?
Solved

IIS 7 Log Interpretation

Posted on 2012-09-19
4
Medium Priority
?
783 Views
Last Modified: 2012-11-05
I'm troubleshooting access to an Exchange Web Services page on an Exchange 2010 Client Access Server.  I have a second CAS server available for comparison.  When I browse to https://externalserver1.domain.com/EWS/Exchange.asmx, I'm prompted for credentials.  If I provide bona fide credentials, the prompt simply reappears.  After 3 tries, I get a blank page.  The IIS log shows:

{date/time} 10.168.110.14 GET /EWS/Services.wsdl - 80 - 10.168.150.3 ...

10.168.150.3 is a Load Balancer, which is why the request comes in on port 80; we're using SSL offloading.  The end of that line in the log file shows 401 1 2148074254 0, an authorization error.

Comparatively, when I browse to https://externalserver2.domain.com/EWS/Exchange.asmx, I get the XML content I'm hoping for.  The IIS log on that server shows:

{date/time} 10.168.110.6 GET /EWS/Services.wsdl - 80 domain\username 10.168.150.3

The key difference is obviously the successful passing of credentials in the second case, but I don't know why it's happening on that server and not the first server.  I feel like I've configured the virtual directories on the two servers identically, including authentication (Anonymous, Basic, Windows).  Note that I'm not actually prompted for credentials with the second server.  Honestly, I'm not sure how the credentials are getting there!

What additional information can I provide to help you help me get to the bottom of this?  My goal is to get that first server behaving more like the second one, with the ultimate goal of allowing successful Blackberry Internet Service connections to the server.  Right now BB users aren't able to pick up mail from this server, and I'm guessing this EWS authentication problem is key.

Thanks!
0
Comment
Question by:StrataDecisionIT
  • 3
4 Comments
 
LVL 10

Expert Comment

by:gaurav05
ID: 38416833
Hi,

Could you please check both the servers windows update are same

as well as have you install any service packs for both the exchange server.
0
 

Author Comment

by:StrataDecisionIT
ID: 38418259
Gaurav05,

Both Exchange servers are at SP1.

I see there is a large difference between the two servers in terms of hotfixes.  In general Server1 has far more hotfixes installed than Server2.

Are you aware of a particular hotfix that could explain the difference in behavior between these two servers?

Thanks,
   Shawn
0
 

Accepted Solution

by:
StrataDecisionIT earned 0 total points
ID: 38447655
We've decided to try to circumvent this problem by implementing split-brain DNS.
0
 

Author Closing Comment

by:StrataDecisionIT
ID: 38566896
We elected to work around the stated problem rather than resolve it directly.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As much as Microsoft wants to kill off PST file support, just as they tried to do with public folders, there are still times when it is useful or downright necessary to export Exchange mailboxes to PST files. Thankfully, it is still possible to e…
Steps to fix “Unable to mount database. (hr=0x80004005, ec=1108)”.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
This video discusses moving either the default database or any database to a new volume.
Suggested Courses

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question