asked on

Microsoft remote Connectivity analyzer, Outlook Connectivity test fails: cannot ping RPC proxy server

I had this question after viewing RPC Proxy can't be pinged. I am preparing for the staged migration to O365 from Exchange 2003, the Outlook Connectivity test , manually specifying server settings, using basic authentication, fails with the following, but with different exceptions from the previous question. Our inside domain name is the same as outside. I am able to successfully use https:// public IP address/owa. Any help will be appreciated.

Testing RPC over HTTP connectivity to server server.domain.org
     RPC over HTTP connectivity failed.

      Additional Details

HTTP Response Headers:
Content-Length: 1656
Content-Type: text/html
Date: Wed, 05 Sep 2018 19:10:45 GMT
Server: Microsoft-IIS/6.0
WWW-Authenticate: Basic realm="server.domain.org"
X-Powered-By: ASP.NET
Elapsed Time: 619 ms.

      Test Steps

      Attempting to resolve the host name server.domain.org in DNS.
     The host name resolved successfully.

      Additional Details
      Testing TCP port 443 on host server.domain.org to ensure it's listening and open.
     The port was opened successfully.

      Additional Details
      Testing the SSL certificate to make sure it's valid.
     The certificate passed all validation requirements.

      Additional Details

      Test Steps
      Checking the IIS configuration for client certificate authentication.
     Client certificate authentication wasn't detected.

      Additional Details
      Testing HTTP Authentication Methods for URL https://server.domain.org/rpc/rpcproxy.dll?server.domain.org:6002.
     The HTTP authentication methods are correct.

      Additional Details
      Attempting to ping RPC proxy server.domain.org.
     RPC Proxy can't be pinged.

      Additional Details

An unexpected network-level exception was encountered. Exception details:
Message: The remote server returned an error: (500) Internal Server Error.
Type: Microsoft.Exchange.Tools.ExRca.Extensions.MapiTransportException
Stack trace:
at Microsoft.Exchange.Tools.ExRca.Extensions.MapiRpcTestClient.PingProtocolProxy(String endpointIdentifier)
at Microsoft.Exchange.Tools.ExRca.Tests.MapiPingProxyTest.PerformTestReally()
Exception details:
Message: The remote server returned an error: (500) Internal Server Error.
Type: System.Net.WebException
Stack trace:
at System.Net.HttpWebRequest.GetResponse()
at RpcPingLib.RpcPing.PingProxy(String internalServerFqdn, String endpoint)
at Microsoft.Exchange.Tools.ExRca.Extensions.MapiRpcTestClient.PingProtocolProxy(String endpointIdentifier)
Elapsed Time: 48 ms

ASKER CERTIFIED SOLUTION

Michael B. Smith

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

ASKER

Thanks Michael for your response.

i did the tests as recommended in the link above, which let me to a few other checks netdiag /winsoc /v says It's not the NIC, and i assume winsock is not corrupted - seems like Exchange would be failing if it were. It's not the certificate (connectivity test passes for the cert). The error i get from the rcpping is below. I was not sure of the syntax of the RpcProxyServer part of the command, so i used both the syntax as written and also with the name of my server. Both failed, but with different results. I did the test on both the exchange server and another server. There is not a lot of informative info about what to do about either error. Do you have any further input??

I am wondering if i could just try to continue with the migration anyway and see what will happen, if I get other errors, maybe they will point me to a fix.

Results of the rpcping - done on the exchange server, and on a different member server gave 12007 and 12175 ping failure error.

C:\Program Files\Support Tools>rpcping -t ncacn_http -s myserver.mydomain.org -o RpcProxy=RPCProxyServer -P "administrator.mydomain.org.org*" -I "administrator.mydomain.org.org
*" -H 2 -u 10 -a connect -F 3 -v 3 -E -R none
RPCPing v2.12. Copyright (C) Microsoft Corporation, 2002
OS Version is: 5.2, Service Pack 2
Enter password for server:
Enter password for RPC/HTTP proxy:

RPCPinging proxy server RPCProxyServer with Echo Request Packet
Sending ping to server
Error 12007 returned in the WinHttpSendRequest.
Ping failed.

C:\Program Files\Support Tools>rpcping -t ncacn_http -s myserver.mydomain.org -o RpcProxy=myserver.mydomain.org-P "administrator.mydomain.org.org*" -I "administrator.mydomain.org.org
,*" -H 2 -u 10 -a connect -F 3 -v 3 -E -R none
RPCPing v2.12. Copyright (C) Microsoft Corporation, 2002
OS Version is: 5.2, Service Pack 2
Enter password for server:
Enter password for RPC/HTTP proxy:

RPCPinging proxy server myserver.mydomain.org with Echo Request Packet
Sending ping to server
Error 12175 returned in the WinHttpSendRequest.
Ping failed.

ASKER

Michael, i just found this here https://docs.microsoft.com/en-us/windows/desktop/WinHttp/error-messages, will investigate if i can.

ERROR_WINHTTP_SECURE_FAILURE

12175

One or more errors were found in the Secure Sockets Layer (SSL) certificate sent by the server. To determine what type of error was encountered, check for a WINHTTP_CALLBACK_STATUS_SECURE_FAILURE notification in a status callback function. For more information, see WINHTTP_STATUS_CALLBACK.

ASKER

MichaeI,

I dug deep into the WINTHTTP material, can't say it helped at all because i don't know what goes on that far in the background. But on the journey i found lots of other info on RPC. Finally found a registry setting that needed to be added on the Exchange server that was not there already. Once I added the key all is well.

The registry setting for Windows Server 2003 global catalog servers is not
automated by Exchange 2003 setup. This setting must be configured either
manually or programmatically for RPC over HTTP to work. This is scheduled
to be included in Windows Server 2003 Service Pack 1 (SP1).
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NTDS\Para
meters
Parameter: NSPI interface protocol sequences
Type: REG_MULTI_SZ
Value: ncacn_http:6004

Your initial answer led me down the right path, so thanks a lot!

ASKER

Thanks Michael.

Michael B. Smith

Oh wow, that's a blast from the past! Glad it helped!