Welcome to ISAserver.org

RE: Discussion of RPC over HTTP Series

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Web Publishing >> RE: Discussion of RPC over HTTP Series

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: Discussion of RPC over HTTP Series - 9.Nov.2004 6:27:00 PM

mcfly9

Posts: 19
Joined: 10.Apr.2004
Status: offline

I have made some testing and found out that clients configured to use RPC over HTTP to connect to the Exchange server don't prompt for password when using TCP/IP (direct RPC) as the connection method. So internally no password is required. However when outside the company network (using RPC over HTTPS), they get the prompt.
Also an interesting thing is that if Basic auth is used on the virtual dir. /rpc in IIS and properly configured in Outlook as well, there isn't even a Save password checkbox in the prompt. When using integrated, there's the checkbox, however seems not to be working.

(in reply to tshinder)

Post #: 21

Featured Links*

RE: Discussion of RPC over HTTP Series - 22.Nov.2004 4:22:00 PM

sonicbum

Posts: 11
Joined: 15.Jul.2003
Status: offline

I read that MS couldn't get the save PW feature for RPC proxy enabled in time, so a password will be required if your using RPC + HTTP.

(in reply to tshinder)

Post #: 22

RE: Discussion of RPC over HTTP Series - 15.Dec.2004 12:08:00 PM

Guest

hi there!

i found a very interesting microsoft article concering this save-password problem.

I had exactly the same problems - with the ntlm security - doesnt matter if i check the checkbox to remember the password, everytime i start outlook 2003 the password prompt appears;

the solution is to set the lmcompatibilitylevel in the registry to "2" oder "3".

the article:

"You must provide Windows account credentials when you connect to Exchange Server 2003 by using the Outlook 2003 RPC over HTTP feature"

URL

hope that helps!

note that you have to change to the ntlm security for the CLIENT AND ON THE SERVER!

so long, sorry for my bad englisch,

cheers

Chris from Austria [Smile]

(in reply to tshinder)

Post #: 23

RE: Discussion of RPC over HTTP Series - 27.Feb.2006 11:43:32 PM

meiaus

Posts: 2
Joined: 27.Feb.2006
Status: offline

Tom,

I have a scenario to put on the table and a question.

I am just now researching and planning a front end server for my two back end servers. First thought to be able to us one namespace from the outside in and better secure the exchange servers. Right now the two back ends are not clustered and if I were to do that I would need major downtime to move mailboxes. Anyway......

I have two backend servers in place that are being accessed by internal outlook clients and both internal and external OWA sessions to each server independently. I will need to setup SSL on the front end, remove SSL from the backend and apply the IPSec policy as to your article. Our network is setup with a Pix firewall, SMTP Email gateway on the DMX routing all emails to our exchange organization and clients using internal ip addresses. My question is, should I setup the front end server only to act as the OWA interface and leave the internal clients going to the backend servers directly? Do I have to enable RPC over HTTP to have the internal outlook clients still function correctly? Do you think using this in my situation is worth it?

Thank you,

Me

(in reply to tshinder)

Post #: 24

RE: Discussion of RPC over HTTP Series - 27.Feb.2006 11:46:14 PM

meiaus

Posts: 2
Joined: 27.Feb.2006
Status: offline

Yeah, I can't type DMZ!

(in reply to meiaus)

Post #: 25

RE: How about a 1 server scenario - 7.Apr.2006 1:28:41 AM

chart42

Posts: 1
Joined: 7.Apr.2006
Status: offline

I am tearing my hair out trying to get this right.

I have just one server. It runs Windows Server 2003, Exchange Server 2003, and ISA Server 2000. It's a DC and a GC. I have two NICs, so ISA is dealing with traffic external and internal.

Microsoft (and others) have documentation on setting up RPC over HTTP with a single server, but I can't find anything that tells me how to include ISA in the mix.

Can anyone point me to information about using RPC with HTTP, with ISA, on one server? Or at least tell me which parts of Mr. Shinder's excellent article I can skip over, since it's just the one server?

Thanks in advance for any help!

_____________________________

Cara

(in reply to tshinder)

Post #: 26

RE: Discussion of RPC over HTTP Series - 15.Jan.2008 4:59:04 AM

jamesnahon

Posts: 1
Joined: 15.Jan.2008
Status: offline

hello,
i think i should first say that i am significantly inexperienced in this field, but am ready to learn, and have to fast.

i have set up a exchange server that is protected by a linux firewall. OWA works perfectly,and now i need to configure outlook over http.

i am afraid that i have been confused by the whole front-end back-end topology as i only have one server.

i have RPC over HTTP installed, but did not progress further in the guide as the front-end back-end stopped me,

my server has one NIC, the firewall has port forwarding rules that direct trafic to it.

any help would be greatly appreciated.

james

(in reply to tshinder)

Post #: 27

RE: Discussion of RPC over HTTP Series - 17.Jan.2008 1:07:23 AM

AHIT

Posts: 1554
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

1 Exchange server protected by linux firewall.
2. OWA works fine
3 need to configure outlook over HTTP - RPC over HTTP installed
4 server has 1 NIC

with regards to 1, where does the ISA Server exist in this setup? Is it REPLACING the Lunix firewall? This is after all ISAServer.org!

#2 is a good start.

For #3, again is this via ISAserver or with the linux firewall?

and lastly I assume #4 means the Exchange server has 1 NIC, not the firewall - or else it's no firewall at all!

If it IS a linux firewall you're running, suggest trying www.msexchange.org for a publishing guide there as you'll find ISA officinado's here, not necessarily *nix ones. At leat at msexchange.org there may be aa guide for publishing being *nix firewalls, although it is likely to be more specific to the type of firewall since its what has to 'publish' the exchange box.

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to jamesnahon)

Post #: 28