StrataDecisionIT
asked on
IIS 7 Log Interpretation
I'm troubleshooting access to an Exchange Web Services page on an Exchange 2010 Client Access Server. I have a second CAS server available for comparison. When I browse to https://externalserver1.domain.com/EWS/Exchange.asmx, I'm prompted for credentials. If I provide bona fide credentials, the prompt simply reappears. After 3 tries, I get a blank page. The IIS log shows:
{date/time} 10.168.110.14 GET /EWS/Services.wsdl - 80 - 10.168.150.3 ...
10.168.150.3 is a Load Balancer, which is why the request comes in on port 80; we're using SSL offloading. The end of that line in the log file shows 401 1 2148074254 0, an authorization error.
Comparatively, when I browse to https://externalserver2.domain.com/EWS/Exchange.asmx, I get the XML content I'm hoping for. The IIS log on that server shows:
{date/time} 10.168.110.6 GET /EWS/Services.wsdl - 80 domain\username 10.168.150.3
The key difference is obviously the successful passing of credentials in the second case, but I don't know why it's happening on that server and not the first server. I feel like I've configured the virtual directories on the two servers identically, including authentication (Anonymous, Basic, Windows). Note that I'm not actually prompted for credentials with the second server. Honestly, I'm not sure how the credentials are getting there!
What additional information can I provide to help you help me get to the bottom of this? My goal is to get that first server behaving more like the second one, with the ultimate goal of allowing successful Blackberry Internet Service connections to the server. Right now BB users aren't able to pick up mail from this server, and I'm guessing this EWS authentication problem is key.
Thanks!
{date/time} 10.168.110.14 GET /EWS/Services.wsdl - 80 - 10.168.150.3 ...
10.168.150.3 is a Load Balancer, which is why the request comes in on port 80; we're using SSL offloading. The end of that line in the log file shows 401 1 2148074254 0, an authorization error.
Comparatively, when I browse to https://externalserver2.domain.com/EWS/Exchange.asmx, I get the XML content I'm hoping for. The IIS log on that server shows:
{date/time} 10.168.110.6 GET /EWS/Services.wsdl - 80 domain\username 10.168.150.3
The key difference is obviously the successful passing of credentials in the second case, but I don't know why it's happening on that server and not the first server. I feel like I've configured the virtual directories on the two servers identically, including authentication (Anonymous, Basic, Windows). Note that I'm not actually prompted for credentials with the second server. Honestly, I'm not sure how the credentials are getting there!
What additional information can I provide to help you help me get to the bottom of this? My goal is to get that first server behaving more like the second one, with the ultimate goal of allowing successful Blackberry Internet Service connections to the server. Right now BB users aren't able to pick up mail from this server, and I'm guessing this EWS authentication problem is key.
Thanks!
ASKER
Gaurav05,
Both Exchange servers are at SP1.
I see there is a large difference between the two servers in terms of hotfixes. In general Server1 has far more hotfixes installed than Server2.
Are you aware of a particular hotfix that could explain the difference in behavior between these two servers?
Thanks,
Shawn
Both Exchange servers are at SP1.
I see there is a large difference between the two servers in terms of hotfixes. In general Server1 has far more hotfixes installed than Server2.
Are you aware of a particular hotfix that could explain the difference in behavior between these two servers?
Thanks,
Shawn
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
We elected to work around the stated problem rather than resolve it directly.
Could you please check both the servers windows update are same
as well as have you install any service packs for both the exchange server.