Welcome to ISAserver.org

"The target principal name is incorrect" plz help me....

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Exchange Publishing >> "The target principal name is incorrect" plz help me....

Page: [1]

Message

<< Older Topic Newer Topic >>

"The target principal name is incorrect" plz ... - 16.Jan.2006 3:29:11 PM

ronenteva

Posts: 11
Joined: 16.Jan.2006
Status: offline

Hi,

I have installed OWA (exchange 2003) with SSL, and it's working fine in my internal network.
but when i try to access it from external network (Im using ISA 2004), i get the forms based screen, writing my login details, and then i get "Error Code: 500 Internal Server Error. The target principal name is incorrect."

I have no idea what's wrong, i did exactly the same thing in a different network and it's working fine there.

I guess i didn't write enough details... thats because i dont know what's relevant to my problem, so just tell me and i will reply with the details...

Thanks !!!!

Post #: 1

Featured Links*

RE: "The target principal name is incorrect" ... - 16.Jan.2006 3:32:17 PM

ronenteva

Posts: 11
Joined: 16.Jan.2006
Status: offline

i noticed that sometimes i get a different error:

Error Code: 500 Internal Server Error. The network logon failed. (1790)

(in reply to ronenteva)

Post #: 2

anyone there? - 17.Jan.2006 3:14:15 PM

ronenteva

Posts: 11
Joined: 16.Jan.2006
Status: offline

Im begging for help here..........

i have tried ANYTHING and it still dont work :(

(in reply to ronenteva)

Post #: 3

RE: anyone there? - 17.Jan.2006 4:42:07 PM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Ron,

Is the ISA firewall a domain member?

What are the DNS settings on the ISA firewall's NICs?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ronenteva)

Post #: 4

RE: anyone there? - 18.Jan.2006 10:08:58 AM

ronenteva

Posts: 11
Joined: 16.Jan.2006
Status: offline

the Internal uses the local DNS server
and the External is set to my internet provider DNS

i added a record to my host file, so mail.domain.com is translated to it's local IP address.

Thank you...

Ronen.

(in reply to tshinder)

Post #: 5

RE: anyone there? - 19.Jan.2006 6:56:22 AM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Ronen,

Good to hear you got it working!

Also, NEVER put an external DNS server address on any of the ISA firewall's NICs. That is a recipe for trouble.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ronenteva)

Post #: 6

RE: anyone there? - 19.Jan.2006 10:28:22 AM

ronenteva

Posts: 11
Joined: 16.Jan.2006
Status: offline

Thanks for you help.

About the DNS:
can you please explain me or point me to the right documentation?

as far as i know i should use the external DNS on the external NIC for security reasons... (in case my external NIC will be attacked, i dont want my internal DNS to be exposed...)

Thanks again!

oh, and one more thing... sorry for the newbie question, but what is HTH? :)

(in reply to tshinder)

Post #: 7

RE: anyone there? - 20.Jan.2006 4:21:59 PM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Ronen,

I am your documentation. DO NOT USE AN EXTERNAL DNS SERVER ADDRESS ON THE ISA FIREWALL. Five books on ISA firewalls, over 500 articles on ISA firewalls, over 1500 hours of consulting times with ISA firewall and much more make me your documentation

HTH = Hope this Helps

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ronenteva)

Post #: 8

RE: anyone there? - 22.Jan.2006 3:35:35 PM

ronenteva

Posts: 11
Joined: 16.Jan.2006
Status: offline

Well, thanks for everything...

I didnt mean that i dont trust your saying, actually i already started changing the settings in my clients isa servers.

I just wanted to read some more so i won't ask stupid questions :) so if you can point me to an article of yours, i will be very thankful...

Thanks again,

Ronen.

(in reply to tshinder)

Post #: 9

RE: anyone there? - 22.Jan.2006 4:32:34 PM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Ronen,

You get. Here's the reason -- if you put an external DNS server on an ISA firewall NIC, and for some reason the NIC with the internal server gets dropped from the query list (details are in our book), then you lose domain connectivity and all sorts of errors take place. It also slows down name resolution and is a major cause performance compliants.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ronenteva)

Post #: 10

RE: anyone there? - 24.Jan.2006 12:02:05 PM

ronenteva

Posts: 11
Joined: 16.Jan.2006
Status: offline

I just want to thank you for all your help...

(in reply to tshinder)

Post #: 11

RE: anyone there? - 24.Jan.2006 3:28:35 PM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Ronen,

You bet!
Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ronenteva)

Post #: 12