Autodiscover issues - Has to be something simple...
Hello all -
In general, I am getting issues with the Autodiscover service. I have read literally hundreds of pages of documentation and can not figure out where my config is incorrect. In my lab I have CAS/HUB installed on one server and MB on another.
The CAS/HUB is configured as a CASArray (named CorpMail.gklabs.net). The CAS array only has one member at this time and the member is named NC10LABS050.
I am using a UCC cert with the primary name being OWA.GKLabs.net. The SAN's are legacyOWA.gklabs.net, autodiscover.gklabs.net,
www.owa.gklabs.net and corpmail.gklabs.net. OWA 2010 works fine for 2010 MB's and also 2003 MB's (redirection to legacyOWA).
I am providing my general questions from Tests that I have ran along with their results to hopefully get some help from you. Sorry for the length but wanted to provide as much detail as some of you may need!
1. When I run a "Test-OutlookWebServices" test I get an SSL mismatch error. Why is the server looking for an SSL for the CAS server name
https://nc10labs050.corp.gklabs.net/autodiscover/autodiscover.xml NC10LABS050? I have ran the "Set-ClientAccessServer
-identity "NC10S050 -AutoDiscoverServiceInternalUri https://owa.gklabs.net/autodiscover/autodiscover.xml" and I was under the impression this is the address internal users should be resolving to. How can I change this to match the Primary name on
the UCC Cert?
2. Also from the 'Get-AutodiscoverVirtualDirectory |fl" the internal and external URL's are blank. I have read that these are surpressed for security reasons so I assume this is correct if they are blank and the AutoDiscoverServiceInternalUri has been
set.
3. When running testexchangeconnectivity.com tests with a 2010 MB user, I am getting HTTP 401 denied results.
4. When visiting
https://owa.gklabs.net/autodiscover/autodiscover.xml I am prompted for credentials. Regardless of what credentials I provide (admin or regular MB user) it always errors out with 401.1 unauthorized.
I have verified permissions on the Autodiscover directory has Anonymous, Basic and Windows authentication - SSL required, with 'ignore' selected. Authenticated Users also have Read & Execute permissions on the directory for Autodiscover.
Test-OutlookWebServices results:
[PS] C:\Windows\system32>Test-OutlookWebServices -identity
Gary.Wall@gklabs.net
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1019
Type : Information
Message : A valid Autodiscover service connection point was found. The Autodiscover URL on this object is
https://ow
a.gklabs.net/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1006
Type : Information
Message : Contacted the Autodiscover service at
https://owa.gklabs.net/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1016
Type : Information
Message : [EXCH] The AS is configured for this user in the Autodiscover response received from
https://owa.gklabs.ne
t/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1015
Type : Information
Message : [EXCH] The OAB is configured for this user in the Autodiscover response received from
https://owa.gklabs.n
et/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1014
Type : Information
Message : [EXCH] The UM is configured for this user in the Autodiscover response received from
https://owa.gklabs.ne
t/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1016
Type : Information
Message : [EXPR] The AS is configured for this user in the Autodiscover response received from
https://owa.gklabs.ne
t/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1015
Type : Information
Message : [EXPR] The OAB is configured for this user in the Autodiscover response received from
https://owa.gklabs.n
et/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1014
Type : Information
Message : [EXPR] The UM is configured for this user in the Autodiscover response received from
https://owa.gklabs.ne
t/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1022
Type : Success
Message : Autodiscover was tested successfully.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1104
Type : Error
Message : The certificate for the URL https://nc10labs050.corp.gklabs.net/autodiscover/autodiscover.xml
is incorrect
. For SSL to work, the certificate needs to have a subject of nc10labs050.corp.gklabs.net, instead the sub
ject found is owa.gklabs.net. Consider correcting service discovery, or installing a correct SSL certifica
te.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1106
Type : Information
Message : Contacted the Autodiscover service at
https://NC10LABS050.corp.GKLABS.NET:443/autodiscover/autodiscover.xm
l.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1116
Type : Information
Message : [EXCH] The AS is configured for this user in the Autodiscover response received from
https://NC10LABS050.c
orp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1115
Type : Information
Message : [EXCH] The OAB is configured for this user in the Autodiscover response received from
https://NC10LABS050.
corp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1114
Type : Information
Message : [EXCH] The UM is configured for this user in the Autodiscover response received from
https://NC10LABS050.c
orp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1116
Type : Information
Message : [EXPR] The AS is configured for this user in the Autodiscover response received from
https://NC10LABS050.c
orp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1115
Type : Information
Message : [EXPR] The OAB is configured for this user in the Autodiscover response received from
https://NC10LABS050.
corp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1114
Type : Information
Message : [EXPR] The UM is configured for this user in the Autodiscover response received from
https://NC10LABS050.c
orp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1122
Type : Success
Message : Autodiscover was tested successfully.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1024
Type : Success
Message : [EXCH] Successfully contacted the AS service at
https://owa.gklabs.net/ews/exchange.asmx. The elapsed time
was 109 milliseconds.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1026
Type : Success
Message : [EXCH] Successfully contacted the UM service at
https://owa.gklabs.net/ews/exchange.asmx. The elapsed time
was 15 milliseconds.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1124
Type : Success
Message : [Server] Successfully contacted the AS service at
https://nc10labs050.corp.gklabs.net/EWS/Exchange.asmx. T
he elapsed time was 46 milliseconds.
RunspaceId : 70186105-1251-4772-bc90-f31d67f557e2
Id : 1126
Type : Success
Message : [Server] Successfully contacted the UM service at
https://nc10labs050.corp.gklabs.net/EWS/Exchange.asmx. T
he elapsed time was 15 milliseconds.
TestExchangeConnectivity Autodiscover results:
Wall
ExRCA is attempting to test Autodiscover for gary.wall@gklabs.net.
Testing Autodiscover failed.
Test Steps
Attempting each method of contacting the Autodiscover service.
The Autodiscover service couldn't be contacted successfully by any method.
Test Steps
Attempting to test potential Autodiscover URL https://gklabs.net/AutoDiscover/AutoDiscover.xml
Testing of this potential Autodiscover URL failed.
Test Steps
Attempting to resolve the host name gklabs.net in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 206.195.148.50
Testing TCP port 443 on host gklabs.net to ensure it's listening and open.
The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
The certificate passed all validation requirements.
Test Steps
Validating the certificate name.
The certificate name was validated successfully.
Additional Details
Host name gklabs.net was found in the Certificate Subject Alternative Name entry.
Certificate trust is being validated.
The certificate is trusted and all certificates are present in the chain.
Additional Details
The certificate chain has been validated up to a trusted root. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
Testing the certificate date to confirm the certificate is valid.
Date validation passed. The certificate hasn't expired.
Additional Details
The certificate is valid. NotBefore = 12/1/2010 4:31:12 PM, NotAfter = 11/11/2011 1:43:01 AM
Checking the IIS configuration for client certificate authentication.
Client certificate authentication wasn't detected.
Additional Details
Accept/Require Client Certificates isn't configured.
Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
Test Steps
ExRCA is attempting to retrieve an XML Autodiscover response from URL https://gklabs.net/AutoDiscover/AutoDiscover.xml for user gary.wall@gklabs.net.
ExRCA failed to obtain an Autodiscover XML response.
Additional Details
A Web exception occurred because an HTTP 401 - Unauthorized response was received from Unknown.
Attempting to test potential Autodiscover URL https://autodiscover.gklabs.net/AutoDiscover/AutoDiscover.xml
Testing of this potential Autodiscover URL failed.
Test Steps
Attempting to resolve the host name autodiscover.gklabs.net in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 206.195.148.50
Testing TCP port 443 on host autodiscover.gklabs.net to ensure it's listening and open.
The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
The certificate passed all validation requirements.
Test Steps
Validating the certificate name.
The certificate name was validated successfully.
Additional Details
Host name autodiscover.gklabs.net was found in the Certificate Subject Alternative Name entry.
Certificate trust is being validated.
The certificate is trusted and all certificates are present in the chain.
Additional Details
The certificate chain has been validated up to a trusted root. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
Testing the certificate date to confirm the certificate is valid.
Date validation passed. The certificate hasn't expired.
Additional Details
The certificate is valid. NotBefore = 12/1/2010 4:31:12 PM, NotAfter = 11/11/2011 1:43:01 AM
Checking the IIS configuration for client certificate authentication.
Client certificate authentication wasn't detected.
Additional Details
Accept/Require Client Certificates isn't configured.
Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
Test Steps
ExRCA is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.gklabs.net/AutoDiscover/AutoDiscover.xml for user gary.wall@gklabs.net.
ExRCA failed to obtain an Autodiscover XML response.
Additional Details
A Web exception occurred because an HTTP 401 - Unauthorized response was received from Unknown.
Attempting to contact the Autodiscover service using the HTTP redirect method.
The attempt to contact Autodiscover using the HTTP Redirect method failed.
Test Steps
Attempting to resolve the host name autodiscover.gklabs.net in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 206.195.148.50
Testing TCP port 80 on host autodiscover.gklabs.net to ensure it's listening and open.
The port was opened successfully.
ExRCA is checking the host autodiscover.gklabs.net for an HTTP redirect to the Autodiscover service.
ExRCA failed to get an HTTP redirect response for Autodiscover.
Additional Details
An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: You do not have permission to view this directory or page.
Attempting to contact the Autodiscover service using the DNS SRV redirect method.
ExRCA failed to contact the Autodiscover service using the DNS SRV redirect method.
Test Steps
Attempting to locate SRV record _autodiscover._tcp.gklabs.net in DNS.
The Autodiscover SRV record was successfully retrieved from DNS.
Additional Details
The Service Location (SRV) record lookup returned host gklabs.net.
Attempting to test potential Autodiscover URL https://gklabs.net/Autodiscover/Autodiscover.xml
Testing of this potential Autodiscover URL failed.
Test Steps
Attempting to resolve the host name gklabs.net in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: 206.195.148.50
Testing TCP port 443 on host gklabs.net to ensure it's listening and open.
The port was opened successfully.
Testing the SSL certificate to make sure it's valid.
The certificate passed all validation requirements.
Test Steps
Validating the certificate name.
The certificate name was validated successfully.
Additional Details
Host name gklabs.net was found in the Certificate Subject Alternative Name entry.
Certificate trust is being validated.
The certificate is trusted and all certificates are present in the chain.
Additional Details
The certificate chain has been validated up to a trusted root. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
Testing the certificate date to confirm the certificate is valid.
Date validation passed. The certificate hasn't expired.
Additional Details
The certificate is valid. NotBefore = 12/1/2010 4:31:12 PM, NotAfter = 11/11/2011 1:43:01 AM
Checking the IIS configuration for client certificate authentication.
Client certificate authentication wasn't detected.
Additional Details
Accept/Require Client Certificates isn't configured.
Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
Test Steps
ExRCA is attempting to retrieve an XML Autodiscover response from URL https://gklabs.net/Autodiscover/Autodiscover.xml for user gary.wall@gklabs.net.
ExRCA failed to obtain an Autodiscover XML response.
Additional Details
A Web exception occurred because an HTTP 401 - Unauthorized response was received from Unknown.
December 4th, 2010 12:08am
Thanks for the reply Ed -
1. After reading your response, I went back and re-read my post b/c I thought I had provided all results. I had mistyped the name of the test I ran in question #1 so it appeared I left out some info. I have corrected the original post so
it makes more sense and clears up any confusion. Thanks for the heads up.
2. I will run at Set-AutodiscoverVirtualDirectory to set the blank internal and external Url's. I will reply with the results.
