I have just setup OWA to use SSL, internally I can access OWA using https://servername/exchange and the username and password, however Externally I cannot, It comes up and asks for the username and password 3 times and then says "access denied". I have tried putting in the domainname/username and that doesnt work either. What could be causing this?
Hi, When creating the SSL certificate you must use the domain name that the external users will use (like webmail.domain.com). It sounds as if the certificate uses servername as the name. Leif "Alan" skrev i en meddelelse news:2638A153-17C7-4BF8-B4BA-9549551E982D@microsoft.com... > I have just setup OWA to use SSL, internally I can access OWA using > https://servername/exchange and the username and password, however Externally > I cannot, It comes up and asks for the username and password 3 times and then > says "access denied". > > I have tried putting in the domainname/username and that doesnt work either. > What could be causing this?
Thanks for the reply. I used mail.domainname.com.au on the certificate. so to get to it you type https://mail.domainname.com.au/exchange. any other suggestions? "Leif Pedersen [MVP]" wrote: > Hi, > > When creating the SSL certificate you must use the domain name that the > external users will use (like webmail.domain.com). It sounds as if the > certificate uses servername as the name. > > Leif > > "Alan" skrev i en meddelelse > news:2638A153-17C7-4BF8-B4BA-9549551E982D@microsoft.com... > > I have just setup OWA to use SSL, internally I can access OWA using > > https://servername/exchange and the username and password, however > Externally > > I cannot, It comes up and asks for the username and password 3 times and > then > > says "access denied". > > > > I have tried putting in the domainname/username and that doesnt work > either. > > What could be causing this? > > >
Hi, That sounds correct, but then I don't understand how you can connect to OWA from the inside using a completely different url. What do you have between the exchange server and the internet? Leif "Alan" skrev i en meddelelse news:61AAE500-77BF-42E0-A1D4-A060A6CFD7A9@microsoft.com... > Thanks for the reply. > > I used mail.domainname.com.au on the certificate. so to get to it you type > https://mail.domainname.com.au/exchange. > > any other suggestions? > > "Leif Pedersen [MVP]" wrote: > > > Hi, > > > > When creating the SSL certificate you must use the domain name that the > > external users will use (like webmail.domain.com). It sounds as if the > > certificate uses servername as the name. > > > > Leif > > > > "Alan" skrev i en meddelelse > > news:2638A153-17C7-4BF8-B4BA-9549551E982D@microsoft.com... > > > I have just setup OWA to use SSL, internally I can access OWA using > > > https://servername/exchange and the username and password, however > > Externally > > > I cannot, It comes up and asks for the username and password 3 times and > > then > > > says "access denied". > > > > > > I have tried putting in the domainname/username and that doesnt work > > either. > > > What could be causing this? > > > > > >
[PJw] What type of authentication do you have enabled in IIS on Exchange virtual Catalog - is basic authentication enabled? Regards Pawel Jawien Uytkownik "Leif Pedersen [MVP]" napisa w wiadomoci news:O9a38wzQFHA.3832@TK2MSFTNGP10.phx.gbl... > Hi, > > That sounds correct, but then I don't understand how you can connect to > OWA > from the inside using a completely different url. What do you have between > the exchange server and the internet? > > Leif > > "Alan" skrev i en meddelelse > news:61AAE500-77BF-42E0-A1D4-A060A6CFD7A9@microsoft.com... >> Thanks for the reply. >> >> I used mail.domainname.com.au on the certificate. so to get to it you >> type >> https://mail.domainname.com.au/exchange. >> >> any other suggestions? >> >> "Leif Pedersen [MVP]" wrote: >> >> > Hi, >> > >> > When creating the SSL certificate you must use the domain name that the >> > external users will use (like webmail.domain.com). It sounds as if the >> > certificate uses servername as the name. >> > >> > Leif >> > >> > "Alan" skrev i en meddelelse >> > news:2638A153-17C7-4BF8-B4BA-9549551E982D@microsoft.com... >> > > I have just setup OWA to use SSL, internally I can access OWA using >> > > https://servername/exchange and the username and password, however >> > Externally >> > > I cannot, It comes up and asks for the username and password 3 times > and >> > then >> > > says "access denied". >> > > >> > > I have tried putting in the domainname/username and that doesnt work >> > either. >> > > What could be causing this? >> > >> > >> > > >
hi guys, There is a 'Cisco PIX' between the exchange server and the internet the pix has port 443 open (OWA doesnt require any other ports does it?). I have an A recrd on the internal DNS server for 'mail' pointing it to the exchange server so that OWA can be used internally (they just use 'mail.domainname.com.au/exchange') since it works internally I thought the firewall must be blocking something...but if OWA only needs 443 then it can't be, right? Basic Auth is enabled on the exchange folder under IIS. "Pawel Jawien" wrote: > [PJw] What type of authentication do you have enabled in IIS on Exchange > virtual Catalog - is basic authentication enabled? > > Regards > Pawel Jawien > > > U¿ytkownik "Leif Pedersen [MVP]" napisa³ w > wiadomo¶ci news:O9a38wzQFHA.3832@TK2MSFTNGP10.phx.gbl... > > Hi, > > > > That sounds correct, but then I don't understand how you can connect to > > OWA > > from the inside using a completely different url. What do you have between > > the exchange server and the internet? > > > > Leif > > > > "Alan" skrev i en meddelelse > > news:61AAE500-77BF-42E0-A1D4-A060A6CFD7A9@microsoft.com... > >> Thanks for the reply. > >> > >> I used mail.domainname.com.au on the certificate. so to get to it you > >> type > >> https://mail.domainname.com.au/exchange. > >> > >> any other suggestions? > >> > >> "Leif Pedersen [MVP]" wrote: > >> > >> > Hi, > >> > > >> > When creating the SSL certificate you must use the domain name that the > >> > external users will use (like webmail.domain.com). It sounds as if the > >> > certificate uses servername as the name. > >> > > >> > Leif > >> > > >> > "Alan" skrev i en meddelelse > >> > news:2638A153-17C7-4BF8-B4BA-9549551E982D@microsoft.com... > >> > > I have just setup OWA to use SSL, internally I can access OWA using > >> > > https://servername/exchange and the username and password, however > >> > Externally > >> > > I cannot, It comes up and asks for the username and password 3 times > > and > >> > then > >> > > says "access denied". > >> > > > >> > > I have tried putting in the domainname/username and that doesnt work > >> > either. > >> > > What could be causing this? > >> > > >> > > >> > > > > > > > >
I found the problem! afew oter strange atenticatin things started being reported from remote users so I looked a th GPO and LAN Manager Autentication Level had been changed to 'Send NTLMv2 responses only/refuse LM'. I'm not sure as to why this caused the problem but I changed that setting and I could map drives remotely and access OWA using SSL. Could anyone explain why that effected the OWA and/or remote mapping (the remote clients are on a VPN /or are dialled-iinto the router.) "Alan" wrote: > I have just setup OWA to use SSL, internally I can access OWA using > https://servername/exchange and the username and password, however Externally > I cannot, It comes up and asks for the username and password 3 times and then > says "access denied". > > I have tried putting in the domainname/username and that doesnt work either. > What could be causing this?
