checked after the reboot for the default site where the redirect was. Un checking that fixed it.

Thanks
Exchange Service Packs tend to select that without you wanting it to.  if you applied a service pack as part of fixing your mailflow, then that's where it came from.