Get-EcpVirtualDirectory has the URL's listed as:
[PS] C:\Windows\system32>Get-EcpVirtualDirectory |fl
RunspaceId : 0538e1b5-0138-4cbe-bfc3-17ba74379863
Name : ecp (Default Web Site)
InternalAuthenticationMethods : {Basic, Fba}
MetabasePath : IIS://NC10LABS050.corp.GKLABS.NET/W3SVC/1/ROOT/ecp
BasicAuthentication : True
WindowsAuthentication : False
DigestAuthentication : False
FormsAuthentication : True
LiveIdAuthentication : False
DefaultDomain :
GzipLevel : High
WebSite : Default Web Site
DisplayName : ecp
Path : S:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\ecp
ExtendedProtectionTokenChecking : None
ExtendedProtectionFlags : {}
ExtendedProtectionSPNList : {}
Server : NC10LABS050
InternalUrl :
https://nc10labs050.corp.gklabs.net/ecp
ExternalUrl :
https://owa.gklabs.net/ecp
ExternalAuthenticationMethods : {Fba}
AdminDisplayName :
ExchangeVersion : 0.10 (14.0.100.0)
DistinguishedName : CN=ecp (Default Web Site),CN=HTTP,CN=Protocols,CN=NC10LABS050,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=GKLabs,CN=Microsof
t Exchange,CN=Services,CN=Configuration,DC=GKLABS,DC=NET
Identity : NC10LABS050\ecp (Default Web Site)
Guid : 58faf2b9-130e-4582-8767-d38d72597698
ObjectCategory : GKLABS.NET/Configuration/Schema/ms-Exch-ECP-Virtual-Directory
ObjectClass : {top, msExchVirtualDirectory, msExchECPVirtualDirectory}
WhenChanged : 12/3/2010 2:31:36 PM
WhenCreated : 12/2/2010 4:28:54 PM
WhenChangedUTC : 12/3/2010 7:31:36 PM
WhenCreatedUTC : 12/2/2010 9:28:54 PM
OrganizationId :
OriginatingServer : NC10LABS023.corp.GKLABS.NET
IsValid : True
3. Here are the Get-AutodiscoverVirtualDirectory |fl results
[PS] C:\Windows\system32>Get-AutodiscoverVirtualDirectory |fl
RunspaceId : 0538e1b5-0138-4cbe-bfc3-17ba74379863
Name : Autodiscover (Default Web Site)
InternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
ExternalAuthenticationMethods : {Basic, Ntlm, WindowsIntegrated}
LiveIdSpNegoAuthentication : False
WSSecurityAuthentication : False
LiveIdBasicAuthentication : False
BasicAuthentication : True
DigestAuthentication : False
WindowsAuthentication : True
MetabasePath : IIS://NC10LABS050.corp.GKLABS.NET/W3SVC/1/ROOT/Autodiscover
Path : S:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Autodiscover
ExtendedProtectionTokenChecking : None
ExtendedProtectionFlags : {}
ExtendedProtectionSPNList : {}
Server : NC10LABS050
InternalUrl :
ExternalUrl :
AdminDisplayName :
ExchangeVersion : 0.10 (14.0.100.0)
DistinguishedName : CN=Autodiscover (Default Web Site),CN=HTTP,CN=Protocols,CN=NC10LABS050,CN=Servers,CN=
Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative
Groups,CN=GKLabs,CN
=Microsoft Exchange,CN=Services,CN=Configuration,DC=GKLABS,DC=NET
Identity : NC10LABS050\Autodiscover (Default Web Site)
Guid : d7d3631b-4124-4f20-8c4c-1c1998b0d407
ObjectCategory : GKLABS.NET/Configuration/Schema/ms-Exch-Auto-Discover-Virtual-Directory
ObjectClass : {top, msExchVirtualDirectory, msExchAutoDiscoverVirtualDirectory}
WhenChanged : 12/3/2010 1:59:36 PM
WhenCreated : 12/2/2010 4:28:21 PM
WhenChangedUTC : 12/3/2010 6:59:36 PM
WhenCreatedUTC : 12/2/2010 9:28:21 PM
OrganizationId :
OriginatingServer : NC10LABS023.corp.GKLABS.NET
IsValid : True
Thanks!
