Web Access - Not working on certain PC's

[gillis]

Hi,

Some of us routinely access email from remote PC's using web browser. I can also access the service within LAN by entering the localserverIP/servlet/webacc so no reason to believe the service isn't running properly.

However, on some laptops and even the GM's home desktop the browser eventually times out with "page cannot be displayed". Others, like myself, routinely use WebAcess without problems. When working, you get a "redirection" message that resolves to a certificate request prompt. Selecting Yes to accept brings you to the email login prompt. On the PC's where it's NOT working, you get the "redirection" message but that's all. After a time it gives up with page not found.

Since I don't believe it's a server/application problem my question is - what types of issues on the remote PC can prevent it from getting to the GW Web Access application? Is it possibly firewall or security-related? Java-related? I'm at a loss to why some work, some don't.

Thank you for any insight,

JGiles

 

[MichiganRon]

JGiles,

It has been my experience that the WebAccess application does not work properly using some web browsers, namely, the AOL web browser. I've also seen the Earthlink browser cause problems.

The first thing I'd have you check is the web browser. Make sure they are using a recent version of either IE or FireFox. If needed, they can start up AOL to get the internet connection, then minimize the AOL interface and use IE.

Hope that helps,
Ron

“If you are irritated by every rub, how will you be polished?” ~ Mevlana Rumi


Do you live in Michigan? Join us in the Tek-Tips in Michigan forum.

 

[IRudebwoy]

Make sure a JVM is installed. I suggest removing M$ JVM and install Sun's.

I get a similar problem when there is no JVM installed or the the JVM is M$. Make sure the browsers in use support java.

Hope it helps.

## Just because you can do something doesn't mean you should.

Lorenzo Wacondo (System Administrator)

http://www.laguna-industries.com

 

[gillis]

Lorenzo, I suspect it's something like you mention. Everyone is using the IE browser so I don't believe it's related to that. However, Sun Java 2 v1.4.2_03 is installed and checked so still stumped.

Jerry Giles

 

[IRudebwoy]

For the users that it doesn't work are they all going through a firewall?

From your post you said it works within the LAN without problems. Where is the web front end located? Is it all on the same server on the LAN behind the firewall?






## Just because you can do something doesn't mean you should.

Lorenzo Wacondo (System Administrator)

http://www.laguna-industries.com

 

[gillis]

Sorry to all - new information! Because I had used it from home just days ago I "assumed" it was working. I've now tried all laptops here and had folks including myself try from home last night and - it ain't working!!

So scratch my concern that it was "selective". It isn't working, period! It was 2-3 days ago and we can't identify what has changed.

Jerry Giles

 

[MichiganRon]

Can you get to the web server? Try port 8008 (or whatever port you have set up for server management).

If you can get to the web server, try restarting the web access agent.

Also, check to see if your server has abended.

Ron

“If you are irritated by every rub, how will you be polished?” ~ Mevlana Rumi


Do you live in Michigan? Join us in the Tek-Tips in Michigan forum.

 

[gillis]

Ron, no abends - server health is good; I restarted the agent yesterday and it didn't seem to help. ??

Thanks for the ideas.

JG

 

[michigan]

gillis -
To clarify, you can access the Web Access while you're at work, just not from offsite?

When attempting to access from offsite, did you still receive the redirecting page/certificate?

I would try rebooting the server first. Just to ensure nothing between Apache/Tomcat/Enterprise Server/WA Agent or other services you have running haven't crapped out in the background w/out an abend.

Good Luck.

 

[gillis]

Response to clarification -

WebAccess works if you enter it from within the LAN (serverIP/servlet/webacc). However equivalent external address doesn't work.

Redirection "message" comes up but never gets to certificate page!

Thanks,

JGiles

 

[marvhuffaker]

Is it possible that you are redirecting to either an IP address or DNS name on the inside that is not valid from the outside?

For example, are you going to your Webaccess page like this:

MAIL.DOMAIN.COM... but that same DNS name does not resolve from the outside?

Or.. Your redirect references the server name, not the DNS name? So from the inside it works fine, but on the outside it tries to do something like: http:\\192.168.0.1\Servlet\webacc OR http:\\SERVERNAME\SERVLET\WEBACC?

That's my guess. Or if you post your main URL, maybe we could look at it and see right away what's happening.

Marvin


Marvin Huffaker, MCNE

http://www.redjuju.com

 

[gillis]

Marvin,

All addresses, DNS should be fine; the current configuration worked up until last Monday and has worked for a few years. The redirection is pointing to our external IP and you'll see if show up appropriately. It just never gets connected for some reason. I was about ready to reboot server but if that fixes the problem I won't know what was wrong so I've put it off so far. Will have to do it soon however.

