Outlook Web Access

[jrwinterburn]

Dear Tekkies,

I am stumped with a problem with Outlook Web Access on IIS for Exchange 5.5.

I have the following setup:

Firewall -> Public IP
Web Server -> 10.10.10.x (DMZ) -> Domain ABC
Exchange Server -> 99.99.99.x -> Domain CBA

NAT is running on the firewall, so both domains/subnets can see each other across Windows. When I installed OWA on the web server (on the DMZ subnet 10.10.10.x) I did it with an administrator login that exists on the Domain CBA and specified the IP of the exchange server during this installation.

However, when I try to login as a user on OWA, I have the following problems:

If I specify: CBA/username, I get an error in Event Viewer stating that the username/password is invalid. If I specifty just username, I get no error in Event Viewer, but obviously no mailbox can be displayed.

How can I make sure that users who login with CBA/username on OWA (in ABC domain) are authenticated against the domain controller in the ABC domain and can then view their Exchange mailbox?

Complicated, I know, but I need to have OWA in the DMZ separate from the internal network.

Thanks for any help in advance,

Jonathen

 

[h5n1]

is probably not a good idea to send password over plain text if your exchange box is in the DMZ....otherwise you can specified the domain name before the user name under authentication method....or use it with SSL setup...i've not setup SSL on my exchange 5.5 box myself but there are a lot of info. on the web.

SET CRTL ALT DEL = #728
-----------------------
greg

 

[fuego007]

The web (OWA) server should be configured as a standalone server, not as a separate domain. Otherwise, you have to set up a trust relationship. Open UDP port 37 between the DMZ and your internal network (I think you need one other port - your firewall log will tell you). This allows the OWA server to pass authentication requests to the domain controller. It also makes it unnecessary to use domain\username when logging in.

My recollection is a little hazy, so it may actually be necessary for the OWA server to be part of the domain. Perhaps someone else can clear this up.

Of course, I could be all wet, and it could just be that you have the syntax wrong! Try changing the / to \.

Good luck,
Bob

 

[zas1]

Hi, look at the FAQ : How to configure OWA in a DMZ, in this Forum.
It can help you!

Bye.