RE: Discussion of how to put the HTTP over RPC Proxy on... - 21.Feb.2004 5:18:00 PM
Guest
Hi, i enjoyed your article, a little beyond my needs but informative. I am not sure it this question even applies but i thought i would ask anyway. I initially set up SBS 2003 but felt this is not what i needed, so i switched to server 2003 and loaded exchange 2003 on it. We are a small company with only a few accts but we would like to use the rpc over http. I am unable to get this piece working. Can this work on a single box or do i need to set up a FE and hopefully make this a BE server. Room is limited in our rack, we already have 3 boxes in there, a 4th will make it pretty crowded. I look forward to your reply. Thanks
Not sure it if will work when the ISA and Exchange are on the same machine. However, you can use a dedicated ISA box, and a single back end Exchange Server and it works fine.
Hello I have a problem with my configuration of RPC over HTTP.
I don't use a frontend server. mail.company.be is the name known on internet of the exchange site.
the name of the Exchange server is father.company.local
the certificate is issued to mail.company.be I've put in the hosts file of the isa server a line with the address of father.company.local for mail.company.be
I can go on https/mail.company.be/exchange and everithing is right.
But I cannot establish a connection with outlook 2003. When I check the connection state I see that he always try with TCPIP and never with HTTPS. What can be wrong? How can I check my config.
It sounds like a DNS config issue. Check the ISA Server 2000 Exchange Kit for DNS config issues. Make sure that it resolves the name of the Exchange Server to the IP address used to publish the RPC proxy.
I believe i'm experiencing the same symptoms as butor. I have followed this guide to the letter and am trying to connect an extermal client that is using a broadband connection to the ISA Server that is hosting the rpc over http proxy. When I access the https://mail.mailserver.com/rpc url from a browser on the client machine, I am notified about the certificate, then prompted for a username password. After that's entered, I receive the HTTP Error 403.2 Forbidden: Read access is denied, which means that the proxy is working appropriately. But, when I attempt to configure the client, which I point to mail.mailserver.com using the connect to rpc proxy config in outlook2k3, it doesn't seem to be able to authenticate.
I currently have ISA server setup as a unihomed instance residing on the DMZ segment of a PIX firewall. I use it to publish OWA access along with access to things like share point portal and IIS web servers that reside on my internam segment. I would like to configure RPC over HTTP. The thing is I only have a single Exchange 2003 server supporting my messaging environment (no front end servers, that's why I used ISA ) Is there any security issues or technical issues for that matter around running the RPC proxy service on a unihomed ISA server installed in Web caching mode, residing in a DMZ and simply publishing Microsoft servers. I would like to put this into production without creating any major security issues.
quote:Originally posted by Aubrey: I believe i'm experiencing the same symptoms as butor. I have followed this guide to the letter and am trying to connect an extermal client that is using a broadband connection to the ISA Server that is hosting the rpc over http proxy. When I access the https://mail.mailserver.com/rpc url from a browser on the client machine, I am notified about the certificate, then prompted for a username password. After that's entered, I receive the HTTP Error 403.2 Forbidden: Read access is denied, which means that the proxy is working appropriately. But, when I attempt to configure the client, which I point to mail.mailserver.com using the connect to rpc proxy config in outlook2k3, it doesn't seem to be able to authenticate.
Any ideas?
Hi Aubrey,
What is the name you use for your msstd? What is the name you use for the Exchange Server? What is the name of the Global Catalog Server?
Posts: 1
Joined: 15.Sep.2004
From: Atlanta, GA
Status: offline
Tom, Great article ! Got 2 questions
1) If I where to use ISA 2000 on a W2K (instead of 2003) server, can I use the instructions described in your article and substitute the following http://support.microsoft.com/default.aspx?scid=kb;en-us;238131 as a replacement of step 5 - Disable socket pooling for W3SVC?
2) If I wanted to front-end 2 different exchange servers using the single rpc proxy ... can that be done ? Specifically can I enter multiple exchange servers in step 9 ? Anything else that I would need to do ?
we have two Pix firewall back -to- back and between them located two ISA 2000 server in firewall mode and configured as NLB. currently those two ISA servers used to publish OWA, OMA, active sync and other internal website. we are not using exchange 2003 front end server. we have email address registered as https://mail.company.com.
I would like to know: How to publish secure RPC over HTTP using ISA 2000 without effecting running services (OWA,OMA...etc)?
I am interested in using the RPC over HTTP proxy to access our Exchange servers. We have a site with a ex server local and another ex server in a vpn connected location. If I set up RPC over HTTP on the local ISA it will point to the local ex server. Will exchange locate mailboxes on the vpn connected ex server for users homed there?