We help IT Professionals succeed at work.

Microsoft remote Connectivity analyzer, Outlook Connectivity test fails:  cannot ping RPC  proxy server

q
q asked
on
435 Views
Last Modified: 2018-09-07
I had this question after viewing RPC Proxy can't be pinged.  I am preparing for the staged migration to O365 from Exchange 2003,  the Outlook Connectivity test , manually specifying server settings, using basic authentication, fails with the following, but with different exceptions from the previous question.  Our inside domain name is the same as outside. I am able to successfully use https://  public IP address/owa.  Any help will be appreciated.

Testing RPC over HTTP connectivity to server server.domain.org
       RPC over HTTP connectivity failed.
       
      Additional Details
       
HTTP Response Headers:
Content-Length: 1656
Content-Type: text/html
Date: Wed, 05 Sep 2018 19:10:45 GMT
Server: Microsoft-IIS/6.0
WWW-Authenticate: Basic realm="server.domain.org"
X-Powered-By: ASP.NET
Elapsed Time: 619 ms.
       
      Test Steps
       
      Attempting to resolve the host name server.domain.org in DNS.
       The host name resolved successfully.
       
      Additional Details
      Testing TCP port 443 on host server.domain.org to ensure it's listening and open.
       The port was opened successfully.
       
      Additional Details
      Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
       
      Additional Details
       
      Test Steps
      Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
       
      Additional Details
      Testing HTTP Authentication Methods for URL https://server.domain.org/rpc/rpcproxy.dll?server.domain.org:6002.
       The HTTP authentication methods are correct.
       
      Additional Details
      Attempting to ping RPC proxy server.domain.org.
       RPC Proxy can't be pinged.
       
      Additional Details
       
An unexpected network-level exception was encountered. Exception details:
Message: The remote server returned an error: (500) Internal Server Error.
Type: Microsoft.Exchange.Tools.ExRca.Extensions.MapiTransportException
Stack trace:
at Microsoft.Exchange.Tools.ExRca.Extensions.MapiRpcTestClient.PingProtocolProxy(String endpointIdentifier)
at Microsoft.Exchange.Tools.ExRca.Tests.MapiPingProxyTest.PerformTestReally()
Exception details:
Message: The remote server returned an error: (500) Internal Server Error.
Type: System.Net.WebException
Stack trace:
at System.Net.HttpWebRequest.GetResponse()
at RpcPingLib.RpcPing.PingProxy(String internalServerFqdn, String endpoint)
at Microsoft.Exchange.Tools.ExRca.Extensions.MapiRpcTestClient.PingProtocolProxy(String endpointIdentifier)
Elapsed Time: 48 ms
.
Comment
Watch Question

Managing Consultant
CERTIFIED EXPERT
Commented:
This problem has been solved!
(Unlock this solution with a 7-day Free Trial)
UNLOCK SOLUTION
q

Author

Commented:
Thanks Michael for your response.

i did the tests as recommended in the link above, which let me to a few other checks  netdiag /winsoc /v says It's not the NIC, and i assume winsock is not corrupted - seems like Exchange would be failing if it were.   It's not the certificate (connectivity test passes for the cert).   The error i get from the rcpping is below.  I was not sure of the syntax of the RpcProxyServer part of the command, so i used both the syntax as written and also with the name of my server.  Both failed, but with different results.   I did the test on both the exchange server and another server.  There is not a  lot of informative info about what to do about either error.  Do you have any further input??

I am wondering if i could just try  to continue with the migration anyway and see what will happen, if I get other  errors, maybe they will point me to a fix.

Results of the rpcping - done on the exchange server, and on a different member server gave 12007  and 12175 ping failure error.

C:\Program Files\Support Tools>rpcping -t ncacn_http -s myserver.mydomain.org -o RpcProxy=RPCProxyServer -P "administrator.mydomain.org.org*" -I "administrator.mydomain.org.org
*" -H 2 -u 10 -a connect -F 3 -v 3 -E -R none
RPCPing v2.12. Copyright (C) Microsoft Corporation, 2002
OS Version is: 5.2, Service Pack 2
Enter password for server:
Enter password for RPC/HTTP proxy:

RPCPinging proxy server RPCProxyServer with Echo Request Packet
Sending ping to server
Error 12007 returned in the WinHttpSendRequest.
Ping failed.

C:\Program Files\Support Tools>rpcping -t ncacn_http -s myserver.mydomain.org -o RpcProxy=myserver.mydomain.org-P "administrator.mydomain.org.org*" -I "administrator.mydomain.org.org
,*" -H 2 -u 10 -a connect -F 3 -v 3 -E -R none
RPCPing v2.12. Copyright (C) Microsoft Corporation, 2002
OS Version is: 5.2, Service Pack 2
Enter password for server:
Enter password for RPC/HTTP proxy:

RPCPinging proxy server myserver.mydomain.org with Echo Request Packet
Sending ping to server
Error 12175 returned in the WinHttpSendRequest.
Ping failed.
q

Author

Commented:
Michael, i just found this here https://docs.microsoft.com/en-us/windows/desktop/WinHttp/error-messages, will investigate if i can.

ERROR_WINHTTP_SECURE_FAILURE

12175

One or more errors were found in the Secure Sockets Layer (SSL) certificate sent by the server. To determine what type of error was encountered, check for a WINHTTP_CALLBACK_STATUS_SECURE_FAILURE notification in a status callback function. For more information, see WINHTTP_STATUS_CALLBACK.
q

Author

Commented:
MichaeI,

I dug deep into the WINTHTTP material, can't say it helped at all because i don't know what goes on that far in the background.  But on the journey i found lots of other info on RPC.  Finally found a registry setting that needed to be added on the Exchange server that was not there already. Once I added the key  all is well.

The registry setting for Windows Server 2003 global catalog servers is not
automated by Exchange 2003 setup. This setting must be configured either
manually or programmatically for RPC over HTTP to work. This is scheduled
to be included in Windows Server 2003 Service Pack 1 (SP1).
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Para
meters
Parameter: NSPI interface protocol sequences
Type: REG_MULTI_SZ
Value: ncacn_http:6004

Your initial answer led me down the right path, so thanks a lot!
q

Author

Commented:
Thanks Michael.
Michael B. SmithManaging Consultant
CERTIFIED EXPERT

Commented:
Oh wow, that's a blast from the past! Glad it helped!

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions