• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Broken OutlookAnywhere

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Publishing] >> Exchange Publishing >> Broken OutlookAnywhere Page: [1]
Login
Message << Older Topic   Newer Topic >>
Broken OutlookAnywhere - 8.Apr.2010 7:15:08 AM   
andreasy

 

Posts: 25
Joined: 15.Mar.2010
Status: offline
ISA2006 on Win2003
OutlookAnywhere has been working flawlessly. After a few changes in ISA, I verified that everything works fine. After a while OutlookAnywhere stopped working. A trace on ISA shows the following error:


Failed Connection Attempt ISA 08/04/2010 12:42:05
Log type: Web Proxy (Reverse)
Status: 64 The specified network name is no longer available.
Rule: Outlook Anywhere
Source: External (x.x.x.x)
Destination: (mail.xxxxxxxx.com 192.168.10.2:443)
Request: RPC_IN_DATA http://xxxxxxxxxxxxx/rpc/rpcproxy.dll?xxxxxxxxxxxxxxxxxxxxx:6004
Filter information: Req ID: 08dd9187; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=yes, logged off=no, client type=unknown, user activity=yes
Protocol: https
User: xxxxxx\yyyyyyy
Additional information
Client agent: MSRPC
Object source: Internet (Source is the Internet. Object was added to the cache.)
Cache info: 0x8 (Request includes the AUTHORIZATION header.)
Processing time: 1953 ms
MIME type:


I tried different changes in the publishing rule configuration and web listener, even bypassing authentication, but the result is always the same.

Could anyone help on this?
Should I be looking on ISA or Exchange?
Post #: 1
RE: Broken OutlookAnywhere - 8.Apr.2010 7:51:53 AM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Might be a false positive, as the presence of 64 errors is pretty "normal" for Outlook Anywhere publishing.

http://blogs.technet.com/isablog/archive/2007/06/25/rpc-over-http-logging-wildness.aspx

So, don't rely on these as an indication or try and follow up on these for problem resolution...

Any more detail than "outlook anywhere stopped working"?

Cheers

JJ

< Message edited by Jason Jones -- 8.Apr.2010 7:53:16 AM >


_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to andreasy)
Post #: 2
RE: Broken OutlookAnywhere - 8.Apr.2010 8:39:56 AM   
andreasy

 

Posts: 25
Joined: 15.Mar.2010
Status: offline
The general description of the problem is that users could previously access OutlookAnywhere from home and now they can't. As soon as they open Outlook to connect, they are prompted to enter credentials on the DC, then it takes too long and finally a message says that connection was terminated. During that time, ISA logs the above errors several times.

Something else, from internal LAN OA works fine, meaning that it's ISA which blocks it.

Another important thing is that ISA was initially in workgroup and then joined into the domain without uninstalling ISA. Of course I tested that everything works fine for several days. This happened about a month later.

< Message edited by andreasy -- 8.Apr.2010 11:13:54 AM >

(in reply to Jason Jones)
Post #: 3
RE: Broken OutlookAnywhere - 9.Apr.2010 11:08:22 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

check this article: http://blogs.technet.com/yuridiogenes/archive/2009/01/29/error-64-when-using-outlook-anywhere-published-by-isa-server-2006.aspx

It also has some interesting explanation about this error.

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to andreasy)
Post #: 4
RE: Broken OutlookAnywhere - 9.Apr.2010 5:41:26 PM   
andreasy

 

Posts: 25
Joined: 15.Mar.2010
Status: offline
I just had a look at this article but it has to do with SBS and slow connectivity although it initially states no connectivity :
"Slow Connectivity for Outlook Anywhere and Sites that use the SBS Web Applications App Pool "

Another issue I am currently investigating is the fact that:
a) I use the same Web Listener for both OW and OA
b) On the delegation tab I don't use Basic but No deligation with Direct Access.

However, this is how I used to have it before and it was working.

(in reply to paulo.oliveira)
Post #: 5
RE: Broken OutlookAnywhere - 9.Apr.2010 7:40:27 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Check your config against these:

http://technet.microsoft.com/en-us/library/bb794751.aspx

http://blog.msfirewall.org.uk/2008/07/publishing-exchange-2007-services-with.html

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to andreasy)
Post #: 6
RE: Broken OutlookAnywhere - 10.Apr.2010 8:46:01 AM   
andreasy

 

Posts: 25
Joined: 15.Mar.2010
Status: offline
Ok, thanks for the artciles. I had them already but wouldn't decide to implement from the beginning because the initial setup was not performed by me and I was always under the concept that it used to work in the way it was setup.

You gave me the idea to study the document again and compare to my setup which was quite different. Here are the differences:

SPN/Trust delegation:
In AD, ISA was not trusted for delegation for Exchange SPN but as you see below:
Delegation was not being used: It was allowed for Direct Access
Exchange OA:
OA in Exchange was configured for Basic Authentication instead of NTLM and so was Outlook .
WebListener:
Was configured for FBA because it was shared with OWA.

I followed the exact instructions and it worked but only 2 problems is that it's very slow and the GAL doesn't open. It fails with a message that Exchange is not connected although it is.

Also, I would like to ask how could my setup have been working with FBA on the listener, Basic authentication and no delegation? Is it possible for OA to work like this?

(in reply to Jason Jones)
Post #: 7
RE: Broken OutlookAnywhere - 10.Apr.2010 6:55:55 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
The articles work, but depend on correct Exchange configuration.

The MS articles are the best starting point, with my blog article offering a more advanced option for transparent Outlook Anywhere.

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to andreasy)
Post #: 8
RE: Broken OutlookAnywhere - 11.Apr.2010 4:29:51 AM   
andreasy

 

Posts: 25
Joined: 15.Mar.2010
Status: offline
How could my setup have been working before with FBA on the listener, Basic authentication and no delegation? Is it possible for OA to work like this?

Basic auth. was reasonable because initially ISA was not a domain member so, it couldn't use NTLM, but is it posible to work with FBA and no delegation?

(in reply to Jason Jones)
Post #: 9
RE: Broken OutlookAnywhere - 11.Apr.2010 7:56:37 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
ISA 2006 can use "fallback to basic" when FBA is enabled. This allows Outlook Anywhere and ActiveSync to bypass the form and use traditional basic auth...

Still not sure what has gone wrong in your particular case...

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to andreasy)
Post #: 10

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Publishing] >> Exchange Publishing >> Broken OutlookAnywhere Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts