[isalist] Re: SSL OWA RPC

  • From: Jim <jmay@xxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 31 Aug 2007 10:34:39 -0700

http://www.ISAserver.org
-------------------------------------------------------



Thanks Jim For the replies and the link to the Blog I have printed all the 
information.

No the problem is my user cannot connect to my ISA 2004 box when he is inside 
the fire walled LAN at the corporate office in DC I and he can connect anywhere 
that I tried so far. The other night I was in Mc Donald's with my kids for 2 
hours the whole time I was getting emails using https over RPC. There is some 
sort of issue with the corporate LAN in DC

Yes I will use some of the suggestions in the BLOG you recommended I will let 
you what happens I have been on vacation leaving town for the weekend will run 
tests next week.

Can you answer this question? I have both basic and NTLM or windows integrated 
authentication checked I can only connect to the isa box using basic 
authentication can both be checked or is it one or the other?

Jim

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Jim Harrison
Sent: Friday, August 31, 2007 9:36 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL OWA RPC

http://www.ISAserver.org
-------------------------------------------------------

Well, are you still trying to solve the following problem statement:
> Recently  its been brought to my attention that one of my users cannot
> use https over rpc from the main office testing the config using
> https://mail.domain.com/rpc/rpcproxy.dll  I get an error message
> internal error 500
?

If so, the answer is "quit testing it with a browser."
Do you have other failure indications from the reporting user?
Have you tried the testing methodology from the isablogs on the subject?

Jim

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim
Sent: Friday, August 31, 2007 9:29 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL OWA RPC

http://www.ISAserver.org
-------------------------------------------------------

ISA 2004 is the version

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Friday, August 31, 2007 7:08 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL OWA RPC

http://www.ISAserver.org
-------------------------------------------------------

Correct.
I meant "per IP listener".
The sad thing is that we don't' know which ISA version he's using, so
unless it's ISA 2006, it could well be "one per web listener".

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thor (Hammer of God)
Sent: Friday, August 31, 2007 6:57 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL OWA RPC

http://www.ISAserver.org
-------------------------------------------------------

Lastly, you meant one cert per IP, not once cert per listener, right?
You can assign a different cert for each IP the listener uses...

t

> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> Sent: Tuesday, August 28, 2007 12:23 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SSL OWA RPC
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> I don't see anything that says you have a certificate problem?
> If you get the "500" error as a result of testing your RPC over HTTP
> publishing with a browser, this is expected.  Have a read here
> http://blogs.technet.com/isablog/search.aspx?q=%22testing+RPC%22&p=1.
>
> To answer the question of certificate usage, you can only have one
> certificate per web listener.
>
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-
> bounce@xxxxxxxxxxxxx]
> On Behalf Of James May
> Sent: Tuesday, August 28, 2007 12:11 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] SSL OWA RPC
>
> IS it possible to use 2 different ssl certs on isa 2004 one for https
> over rpc and one for OWA
>
>
>
> I have one cert mail.domain.com
>
> One for www.domain.com
>
>
>
> Using 2 different publishing rules. One for www owa and one for the
> https over rpc
>
>
>
> Recently  its been brought to my attention that one of my users cannot
> use https over rpc from the main office testing the config using
> https://mail.domain.com/rpc/rpcproxy.dll  I get an error message
> internal error 500
>
>
>
> The www.domain.com is the cert on the internal exchange box
>
>
>
> The isa box is using mail.domain.com cert it seems to work everywhere
> except the corporate office however it fails the rpcproxy.dll test.
>
>
>
> James May
>
> Defense Group Inc
>
> Santa Monia, CA 90401
>
> jmay@xxxxxxxxxx
>
>
>
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: