OWA 2007, Cannot change password through FBA in child domain

OWA 2007, Cannot change password through FBA in child domain (Full Version)

All Forums >> [ISA 2006 Publishing] >> Exchange Publishing

Message

raul2011 -> OWA 2007, Cannot change password through FBA in child domain (29.May2008 4:10:40 AM)
Hi, I have 2 domains, one parent domain an a child domain. There is an Exchange 2007 Organization in the forest and OWA is published trough a rule in the ISA 2006 server, who is member of the parent domain. All users whose accounts are either in the parent or in the child domain can now change their passwords using OWA change password funcionality. When I use FBA with the option "Allow users to change their password" activated, only users in the parent domain can change their password. Users in the chid donmain get the following error: "Error trying to change password. Please contact your technical support" I have review ISA logging and notice that there is a denied connection with the sentece "Unidentified IP traffic" which Client IP is the PDC emulator of the child domain, and the destination IP is the ISA server, but there is no rule that deny this conecction. What is probably happening..? I would appreciate any suggest or ideas with this problem, thank you in advance. Regarts, Raúl.

tshinder -> RE: OWA 2007, Cannot change password through FBA in child domain (12.Jun.2008 10:44:41 AM)
Is there a rule to allow the connection? Tom

raul2011 -> RE: OWA 2007, Cannot change password through FBA in child domain (17.Jun.2008 3:33:44 AM)
Yes tshinder, the networks of the child domain are included in the internal network in the ISA and there is a rule to permit all the traffic. In fact, the change password feature through FBA is working fine now in three of the four child domains. It was necesary to install a server certificate on each of the PDC emulators of the domains, issued by the Enterprise CA installed on the parent domain. But in one of the domains still fails. There is a log entry in the ISA that says "Unidentified IP traffic" in the "Protocol" column and in the "Action" column says "Denied Conection", with no rule associated at this action. The server certificate seems to be correctly installed in the PCD emulator of this child domain. Any ideas?

raul2011 -> RE: OWA 2007, Cannot change password through FBA in child domain (17.Jun.2008 6:54:21 AM)
Ok, it's all working now. It was a comunnication problem. Although the ISA could ping the PDC of the child domian, the PDC of the child domain couldn't ping the ISA server, but not for a matter of rules. Added a static route in the ISA server and all works fine now.. thanks

tshinder -> RE: OWA 2007, Cannot change password through FBA in child domain (17.Jun.2008 7:40:55 AM)
Great! Good to hear you got it working and thanks for the follow up. Thanks! Tom

Page: [1]