RE: [ActiveDir] OT: Outlook Web Access & Split DNS

Tue, 28 Jun 2005 23:59:25 -0700

Title: RE: [ActiveDir] OT: Outlook Web Access & Split DNS
Hi,
 
Hum... maybe doing a network trace between your workstation and the exhcange server, u will see what happened between logon process and what DNS does your exchange server calls for resolving your domain.
An other tool is ExBPA that u can download at http://www.microsoft.com/downloads/details.aspx?familyid=dbab201f-4bee-4943-ac22-e2ddbd258df3&displaylang=en
This tool points u with configuration problem of your Exchange server/Exchange organisation as well as your AD conf.
It advices u, when problems are detected, whow u can tweak and resolve your Exchange/AD infrastructure.
 
Try installing ExBPA and see reports. There maybe a clue for your OWA pb....
 
At last, U should ask for assistance on the ExchangeList at http://www.msexchange.org/ -> "Discussion List". U have to join for posting a question to Exchange Guru's :)
 
Cheers,
 
Yann

De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Lamberty, Dave
Envoyé : mercredi 29 juin 2005 04:21
À : [email protected]
Objet : RE: [ActiveDir] OT: Outlook Web Access & Split DNS

I'm not using FBA, and I've tried several different forms of domain names (e.g., domain, domain\, domain.org, domain.org\). None seem to work. Or, as I just discovered, they don't work with IE (at least on XP SP2). Setting the default domain to domain\ works if you're using Firefox--you get right in without specifying a domain in the username field. I'd have expected them to both be the same, or if one worked it would be IE. Not so.
 
I've inherited this Exchange server, and the guy who set it up is long gone (isn't this a familiar theme on this list?). I'm considering just whacking the whole thing and starting over, but I'm new enough to Exchange to know that may not be advisable in the short term. People are currently able to send and receive e-mail, so it's not totally hosed up. Looks like I'll be doing a little reading over the holiday weekend, though.
 
If anyone has any other advice, I'd appreciate it.
 
Thanks!
 
--Dave

From: [EMAIL PROTECTED] on behalf of TIROA YANN
Sent: Tue 6/28/2005 16:36
To: [email protected]
Subject: RE : [ActiveDir] OT: Outlook Web Access & Split DNS

Hi :)
 
If I understand u, u set "domain" in the ESM and the logon page always return the domain.com\username ?
1) Try to set "domain.org" in ESM rather than "domain"
2) See this link to hardcoded "domain" in the Logon.asp file of your OWA Logon page.
 
That supposes u use FBA ( Forms-based Authentication ) in your exchange.
 
Let us know how it goes for u :)
 
Cheers,
 
Yann
De: [EMAIL PROTECTED] de la part de Lamberty, Dave
Date: mar. 28/06/2005 22:59
À: [email protected]
Objet : RE: [ActiveDir] OT: Outlook Web Access & Split DNS

The correct domain is actually set in ESM (and changes are replicated to
IIS), but the OWA web site still requires users to enter the domain name
with their username.

The same thing happens both internally and externally when accessing the
OWA site. Assume the following:
Internal DNS domain name: domain.org
External DNS domain name: domain.com
NetBIOS domain name: domain

If I just enter username & password, the login fails, and the logon box
returns with domain.com\username in the username field. That won't work,
though, as the user accounts exist in the internal domain. If you enter
either domain.org\username or domain\username, and a password, you log
in just fine.

The fact that the failed logon returns with the external domain name
appended to the username makes me think this is a DNS issue, but I'm
pretty new to Exchange so that's just my shot in the dark. Any other
suggestions on where to look?

Thanks!

--Dave

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Crawford, Scott
Sent: Monday, June 27, 2005 6:00 PM
To: [email protected]
Subject: RE: [ActiveDir] OT: Outlook Web Access & Split DNS


Well, you can, and it will work for a while, but Exchange will reset it
to whatever is set in Exchange Enterprise Manager.  You can change it by
browsing to Organization/Administrative
Group/Servers/Server/Protocols/HTTP/Exchange Virtual Server/Exchange,
right click Exchange, Properties, Access tab, Authentication and set
whatever options you like.  Whatever you set here will show up in IIS.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of joe
Sent: Monday, June 27, 2005 5:43 PM
To: [email protected]
Subject: RE: [ActiveDir] OT: Outlook Web Access & Split DNS

This isn't my specialty but I believe you can set the default auth
domain in the IIS settings where you configure authentication types. 

  joe

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Lamberty, Dave
Sent: Monday, June 27, 2005 6:00 PM
To: [email protected]
Subject: [ActiveDir] OT: Outlook Web Access & Split DNS

When users log in to our Outlook Web Access site, they must enter their
username in the format domainname\username, as the domain name isn't
being passed. I'd like to be able to pass the domain name so users don't
have to remember to enter it when they log on (and reduce help desk call
volume by about 50%...). We're not using ISA Server, and have just a
single Exchange 2003 server for our mail. AD is 2003 mixed mode, soon to
be switched to native mode.

We have a split DNS structure, where the OWA page resides in a different
DNS domain than our AD user accounts, and I'm wondering if that might be
part of the problem. Does anyone know how (or if it's possible) to pass
OWA a different domain name?

Thanks!

--Dave
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to