Troubleshooting OWA 2007 Publishing Rules on ISA Server 2006

re: Troubleshooting OWA 2007 Publishing Rules on ISA Server 2006

Boobalan — Mon, 20 Dec 2010 05:45:09 GMT

Hi ,

I am publishing OWA 2010 through TMG 2010. OWA and TMG authentication i made as Basic Authentication. And i pointed my "mail.xyy.com" A record to TMG IP(10.10.1.1) . alll the internal and external user are connectiong through TMG. I am getting OWA login page through TMG. Everything was working fine. But now i am facing problem in OWA login authentication, when i give domain\username and password its not logining in to OWA. Kindly help me.

Thanks in advance.

re: Troubleshooting OWA 2007 Publishing Rules on ISA Server 2006

fred_p — Thu, 18 Dec 2008 17:40:10 GMT

We use ISA server 2006 with SP1 to publish Exchange OWA. Any path is specify when we start a session to the OWA server. For example : https://mail.domain.be, in this case we cannot access the logon page on the CAS server.

But if we use the url with /OWA path, we get OWA logon page.

Why it's works ? i don'y know because the FBA is enable on the both side, on the edge firewall and the Exchange CAS Server.

It's very amazing.

Thx

re: Troubleshooting OWA 2007 Publishing Rules on ISA Server 2006

mnecas — Thu, 14 Aug 2008 20:13:04 GMT

And what authentication i have to select on listener's properties? HTTP Authentication: Integrated ?

re: Troubleshooting OWA 2007 Publishing Rules on ISA Server 2006

Ori Yosefi - MSFT — Tue, 10 Jun 2008 04:36:22 GMT

The reason for that is because the fallback from forms-based authentication is to Basic authentication, for non-browser clients (such as Outlook Client).

More info on this behavior check the article:

http://technet.microsoft.com/en-us/library/bb794722.aspx

If you want to use NTLM for your Outlook Anywhere access than you need to use another listener with another IP, another rule and use KCD as delegation method.

Thanks,

re: Troubleshooting OWA 2007 Publishing Rules on ISA Server 2006

kurakuraninja — Wed, 04 Jun 2008 19:09:05 GMT

Hi,

I've heard that when using Forms Based Authentication on the Web Lister for OWA, that doesn't allow for using NTLM authentication for Outlook Anywhere, using the same web listener. So basic authentication has to be used for Outlook Anywhere, which requires users to manually input their credentials. Is that correct?

Would I need to have an additional web listener configured with NTLM authentication for Outlook Anywhere access, besides the Forms Based Authentication web listener used for OWA? Does it mean I would also need an additional public IP address? Please advice.

Thank you very much