Welcome to ISAserver.org

OWA 2007, Cannot change password through FBA in child domain

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Exchange Publishing >> OWA 2007, Cannot change password through FBA in child domain

Page: [1]

Message

<< Older Topic Newer Topic >>

OWA 2007, Cannot change password through FBA in child d... - 29.May2008 4:10:40 AM

raul2011

Posts: 3
Joined: 28.May2008
Status: offline

Hi,

I have 2 domains, one parent domain an a child domain. There is an Exchange 2007 Organization in the forest and OWA is published trough a rule in the ISA 2006 server, who is member of the parent domain. All users whose accounts are either in the parent or in the child domain can now change their passwords using OWA change password funcionality.
When I use FBA with the option "Allow users to change their password" activated, only users in the parent domain can change their password. Users in the chid donmain get the following error:
"Error trying to change password. Please contact your technical support"

I have review ISA logging and notice that there is a denied connection with the sentece "Unidentified IP traffic" which Client IP is the PDC emulator of the child domain, and the destination IP is the ISA server, but there is no rule that deny this conecction. What is probably happening..?
I would appreciate any suggest or ideas with this problem, thank you in advance.
Regarts,
Ra�l.

Post #: 1

Featured Links*

RE: OWA 2007, Cannot change password through FBA in chi... - 12.Jun.2008 10:44:41 AM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

Is there a rule to allow the connection?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to raul2011)

Post #: 2

RE: OWA 2007, Cannot change password through FBA in chi... - 17.Jun.2008 3:33:44 AM

raul2011

Posts: 3
Joined: 28.May2008
Status: offline

Yes tshinder, the networks of the child domain are included in the internal network in the ISA and there is a rule to permit all the traffic.

In fact, the change password feature through FBA is working fine now in three of the four child domains. It was necesary to install a server certificate on each of the PDC emulators of the domains, issued by the Enterprise CA installed on the parent domain.

But in one of the domains still fails. There is a log entry in the ISA that says "Unidentified IP traffic" in the "Protocol" column and in the "Action" column says "Denied Conection", with no rule associated at this action. The server certificate seems to be correctly installed in the PCD emulator of this child domain.
Any ideas?

(in reply to tshinder)

Post #: 3

RE: OWA 2007, Cannot change password through FBA in chi... - 17.Jun.2008 6:54:21 AM

raul2011

Posts: 3
Joined: 28.May2008
Status: offline

Ok, it's all working now. It was a comunnication problem. Although the ISA could ping the PDC of the child domian, the PDC of the child domain couldn't ping the ISA server, but not for a matter of rules. Added a static route in the ISA server and all works fine now..

thanks

(in reply to raul2011)

Post #: 4

RE: OWA 2007, Cannot change password through FBA in chi... - 17.Jun.2008 7:40:55 AM

tshinder

Posts: 47010
Joined: 10.Jan.2001
From: Texas
Status: offline

Great! Good to hear you got it working and thanks for the follow up.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to raul2011)

Post #: 5