Avatar of q
q
Flag for United States of America asked on

Microsoft remote Connectivity analyzer, Outlook Connectivity test fails: cannot ping RPC proxy server

I had this question after viewing RPC Proxy can't be pinged.  I am preparing for the staged migration to O365 from Exchange 2003,  the Outlook Connectivity test , manually specifying server settings, using basic authentication, fails with the following, but with different exceptions from the previous question.  Our inside domain name is the same as outside. I am able to successfully use https://  public IP address/owa.  Any help will be appreciated.

Testing RPC over HTTP connectivity to server server.domain.org
       RPC over HTTP connectivity failed.
       
      Additional Details
       
HTTP Response Headers:
Content-Length: 1656
Content-Type: text/html
Date: Wed, 05 Sep 2018 19:10:45 GMT
Server: Microsoft-IIS/6.0
WWW-Authenticate: Basic realm="server.domain.org"
X-Powered-By: ASP.NET
Elapsed Time: 619 ms.
       
      Test Steps
       
      Attempting to resolve the host name server.domain.org in DNS.
       The host name resolved successfully.
       
      Additional Details
      Testing TCP port 443 on host server.domain.org to ensure it's listening and open.
       The port was opened successfully.
       
      Additional Details
      Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
       
      Additional Details
       
      Test Steps
      Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
       
      Additional Details
      Testing HTTP Authentication Methods for URL https://server.domain.org/rpc/rpcproxy.dll?server.domain.org:6002.
       The HTTP authentication methods are correct.
       
      Additional Details
      Attempting to ping RPC proxy server.domain.org.
       RPC Proxy can't be pinged.
       
      Additional Details
       
An unexpected network-level exception was encountered. Exception details:
Message: The remote server returned an error: (500) Internal Server Error.
Type: Microsoft.Exchange.Tools.ExRca.Extensions.MapiTransportException
Stack trace:
at Microsoft.Exchange.Tools.ExRca.Extensions.MapiRpcTestClient.PingProtocolProxy(String endpointIdentifier)
at Microsoft.Exchange.Tools.ExRca.Tests.MapiPingProxyTest.PerformTestReally()
Exception details:
Message: The remote server returned an error: (500) Internal Server Error.
Type: System.Net.WebException
Stack trace:
at System.Net.HttpWebRequest.GetResponse()
at RpcPingLib.RpcPing.PingProxy(String internalServerFqdn, String endpoint)
at Microsoft.Exchange.Tools.ExRca.Extensions.MapiRpcTestClient.PingProtocolProxy(String endpointIdentifier)
Elapsed Time: 48 ms
.
ExchangeOutlookMicrosoft 365

Avatar of undefined
Last Comment
Michael B. Smith

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Michael B. Smith

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
q

ASKER
Thanks Michael for your response.

i did the tests as recommended in the link above, which let me to a few other checks  netdiag /winsoc /v says It's not the NIC, and i assume winsock is not corrupted - seems like Exchange would be failing if it were.   It's not the certificate (connectivity test passes for the cert).   The error i get from the rcpping is below.  I was not sure of the syntax of the RpcProxyServer part of the command, so i used both the syntax as written and also with the name of my server.  Both failed, but with different results.   I did the test on both the exchange server and another server.  There is not a  lot of informative info about what to do about either error.  Do you have any further input??

I am wondering if i could just try  to continue with the migration anyway and see what will happen, if I get other  errors, maybe they will point me to a fix.

Results of the rpcping - done on the exchange server, and on a different member server gave 12007  and 12175 ping failure error.

C:\Program Files\Support Tools>rpcping -t ncacn_http -s myserver.mydomain.org -o RpcProxy=RPCProxyServer -P "administrator.mydomain.org.org*" -I "administrator.mydomain.org.org
*" -H 2 -u 10 -a connect -F 3 -v 3 -E -R none
RPCPing v2.12. Copyright (C) Microsoft Corporation, 2002
OS Version is: 5.2, Service Pack 2
Enter password for server:
Enter password for RPC/HTTP proxy:

RPCPinging proxy server RPCProxyServer with Echo Request Packet
Sending ping to server
Error 12007 returned in the WinHttpSendRequest.
Ping failed.

C:\Program Files\Support Tools>rpcping -t ncacn_http -s myserver.mydomain.org -o RpcProxy=myserver.mydomain.org-P "administrator.mydomain.org.org*" -I "administrator.mydomain.org.org
,*" -H 2 -u 10 -a connect -F 3 -v 3 -E -R none
RPCPing v2.12. Copyright (C) Microsoft Corporation, 2002
OS Version is: 5.2, Service Pack 2
Enter password for server:
Enter password for RPC/HTTP proxy:

RPCPinging proxy server myserver.mydomain.org with Echo Request Packet
Sending ping to server
Error 12175 returned in the WinHttpSendRequest.
Ping failed.
q

ASKER
Michael, i just found this here https://docs.microsoft.com/en-us/windows/desktop/WinHttp/error-messages, will investigate if i can.

ERROR_WINHTTP_SECURE_FAILURE

12175

One or more errors were found in the Secure Sockets Layer (SSL) certificate sent by the server. To determine what type of error was encountered, check for a WINHTTP_CALLBACK_STATUS_SECURE_FAILURE notification in a status callback function. For more information, see WINHTTP_STATUS_CALLBACK.
q

ASKER
MichaeI,

I dug deep into the WINTHTTP material, can't say it helped at all because i don't know what goes on that far in the background.  But on the journey i found lots of other info on RPC.  Finally found a registry setting that needed to be added on the Exchange server that was not there already. Once I added the key  all is well.

The registry setting for Windows Server 2003 global catalog servers is not
automated by Exchange 2003 setup. This setting must be configured either
manually or programmatically for RPC over HTTP to work. This is scheduled
to be included in Windows Server 2003 Service Pack 1 (SP1).
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Para
meters
Parameter: NSPI interface protocol sequences
Type: REG_MULTI_SZ
Value: ncacn_http:6004

Your initial answer led me down the right path, so thanks a lot!
Your help has saved me hundreds of hours of internet surfing.
fblack61
q

ASKER
Thanks Michael.
Michael B. Smith

Oh wow, that's a blast from the past! Glad it helped!