Welcome to ISAserver.org

[solved] Repeated OWA FBA Login

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Exchange Publishing >> [solved] Repeated OWA FBA Login

Page: [1]

Message

<< Older Topic Newer Topic >>

[solved] Repeated OWA FBA Login - 6.Jul.2007 2:24:11 PM

kardinal

Posts: 2
Joined: 6.Jul.2007
Status: offline

First of all, thanks to Tom and all the others who make ISAServer.org the best resource for ISA Server on the Internet.

I am relatively new to ISA Server, and am having a problem I cannot figure out nor find much information about on the Internet, either here, Microsoft's site, or anywhere else.

The environment:
Single Domain
Single Exchange 2003 SP2 Mail Server running OWA with FBA (Forms-based authentication)
Seperated by a firewall (Netscreen) is the ISA 2004 SP2 server, unihomed, not a domain member.
Which is in turn seperated from the main network by a SOHO router/firewall (NetGear)
SSL bridging to publish OWA from Exchange server using third party certificate. SSL required. FBA authentication is all that is required by the publishing rule. This is still in the testing stages, so public DNS is not yet updated; I am using a hosts file for that purpose on the ISA server.

If I surf to the OWA page on the Exchange server by its native IP, it works beautifully. If I surf to the ISA server, as I understand I am to do, I get the FBA login page, but when I put in the same credentials as when using the native IP of the Exchange server, I get the same FBA login screen again. Doesn't matter if I use a UPN (username@domain.com) or the UNC (domain\username), both result in the same thing.

One other user on here ran across a similar problem, and solved it by removing all path restrictions on the publishing rule, and just having /* -> original path. I tried that and it did not work. The only Microsoft article I could find indicated that the problem happens on Pre-SP1 systems where the user has an umlaut in their password. Neither is the case here.

Any help would be most appreciated.

< Message edited by kardinal -- 6.Jul.2007 3:13:36 PM >