Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

RPC not working - gotta be configured wrong

Status
Not open for further replies.

garymass

IS-IT--Management
Oct 29, 2001
57
US
we have a 2003 domain (simpson.com), 2003 exchange sp2. our alias for our
email is simpsonind.com.

I check the event viewer and see :

RPC Proxy successfully loaded in Internet Information
Services (IIS) mode 6.0.

The Microsoft MTA registry parameter Max RPC Alloc Size is
missing. The default value will be used. [BASE MAIN BASE 1] (14)

NSPI Proxy listen port on transport Rpc/HTTP is being
overridden by registry setting
System\CurrentControlSet\Services\MSExchangeSA\Parameters\Rpc/HTTP NSPI
Port. NSPI Proxy will listen on port 6004 on this transport.

Next I want to verify the RPC Virtual Directory configuration by
typing and put in simpson\username and
password 3 times and get the following error:

HTTP Error 401.3 - Unauthorized: Access is denied due to an ACL set on the requested resource. Internet Information Services (IIS)

Next I want to verify basic authentication and the certificate so I open IIS, go to Default Website, there I see RPC and RPCWITHCERT,I select RPC and go to properties, Directory Security Tab, then Authentication and
Access Control.

Anonymous access is NOT checked. Basic Authentication IS checked. The default domain is listed as simpson.com.

While there I click on View Certificate and the certificate is issued TO and BY simpsonind.com

also I check the IIS logs to see what I can find on the http 401.3 error and see:

2007-03-27 14:43:47 W3SVC1 xxx.xxx.xx.xxx GET /rpc - 443 simpson\bart xxx.xxx.xxx.xxx Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) 301 0 0
2007-03-27 14:43:47 W3SVC1 xxx.xxx.xx.xxx GET /rpc/ - 443 simpson\bart xxx.xxx.xxx.xxx Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) 401 3 5
2007-03-27 14:43:49 W3SVC1 xxx.xxx.xx.xxx GET /rpc/ - 443 simpson\bart xxx.xxx.xxx.xxx Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) 401 3 5
2007-03-27 14:43:51 W3SVC1 xxx.xxx.xx.xxx GET /rpc/ - 443 simpson\bart xxx.xxx.xxx.xxx Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322) 401 3 5

so where have I messed up?
 
On our setup Basic Authentication is selected on the RPC virutal server, but NOT on the RPCWITHCERT one
 
well, at least I got that right :)

thanks, one less thing to look at.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top