CWallWall
Free Windows Admin Tool Kit Click here and download it now
December 6th, 2010 8:31am
Get-EcpVirtualDirectory | Set-EcpVirtualDirectory -InternalUrl
https://owa.gklabs.net/ecp
Do you have gklabs.net as a internal dns zone aswell?Jonas Andersson MCTS: Microsoft Exchange Server 2007/2010 | MCITP: EMA 2007/2010 | MCSE/MCSA Blog:
http://www.testlabs.se/blog
December 6th, 2010 5:58pm
I saw this yesterday and made the change there as well. GKLabs.net is an internal zone. The issue is still happening.... I have included the results of Get-ECPVirtualDirectory |fl and Test-OutlookWebServices for review.
Thanks for your help and time!
Get-ECPVirtualDirectory |fl
[PS] C:\Windows\system32>Get-EcpVirtualDirectory |fl
Creating a new session for implicit remoting of "Get-EcpVirtualDirectory" command...
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Name : ecp (Default Web Site)
InternalAuthenticationMethods : {Basic, Fba}
MetabasePath : IIS://NC10LABS050.corp.GKLABS.NET/W3SVC/1/ROOT/ecp
BasicAuthentication : True
WindowsAuthentication : False
DigestAuthentication : False
FormsAuthentication : True
LiveIdAuthentication : False
DefaultDomain :
GzipLevel : High
WebSite : Default Web Site
DisplayName : ecp
Path : S:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\ecp
ExtendedProtectionTokenChecking : None
ExtendedProtectionFlags : {}
ExtendedProtectionSPNList : {}
Server : NC10LABS050
InternalUrl :
https://owa.gklabs.net/ecp
ExternalUrl :
https://owa.gklabs.net/ecp
ExternalAuthenticationMethods : {Fba}
AdminDisplayName :
ExchangeVersion : 0.10 (14.0.100.0)
DistinguishedName : CN=ecp (Default Web Site),CN=HTTP,CN=Protocols,CN=NC10LABS050,CN=Servers,CN=Exchange
Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=GKLabs,CN=Microsof
t Exchange,CN=Services,CN=Configuration,DC=GKLABS,DC=NET
Identity : NC10LABS050\ecp (Default Web Site)
Guid : 58faf2b9-130e-4582-8767-d38d72597698
ObjectCategory : GKLABS.NET/Configuration/Schema/ms-Exch-ECP-Virtual-Directory
ObjectClass : {top, msExchVirtualDirectory, msExchECPVirtualDirectory}
WhenChanged : 12/6/2010 3:37:00 PM
WhenCreated : 12/2/2010 4:28:54 PM
WhenChangedUTC : 12/6/2010 8:37:00 PM
WhenCreatedUTC : 12/2/2010 9:28:54 PM
OrganizationId :
OriginatingServer : NC10LABS023.corp.GKLABS.NET
IsValid : True
Test-OutlookWebServices
[PS] C:\Windows\system32>Test-OutlookWebServices -identity
Gary.Wall@gklabs.net
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1019
Type : Information
Message : A valid Autodiscover service connection point was found. The Autodiscover URL on this object is
https://ow
a.gklabs.net/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1006
Type : Information
Message : Contacted the Autodiscover service at
https://owa.gklabs.net/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1016
Type : Information
Message : [EXCH] The AS is configured for this user in the Autodiscover response received from
https://owa.gklabs.ne
t/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1015
Type : Information
Message : [EXCH] The OAB is configured for this user in the Autodiscover response received from
https://owa.gklabs.n
et/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1014
Type : Information
Message : [EXCH] The UM is configured for this user in the Autodiscover response received from
https://owa.gklabs.ne
t/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1016
Type : Information
Message : [EXPR] The AS is configured for this user in the Autodiscover response received from
https://owa.gklabs.ne
t/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1015
Type : Information
Message : [EXPR] The OAB is configured for this user in the Autodiscover response received from
https://owa.gklabs.n
et/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1014
Type : Information
Message : [EXPR] The UM is configured for this user in the Autodiscover response received from
https://owa.gklabs.ne
t/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1022
Type : Success
Message : Autodiscover was tested successfully.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1104
