Welcome to ISAserver.org

RPC over HTTP 403 error

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Exchange Publishing >> RPC over HTTP 403 error

Page: [1]

Message

<< Older Topic Newer Topic >>

RPC over HTTP 403 error - 5.Aug.2008 7:46:49 AM

kogi2k

Posts: 4
Joined: 11.Feb.2008
Status: offline

Hi All,

Im trying to publish Exchange 2007 server via ISA2006 RPC over HTTP proxy (tried with SSL with no success, then moved to clear HTTP traffic then I can snoop it)

I'm getting the following response error from the Exchange Server, any idea how to solve it ?

************************* Request ****************************
RPC_IN_DATA /rpc/rpcproxy.dll?192.168.145.33:6002 HTTP/1.1
Reverse-Via: ISA2006, ISA2006
Host: isa.com:443
User-Agent: MSRPC
Authorization:NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFAs4OAAAADw==
Accept: application/rpc
Cache-Control: no-cache
Pragma: no-cache
Front-End-Https: On
Connection: Keep-Alive
Front-End-Https: On
Content-Length: 0
************************** Response ***************
HTTP/1.1 403 Forbidden
Content-Length: 246
Content-Type: text/html
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
Date: Tue, 05 Aug 2008 11:13:22 GMT
<html><head><title>Error</title></head><body><head><title>Secure Channel Required</title></head>
<body><h1>Secure Channel Required</h1>This Virtual Directory requires a browser that supports the configured encryption options.</body></body></html>RPC_IN_DATA /rpc

Post #: 1

Featured Links*

RE: RPC over HTTP 403 error - 5.Aug.2008 8:48:43 AM

Jason Jones

Posts: 2140
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Exchange 2007 will enforce SSL by default - hence you cannot use HTTP for testing unless you change the settings in Exchange. The 403 error you are getting is expected if you are using HTTP.

What problems did you have when using SSL, as you will ultimately need to go this way to get things working...

Cheers

JJ

< Message edited by Jason Jones -- 5.Aug.2008 8:50:15 AM >

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to kogi2k)

Post #: 2

RE: RPC over HTTP 403 error - 5.Aug.2008 9:02:51 AM

kogi2k

Posts: 4
Joined: 11.Feb.2008
Status: offline

Hi Jason,

I have defined Exchange 2007 to support plain HTTP, by enabling option "Allow secured channel SSL offloading" in the server configurati0on - > client access - server properties. And I see that port 80 is opened and in listen mode indeed.
Is there something else that I need to configure to work with clear text HTTP towards ISA server ?

Going to back to SSL mode, I was not able to make any debugging neither on ISA nor on Exchange server since everyone is obviously encrypted and can not see the messages, the only one error I received on ISA2006 was "Failed connection attempt" matching RPCoverHTTPs rule. So then I decided to move to the clear text mode using simple HTTP.

*** By the way, I'm playing with "cached mode" option on my client Outlook 2003 and now I get another error : RPC over HTTP 401 Unauthorized, access denied and Outlook client says that the Exchange server is unavailable.

thanx!

(in reply to Jason Jones)

Post #: 3

RE: RPC over HTTP 403 error - 6.Aug.2008 5:06:37 AM

kogi2k

Posts: 4
Joined: 11.Feb.2008
Status: offline

New thing, Im getting RPC error 6BA:

*****************************************
RPC_IN_DATA /rpc/rpcproxy.dll?192.168.145.33:593 HTTP/1.1
Reverse-Via: ISA2006, ISA2006
Host: isa.com:443
User-Agent: MSRPC
Authorization:NTLM TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFAs4OAAAADw==
Accept: application/rpc
Cache-Control: no-cache
Pragma: no-cache
Front-End-Https: On
Connection: Keep-Alive
Front-End-Https: On
Content-Length: 0
***************************************************
HTTP/1.1 401 Unauthorized
Content-Length: 83
Content-Type: text/html
Server: Microsoft-IIS/6.0
WWW-Authenticate: NTLM TlRMTVNTUAACAAAAEAAQADgAAAAFgomiYOyxiJ7S26UAAAAAAAAAAHYAdgBIAAAABQLODgAAAA9NAFkARABPAE0AQQBJAE4AAgAQAE0AWQBEAE8ATQBBAEkATgABAA4AVwBJAE4AMgAwADAAMwAEABAAbQB5AGQAbwBtAGEAaQBuAAMAIAB3AGkAbgAyADAAMAAzAC4AbQB5AGQAbwBtAGEAaQBuAAUAEABtAHkAZABvAG0AYQBpAG4AAAAAAA==
X-Powered-By: ASP.NET
Date: Wed, 06 Aug 2008 09:00:39 GMT
<html><head><title>Error</title></head><body>
Error: Access is Denied.</body></html>RPC_IN_DATA /rpc/rpcproxy.dll?192.168.145.33:593
*****************************************************
HTTP/1.1
Connection: Keep-Alive
Content-Length: 1073741824
Reverse-Via: ISA2006
User-Agent: MSRPC
Host: isa.com:443
Accept: application/rpc
Cache-Control: no-cache
Pragma: no-cache
Front-End-Https: On
Authorization:NTLM TlRMTVNTUAADAAAAGAAYAIAAAAAYABgAmAAAABAAEABIAAAAGgAaAFgAAAAOAA4AcgAAAAAAAACwAAAABYKIogUCzg4AAAAPbQB5AGQAbwBtAGEAaQBuAEEAZABtAGkAbgBpAHMAdAByAGEAdABvAHIASQBTAEEAMgAwADAANgARu4gboE7IPQAAAAAAAAAAAAAAAAAAAACgM/idnCIg3krVBm0T0TvEG9I5SYTYXvY=
........h........................&8...R.:...0.#......X.|...R....3..........@............^...it...t{5X./z
***************************************
HTTP/1.0 503 RPC Error: 6ba

(in reply to kogi2k)

Post #: 4