It’s been a while, but we had
similar problems when we had multiple authentication forms checked in ESM.
Specifically, Windows Integrated. Right now, the only thing we have checked is
Basic with a default domain of evangel.edu. Naturally, make sure you use SSL.
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lamberty, Dave
Sent: Tuesday, June 28, 2005 9:21
PM
To: [email protected]
Subject: RE: [ActiveDir] OT:
Outlook Web Access & Split DNS
I'm not using FBA, and I've tried several
different forms of domain names (e.g., domain, domain\, domain.org,
domain.org\). None seem to work. Or, as I just discovered, they don't work with
IE (at least on XP SP2). Setting the default domain to domain\ works if you're
using Firefox--you get right in without specifying a domain in the username
field. I'd have expected them to both be the same, or if one worked it would be
IE. Not so.
I've inherited this Exchange server, and the
guy who set it up is long gone (isn't this a familiar theme on this
list?). I'm considering just whacking the whole thing and starting over, but
I'm new enough to Exchange to know that may not be advisable in the short term.
People are currently able to send and receive e-mail, so it's not totally hosed
up. Looks like I'll be doing a little reading over the holiday weekend, though.
If anyone has any other advice, I'd appreciate it.
From:
[EMAIL PROTECTED] on behalf of TIROA YANN
Sent: Tue 6/28/2005 16:36
To: [email protected]
Subject: RE : [ActiveDir] OT:
Outlook Web Access & Split DNS
If I understand u, u set "domain" in the ESM and the logon
page always return the domain.com\username ?
1) Try to set "domain.org" in ESM rather than
"domain"
2) See this link to hardcoded "domain" in the
Logon.asp file of your OWA Logon page.
That supposes u use FBA ( Forms-based Authentication ) in your
exchange.
Let us know how it goes for u :)
De:
[EMAIL PROTECTED] de la part de Lamberty, Dave
Date: mar. 28/06/2005 22:59
À: [email protected]
Objet : RE: [ActiveDir] OT:
Outlook Web Access & Split DNS
The
correct domain is actually set in ESM (and changes are replicated to
IIS), but the OWA web site still requires users to enter the domain name
with their username.
The same thing happens both internally and externally when accessing the
OWA site. Assume the following:
Internal DNS domain name: domain.org
External DNS domain name: domain.com
NetBIOS domain name: domain
If I just enter username & password, the login fails, and the logon box
returns with domain.com\username in the username field. That won't work,
though, as the user accounts exist in the internal domain. If you enter
either domain.org\username or domain\username, and a password, you log
in just fine.
The fact that the failed logon returns with the external domain name
appended to the username makes me think this is a DNS issue, but I'm
pretty new to Exchange so that's just my shot in the dark. Any other
suggestions on where to look?
Thanks!
--Dave
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Crawford, Scott
Sent: Monday, June 27, 2005 6:00 PM
To: [email protected]
Subject: RE: [ActiveDir] OT: Outlook Web Access & Split DNS
Well, you can, and it will work for a while, but Exchange will reset it
to whatever is set in Exchange Enterprise
Manager. You can change it by
browsing to Organization/Administrative
Group/Servers/Server/Protocols/HTTP/Exchange Virtual Server/Exchange,
right click Exchange, Properties, Access tab, Authentication and set
whatever options you like. Whatever you set here will show up in IIS.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of joe
Sent: Monday, June 27, 2005 5:43 PM
To: [email protected]
Subject: RE: [ActiveDir] OT: Outlook Web Access & Split DNS
This isn't my specialty but I believe you can set the default auth
domain in the IIS settings where you configure authentication types.
joe
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Lamberty, Dave
Sent: Monday, June 27, 2005 6:00 PM
To: [email protected]
Subject: [ActiveDir] OT: Outlook Web Access & Split DNS
When users log in to our Outlook Web Access site, they must enter their
username in the format domainname\username, as the domain name isn't
being passed. I'd like to be able to pass the domain name so users don't
have to remember to enter it when they log on (and reduce help desk call
volume by about 50%...). We're not using ISA Server, and have just a
single Exchange 2003 server for our mail. AD is 2003 mixed mode, soon to
be switched to native mode.
We have a split DNS structure, where the OWA page resides in a different
DNS domain than our AD user accounts, and I'm wondering if that might be
part of the problem. Does anyone know how (or if it's possible) to pass
OWA a different domain name?
Thanks!
--Dave
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
|