Type : Error
Message : The certificate for the URL
https://nc10labs050.corp.gklabs.net/autodiscover/autodiscover.xml is incorrect
. For SSL to work, the certificate needs to have a subject of nc10labs050.corp.gklabs.net, instead the sub
ject found is owa.gklabs.net. Consider correcting service discovery, or installing a correct SSL certifica
te.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1106
Type : Information
Message : Contacted the Autodiscover service at
https://NC10LABS050.corp.GKLABS.NET:443/autodiscover/autodiscover.xm
l.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1116
Type : Information
Message : [EXCH] The AS is configured for this user in the Autodiscover response received from
https://NC10LABS050.c
orp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1115
Type : Information
Message : [EXCH] The OAB is configured for this user in the Autodiscover response received from
https://NC10LABS050.
corp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1114
Type : Information
Message : [EXCH] The UM is configured for this user in the Autodiscover response received from
https://NC10LABS050.c
orp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1116
Type : Information
Message : [EXPR] The AS is configured for this user in the Autodiscover response received from
https://NC10LABS050.c
orp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1115
Type : Information
Message : [EXPR] The OAB is configured for this user in the Autodiscover response received from
https://NC10LABS050.
corp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1114
Type : Information
Message : [EXPR] The UM is configured for this user in the Autodiscover response received from
https://NC10LABS050.c
orp.GKLABS.NET:443/autodiscover/autodiscover.xml.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1122
Type : Success
Message : Autodiscover was tested successfully.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1024
Type : Success
Message : [EXCH] Successfully contacted the AS service at
https://owa.gklabs.net/ews/exchange.asmx. The elapsed time
was 169 milliseconds.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1026
Type : Success
Message : [EXCH] Successfully contacted the UM service at
https://owa.gklabs.net/ews/exchange.asmx. The elapsed time
was 265 milliseconds.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1124
Type : Success
Message : [Server] Successfully contacted the AS service at
https://nc10labs050.corp.gklabs.net/EWS/Exchange.asmx. T
he elapsed time was 140 milliseconds.
RunspaceId : d76c31b6-a9f2-4211-ba93-d05aa96f862a
Id : 1126
Type : Success
Message : [Server] Successfully contacted the UM service at
https://nc10labs050.corp.gklabs.net/EWS/Exchange.asmx. T
he elapsed time was 187 milliseconds.Wall
Free Windows Admin Tool Kit Click here and download it now
December 7th, 2010 1:15pm
Thanks to everyone that responded to this message. Even though this is a lab environment, I placed a call to Microsoft PSS.
After spending two days with Exchange support, we couldnt find an issue with the Exchange config and seemed to be something else with authentication causing the service to fail. They eventually tried to resolve using
http://support.microsoft.com/kb/216393 however this didnt work, so we had to manually disjoin and then rejoin the Server to the domain - see below.
Seems that the CAS server (NC10LABS050) had been generating 3210 Netlogon errors. Long story short, the computer account and/or local security accounts were corrupt....
To fix this issue, I simply stopped and disabled ALL exchange services. Rebooted. Removed the computer from the domain. Rebooted. Added the computer back to the domain. Rebooted. Set the exchange services back to their normal Automatic,
Manual, etc. status and rebooted one final time.
Once the server came back on line, credentials were able to be passed and all exchange autodiscover services worked perfectly.
Thanks to everyone on this list who responded and offered assistance. It was much appreciated!
Wall
December 9th, 2010 10:56am