RE: RPC-HTTP Setup Questions/Problems

  • From: "Simon Butler" <simon@xxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Tue, 28 Feb 2006 19:07:53 -0000

There are two main areas that people have problems with RPC over HTTPS. 

1. The certificate. 
2. The registry settings. 

Certificate. 
Is it a purchased certificate or a home-grown certificate? Ideally you
should use a purchased certificate. 
If you browse to https://server.domain.com/rpc (where server.domain.com
is the name that you have put in to your Outlook configuration) - what
happens? Do you get a certificate prompt? If not, you should get a
username and password prompt. After three failures you will get an
access denied error. That is normal. 

Registry Settings. 
Unfortunately you haven't included the original message, and I cannot
recall whether you are using a frontend backend or a single server. If
you are using a frontend backend then you don't need to worry about the
registry settings. 
If you are on a single server then you have to configure the registry by
hand. 

Do the testing internally, with a domain client to start with. Don't try
to complicate matters by going outside the firewall and using a
non-domain member. 
Configure Outlook in the regular way and confirm it is working, then
simply add the RPC over HTTPS settings - leaving everything else alone. 

Finally, make use of the rpcdiag switch, to ensure that you are
connecting over HTTPS and not TCP/IP. 
Close Outlook totally and click start run and type:
outlook.exe /rpcdiag 

And press enter. You can also see the connection status by holding down
CTRL and right clicking on the Outlook icon next to the clock.
Connection Status will be an option. 

Simon.


--
Simon Butler
MCP, MCSA, MVP:Exchange
Amset IT Solutions Ltd.

e: simon@xxxxxxxxxxxx
w: www.amset-it.com
w: www.amset.info

-----Original Message-----
From: Mike [mailto:mjin23@xxxxxxxxx] 
Sent: 28 February 2006 18:37
To: [ExchangeList]
Subject: [exchangelist] RE: RPC-HTTP Setup Questions/Problems

http://www.MSExchange.org/

Ok, I turned SSL on IIS on the FE server.  I'm still getting the
"Connect
to beserver.mail.com" login box and it won't authenticate my domain
account.  What am I missing here?

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
exchange-list3@xxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to info@xxxxxxxxxxxxxx


Other related posts: