[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2625
  • Last Modified:

activesync 2010 - invalid username and password and error 401

TMG and green tick when test rule - worked fine with ISA

now with ex10 and TMG - no good

i do notice 401 error when i run test as below

all my TMG rules are working green tick

bu error 401

Time reported by the Microsoft Forefront TMG Firewall Service: 0.006 seconds
HTTP response: 401 Unauthorized
The test successfully completed for this URL.
0
philb19
Asked:
philb19
  • 4
1 Solution
 
philb19Author Commented:
external test i get this




      Connectivity Test Failed
 
Test Details
      ExRCA is testing Exchange ActiveSync.
       The Exchange ActiveSync test failed.
       
      Test Steps
       
      Attempting to resolve the host name lcex10a.landcorp.com.au in DNS.
       The host name resolved successfully.
       
      Additional Details
       IP addresses returned: 116.212.196.132
      Testing TCP port 443 on host lcex10a.landcorp.com.au to ensure it's listening and open.
       The port was opened successfully.
      Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
       
      Test Steps
       
      ExRCA is attempting to obtain the SSL certificate from remote server lcex10a.landcorp.com.au on port 443.
       ExRCA successfully obtained the remote SSL certificate.
       
      Additional Details
       Remote Certificate Subject: CN=exchcas.landcorp.com.au, OU=it, O=Landcorp, L=perth, S=Western Australia, C=AU, Issuer: CN=DigiCert High Assurance CA-3, OU=www.digicert.com, O=DigiCert Inc, C=US.
      Validating the certificate name.
       The certificate name was validated successfully.
       
      Additional Details
       Host name lcex10a.landcorp.com.au was found in the Certificate Subject Alternative Name entry.
      Testing the certificate date to confirm the certificate is valid.
       Date validation passed. The certificate hasn't expired.
       
      Additional Details
       The certificate is valid. NotBefore = 2/14/2012 12:00:00 AM, NotAfter = 4/18/2013 12:00:00 PM
      Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
       
      Additional Details
       Accept/Require Client Certificates isn't configured.
      Testing HTTP Authentication Methods for URL https://lcex10a.landcorp.com.au/Microsoft-Server-ActiveSync/.
       The HTTP authentication methods are correct.
       
      Additional Details
       ExRCA found all expected authentication methods and no disallowed methods. Methods found: Basic
      An ActiveSync session is being attempted with the server.
       Errors were encountered while testing the Exchange ActiveSync session.
       
      Test Steps
       
      Attempting to send the OPTIONS command to the server.
       Testing of the OPTIONS command failed. For more information, see Additional Details.
       
      Additional Details
       An HTTP 401 Unauthorized response was received from the remote ISA server. This is usually the result of an incorrect username or password. If you are attempting to log onto an Office 365 service, ensure you are using your full User Principal Name (UPN).


© 2011 Microsoft | Version 1.3 | Feedback | Privacy | Legal
Error
ExRCA has encountered an error.

The entire error report is listed below. Show Report  Hide Report

Copy error details to the Clipboard
No Additional Error Details

Close
Error

This field is required.
0
 
Keith AlabasterCommented:
You have set the TMG publishing rule to use FORMS?
How are you entering the credentials, what format?
Have you set the default domain name in the Exchange environment?

Are you running the Exchange edge service on the TMG itself?
0
 
philb19Author Commented:
hi html form authent on the listner for rule - yes

credentials domian\username

Have you set the default domain name in the Exchange environment?
what does this mean - how to do please?


Are you running the Exchange edge service on the TMG itself? NO edges service at all anywhere
0
 
philb19Author Commented:
fixed by setting correct url on the exchange server 2010
0
 
philb19Author Commented:
fixed myself
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now