Address is webmail.swinomishcasino.com if you'd like to try it.

Thanks again to all for trying.

JGiles

 

[marvhuffaker]

Do you have multiple IP addresses on that server? Or how is the IP configured? I don't get anything when it tries to redirect.

It appears that port 443 is listening, but nothing ever comes back. Maybe your routing isn't working correctly into your network from the outside.

I know you said nothing changed, but something must have. If webaccess is working internally, then I dont' see how it could be a server problem.

Marvin Huffaker, MCNE

http://www.redjuju.com

 

[michigan]

gillis -
Looking up your entry as stated in your earlier post, I discovered the following:

swinomishcasino.com. MX IN mail.swinomishcasino.com. [Preference = 0]
swinomishcasino.com. MX IN mailmx.isomedia.com. [Preference = 10]
swinomishcasino.com. NS IN ns2.isomedia.com.
swinomishcasino.com. NS IN ns1.isomedia.com.
mail.swinomishcasino.com. A IN 216.57.193.203
mailmx.isomedia.com. A IN 207.115.64.103
mailmx.isomedia.com. A IN 207.115.64.104
mailmx.isomedia.com. A IN 207.115.64.16
ns1.isomedia.com. A IN 207.115.64.2
ns2.isomedia.com. A IN 207.115.64.3
((TTL was listed as 10800 for each entry))

I must admit, I'm not the best at analyzing MX/DNS records, but I don't think your first entry should = 0. I also think there should be something with "webmail.swinomishcasino.com" in one of your entries (to resolve). I looked up a couple accounts that I know use GroupWise Web Access and each had an entry for their name to resolve against. Again, I could be wrong on this. Perhaps someone with more experience could offer some feedback with these entries.

Thank you.

 

[gillis]

In case it helps - internal email is handled locally by the Novell server (mail.swinomishcasino.com)

External email (WebAccess) is redirected by the company Isomedia from webmail.swinomishcasino.com to our external ip/servlet/webacc

JGiles

 

[marvhuffaker]

I didn't see anything in that DNS info that looked wrong.. How is your translation being handled from external to internal. I think that's where your problem is at. It looks like other ports are being translated okay.. I mean, I can get to your RILO card on its port. But something is wrong with the 443 port. The port appears to be listening, and I can connect to it, but nothing comes back.

Marvin

Marvin Huffaker, MCNE

http://www.redjuju.com

 

[gillis]

At this point, think I'll just bounce the server and see if things come back. We may not learn anything but pressure from managers is getting too much to ignore.

Thanks to everyone for your ideas and willingness to assist. If I figure it out, will post the answer.

JGiles

 

[gillis]

Update - server reboot didn't change anything. I'm absolutely stumped. We made absolutely no conscious changes to the system; yet, it just up and stopped functioning (externally). Still works fine if you access from inside the firewall ?????!?!?!?

Marvin, I appreciate your comment re:443 but can't understand how the port can go bad? From your testing is there any doubt the signal is reaching our router/firewall/server? i.e., can we rule out a redirection problem at Isomedia and acknowledge the problem to be in-house?

JGiles

 

[marvhuffaker]

Ok, I think I may have missed something you said earlier.. And I think I see what is going on, but I need to understand a few things....

What is the public IP address that your GroupWise Webaccess is sitting on? Where is it related to your GWIA? To get to Webaccess, your users try to use WEBMAIL.WASHINOMICASIONO.COM?

You have two different things going on:

MAIL.WINOMISHCASINO.COM: 216.57.193.203
WEBMAIL.WINOMISHCASINO.COM: 207.115.64.63

Is one of these your Webmail's IP address? Which one is correct? Why do you have ISOMEDIA redirect this? Why not just have an A record in DNS for WEBMAIL instead of redirecting?

Honestly, this is very complex and you might need to spend a couple hours with someone just going through all your configurations and making sure all the ducks are in a row. It's difficult to ask all the right questions or provide the right answers for something like this.


Marvin Huffaker, MCNE

http://www.redjuju.com

 

[gillis]

Marvin,

public ip is 216.57.193.203
GWIA is on that (mail.swinomishcasino.com)

207.115.64.63 is Isomedia site where redirection takes place; webmail.swinomishcasino.com goes to this address which then redirects to our public ip/servlet/webacc.

redirecting because, frankly, I don't have the in-house knowledge to do what you suggest. Isomedia hosts our website so had them redirect as well.

You're right about consulting; unfortunately, what happens is our contractor came in and set it up but is not available consistently when we have a problem like this. I'm considering a support agreement with Novell.

Thanks again,

jgiles