Microsoft remote Connectivity analyzer, Outlook Connectivity test fails:  cannot ping RPC  proxy server

q
q used Ask the Experts™
on
I had this question after viewing RPC Proxy can't be pinged.  I am preparing for the staged migration to O365 from Exchange 2003,  the Outlook Connectivity test , manually specifying server settings, using basic authentication, fails with the following, but with different exceptions from the previous question.  Our inside domain name is the same as outside. I am able to successfully use https://  public IP address/owa.  Any help will be appreciated.

Testing RPC over HTTP connectivity to server server.domain.org
       RPC over HTTP connectivity failed.
       
      Additional Details
       
HTTP Response Headers:
Content-Length: 1656
Content-Type: text/html
Date: Wed, 05 Sep 2018 19:10:45 GMT
Server: Microsoft-IIS/6.0
WWW-Authenticate: Basic realm="server.domain.org"
X-Powered-By: ASP.NET
Elapsed Time: 619 ms.
       
      Test Steps
       
      Attempting to resolve the host name server.domain.org in DNS.
       The host name resolved successfully.
       
      Additional Details
      Testing TCP port 443 on host server.domain.org to ensure it's listening and open.
       The port was opened successfully.
       
      Additional Details
      Testing the SSL certificate to make sure it's valid.
       The certificate passed all validation requirements.
       
      Additional Details
       
      Test Steps
      Checking the IIS configuration for client certificate authentication.
       Client certificate authentication wasn't detected.
       
      Additional Details
      Testing HTTP Authentication Methods for URL https://server.domain.org/rpc/rpcproxy.dll?server.domain.org:6002.
       The HTTP authentication methods are correct.
       
      Additional Details
      Attempting to ping RPC proxy server.domain.org.
       RPC Proxy can't be pinged.
       
      Additional Details
       
An unexpected network-level exception was encountered. Exception details:
Message: The remote server returned an error: (500) Internal Server Error.
Type: Microsoft.Exchange.Tools.ExRca.Extensions.MapiTransportException
Stack trace:
at Microsoft.Exchange.Tools.ExRca.Extensions.MapiRpcTestClient.PingProtocolProxy(String endpointIdentifier)
at Microsoft.Exchange.Tools.ExRca.Tests.MapiPingProxyTest.PerformTestReally()
Exception details:
Message: The remote server returned an error: (500) Internal Server Error.
Type: System.Net.WebException
Stack trace:
at System.Net.HttpWebRequest.GetResponse()
at RpcPingLib.RpcPing.PingProxy(String internalServerFqdn, String endpoint)
at Microsoft.Exchange.Tools.ExRca.Extensions.MapiRpcTestClient.PingProtocolProxy(String endpointIdentifier)
Elapsed Time: 48 ms
.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Managing Consultant
Commented:
I took my blog posts about Exchange 2003 offline years ago. And RPC/HTTP wasn't released when I wrote my book (against TAP and RTM).

But the first thing I would do would be to try rpcping internally and see what it tells you (https://support.microsoft.com/en-us/help/831051/how-to-use-the-rpc-ping-utility-to-troubleshoot-connectivity-issues-wi).
q

Author

Commented:
Thanks Michael for your response.

i did the tests as recommended in the link above, which let me to a few other checks  netdiag /winsoc /v says It's not the NIC, and i assume winsock is not corrupted - seems like Exchange would be failing if it were.   It's not the certificate (connectivity test passes for the cert).   The error i get from the rcpping is below.  I was not sure of the syntax of the RpcProxyServer part of the command, so i used both the syntax as written and also with the name of my server.  Both failed, but with different results.   I did the test on both the exchange server and another server.  There is not a  lot of informative info about what to do about either error.  Do you have any further input??

I am wondering if i could just try  to continue with the migration anyway and see what will happen, if I get other  errors, maybe they will point me to a fix.

Results of the rpcping - done on the exchange server, and on a different member server gave 12007  and 12175 ping failure error.

C:\Program Files\Support Tools>rpcping -t ncacn_http -s myserver.mydomain.org -o RpcProxy=RPCProxyServer -P "administrator.mydomain.org.org*" -I "administrator.mydomain.org.org
*" -H 2 -u 10 -a connect -F 3 -v 3 -E -R none
RPCPing v2.12. Copyright (C) Microsoft Corporation, 2002
OS Version is: 5.2, Service Pack 2
Enter password for server:
Enter password for RPC/HTTP proxy:

RPCPinging proxy server RPCProxyServer with Echo Request Packet
Sending ping to server
Error 12007 returned in the WinHttpSendRequest.
Ping failed.

C:\Program Files\Support Tools>rpcping -t ncacn_http -s myserver.mydomain.org -o RpcProxy=myserver.mydomain.org-P "administrator.mydomain.org.org*" -I "administrator.mydomain.org.org
,*" -H 2 -u 10 -a connect -F 3 -v 3 -E -R none
RPCPing v2.12. Copyright (C) Microsoft Corporation, 2002
OS Version is: 5.2, Service Pack 2
Enter password for server:
Enter password for RPC/HTTP proxy:

RPCPinging proxy server myserver.mydomain.org with Echo Request Packet
Sending ping to server
Error 12175 returned in the WinHttpSendRequest.
Ping failed.
q

Author

Commented:
Michael, i just found this here https://docs.microsoft.com/en-us/windows/desktop/WinHttp/error-messages, will investigate if i can.

ERROR_WINHTTP_SECURE_FAILURE

12175

One or more errors were found in the Secure Sockets Layer (SSL) certificate sent by the server. To determine what type of error was encountered, check for a WINHTTP_CALLBACK_STATUS_SECURE_FAILURE notification in a status callback function. For more information, see WINHTTP_STATUS_CALLBACK.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

q

Author

Commented:
MichaeI,

I dug deep into the WINTHTTP material, can't say it helped at all because i don't know what goes on that far in the background.  But on the journey i found lots of other info on RPC.  Finally found a registry setting that needed to be added on the Exchange server that was not there already. Once I added the key  all is well.

The registry setting for Windows Server 2003 global catalog servers is not
automated by Exchange 2003 setup. This setting must be configured either
manually or programmatically for RPC over HTTP to work. This is scheduled
to be included in Windows Server 2003 Service Pack 1 (SP1).
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Para
meters
Parameter: NSPI interface protocol sequences
Type: REG_MULTI_SZ
Value: ncacn_http:6004

Your initial answer led me down the right path, so thanks a lot!
q

Author

Commented:
Thanks Michael.
Michael B. SmithManaging Consultant

Commented:
Oh wow, that's a blast from the past! Glad it helped!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial