activesync 2010 - invalid username and password and error 401

TMG and green tick when test rule - worked fine with ISA

now with ex10 and TMG - no good

i do notice 401 error when i run test as below

all my TMG rules are working green tick

bu error 401

Time reported by the Microsoft Forefront TMG Firewall Service: 0.006 seconds
HTTP response: 401 Unauthorized
The test successfully completed for this URL.
LVL 1
philb19Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

philb19Author Commented:
external test i get this




      Connectivity Test Failed
 
Test Details
      ExRCA is testing Exchange ActiveSync.
       The Exchange ActiveSync test failed.
       
      Test Steps
       
      Attempting to resolve the host name lcex10a.landcorp.com.au in DNS.
       The host name resolved successfully.
       
      Additional Details
       IP addresses returned: 116.212.196.132
      Testing TCP port 443 on host lcex10a.landcorp.com.au to ensure it's listening and open.
       The port was opened successfully.
      Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
       
      Test Steps
       
      ExRCA is attempting to obtain the SSL certificate from remote server lcex10a.landcorp.com.au on port 443.
       ExRCA successfully obtained the remote SSL certificate.
       
      Additional Details
       Remote Certificate Subject: CN=exchcas.landcorp.com.au, OU=it, O=Landcorp, L=perth, S=Western Australia, C=AU, Issuer: CN=DigiCert High Assurance CA-3, OU=www.digicert.com, O=DigiCert Inc, C=US.
      Validating the certificate name.
       The certificate name was validated successfully.
       
      Additional Details
       Host name lcex10a.landcorp.com.au was found in the Certificate Subject Alternative Name entry.
      Testing the certificate date to confirm the certificate is valid.
       Date validation passed. The certificate hasn't expired.
       
      Additional Details
       The certificate is valid. NotBefore = 2/14/2012 12:00:00 AM, NotAfter = 4/18/2013 12:00:00 PM
      Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
       
      Additional Details
       Accept/Require Client Certificates isn't configured.
      Testing HTTP Authentication Methods for URL https://lcex10a.landcorp.com.au/Microsoft-Server-ActiveSync/.
       The HTTP authentication methods are correct.
       
      Additional Details
       ExRCA found all expected authentication methods and no disallowed methods. Methods found: Basic
      An ActiveSync session is being attempted with the server.
       Errors were encountered while testing the Exchange ActiveSync session.
       
      Test Steps
       
      Attempting to send the OPTIONS command to the server.
       Testing of the OPTIONS command failed. For more information, see Additional Details.
       
      Additional Details
       An HTTP 401 Unauthorized response was received from the remote ISA server. This is usually the result of an incorrect username or password. If you are attempting to log onto an Office 365 service, ensure you are using your full User Principal Name (UPN).


© 2011 Microsoft | Version 1.3 | Feedback | Privacy | Legal
Error
ExRCA has encountered an error.

The entire error report is listed below. Show Report  Hide Report

Copy error details to the Clipboard
No Additional Error Details

Close
Error

This field is required.
0
Keith AlabasterEnterprise ArchitectCommented:
You have set the TMG publishing rule to use FORMS?
How are you entering the credentials, what format?
Have you set the default domain name in the Exchange environment?

Are you running the Exchange edge service on the TMG itself?
0
philb19Author Commented:
hi html form authent on the listner for rule - yes

credentials domian\username

Have you set the default domain name in the Exchange environment?
what does this mean - how to do please?


Are you running the Exchange edge service on the TMG itself? NO edges service at all anywhere
0
philb19Author Commented:
fixed by setting correct url on the exchange server 2010
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
philb19Author Commented:
fixed myself
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Forefront ISA Server

From novice to tech pro — start learning today.