[isalist] Re: configure oma with isa
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Sun, 30 Apr 2006 09:48:24 -0500
There are no drawbacks to using basic auth. Users can still
pre-authenticate at the ISA firewall and the ISA firewall can forward
those basic credentials to the published Web site, so that
unauthenticated users never get near the Web site itself.
FBA adds a couple of features, such as attachment management and logging
the users off when he leaves the site, but nother earth shaking.
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
MVP -- ISA Firewalls
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ara Avvali
Sent: Friday, April 28, 2006 12:36 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
Tom,
What is the draw back of using basic authentication with SSL? I
think is not getting the fancy login screen, plus users are directly
login to mail server instead logging to ISA. Is that correct?
Now that I have changed the authentication method on ISA rule
from FBA to basic, can I enable it in exchange box? Or does it cause
problem again with OMA?
Appreciated your help
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder
Sent: Friday, April 28, 2006 10:03 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
Yes, you can't use FBA on the OWA listener.
It will work with ISA 2006 because ISA 2006 will detect the
user-agent header and fall back to basic when it sees that you're using
a Windows Mobile device.
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
MVP -- ISA Firewalls
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ara Avvali
Sent: Friday, April 28, 2006 11:50 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
Hi Tom,
I exported the cert from mail server and ran it into
device. It went to trusted root and is not complaining about cert
anymore. But it doesn't take my password and login screen keeps coming
back. I believe this is related to FBA and SSL being enabled on rule
cause I only have a single ip address.
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder
Sent: Friday, April 28, 2006 9:41 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
Remember you need to add the CA cert to the Windows
Mobile client.
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
<http://tinyurl.com/3xqb7>
MVP -- ISA Firewalls
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ara Avvali
Sent: Friday, April 28, 2006 11:17 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
Hi Mark,
Yes I see the cert warning when I go to site.
Also I believe it is supported as it is posted here
http://www.microsoft.com/windowsmobile/pocketpc/phone/default.mspx it is
the T-Mobile version
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Mark Morgan
Sent: Thursday, April 27, 2006 6:47 PM
To: isalist@xxxxxxxxxxxxx
Subject: RE: [isalist] Re: configure oma with
isa
Sounds like there is something wrong with your
cert, go to my oma site with a PC when the cert warning comes up click
view, do the same with yours and compare the two. You may need to
reissue a cert. also is your phone a supported device?? if not you may
need to enable non-supported devices in exchange.
________________________________
From: isalist-bounce@xxxxxxxxxxxxx on behalf of
Ara Avvali
Sent: Thu 04/27/2006 18:11
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
Yes I did. As you said, I made copies of
certificate into both trusted
root of ISA and exchange. Still the problem is
the device says "the
security certificate on the server is invalid"
and support code is
0x80072F0D
Thanks
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Mark Morgan
Sent: Thursday, April 27, 2006 6:05 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
did u get the fba page from my oma site?
-----Original Message-----
From: "isalist-bounce@xxxxxxxxxxxxx"
<isalist-bounce@xxxxxxxxxxxxx> on
behalf of "Ara Avvali"
<Ara.Avvali@xxxxxxxxxxxxx>
Sent: Thursday, April 27, 2006 5:51 PM
To: "isalist@xxxxxxxxxxxxx"
<isalist@xxxxxxxxxxxxx>
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
Hi
Yes they are both in trusted root. I do have the
Tom's book and read it
:) LOL
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Mark Morgan
Sent: Thursday, April 27, 2006 5:34 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
I am using a cert generated by my own server,
you DO NOT need to buy a
cert to make it work. do you have the cert in
the trusted root
certification authorities store of isa and
exchange??? did you read
tom's book to set this up (if not you need to)??
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]On Behalf
Of Ara Avvali
Sent: Thursday, April 27, 2006 5:22 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
I understand that. But even importing my cert
into device didn't help
and it keeps saying cert is invalid. I guess I
have to tell the they
need to buy a cert. any idea which on is
cheaper?
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Mark Morgan
Sent: Thursday, April 27, 2006 5:17 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
the strange login you are getting is because you
are not using ssl,
require ssl on the oma website. when I login to
my oma I get an FBA
login screen (treo 650). it is not a good idea
to use http because your
password will be sent over the internet in plain
text!!!
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]On Behalf
Of Ara Avvali
Sent: Thursday, April 27, 2006 4:42 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
Hi
FBA is enabled on ISA only. Back exchange is not
enabled. I imported my
own certificate to phone, under personal. But
when I try to connect
using https it still says certificate is invalid
and needs to be fixed.
The device is a T-Mobile MDA. Internal network
is ava.local. External is
bossaudio.com. I have created the host file on
ISA so mail.bossaudio.com
goes to internal IP address. OWA with my own
certificate works perfectly
fine only oma is giving headaches.
I appreciate your help
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Mark Morgan
Sent: Thursday, April 27, 2006 4:31 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
checkout the reply I posted to you on
ExchangeList, is FBA enabled at
the isa, exchsrv, or both, if you are using FBA
with isa you need to
enable at the isa server and disable at
exchange. I have https setup in
the same .local scenario you have and it works
like a champ, you need to
do some dns tweaking and issue the cert to the
public domain name. oh
can you clarify complaining??
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]On Behalf
Of Ara Avvali
Sent: Thursday, April 27, 2006 4:14 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
I tried with https with my personal cert and it
kept complaining. Then I
imported the cert using the tool. Still no go.
Yes I am using FBA for owa
Any ideas? Appreciated
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Mark Morgan
Sent: Thursday, April 27, 2006 4:10 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
you should be using https, and it should ask for
a password to
authenticate to the exchange mail box. are you
using FBA???
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]On Behalf
Of Ara Avvali
Sent: Thursday, April 27, 2006 3:56 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
Hi
Thanks for helping me.
No. when I try to connect from internal network
using a browser,
http://mail/oma it works fine, but when I try
behind isa it keeps
popping up asking for password
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Mark Morgan
Sent: Thursday, April 27, 2006 3:51 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
were does it ask for a password in the
publishing wizard, when you try
to connect?????
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]On Behalf
Of Ara Avvali
Sent: Thursday, April 27, 2006 3:36 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
Hi
I tried but it keeps coming back asking for
password. I believe it is
the authentication method.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Young, Gerald G
Sent: Thursday, April 27, 2006 3:29 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: configure oma with isa
http://www.ISAserver.org
-------------------------------------------------------
Try running through the Publish Mail Server
Wizard.
Cordially yours,
Jerry G. Young II +From Blackberry+
MCSE (4.0/W2K)
Atlanta EES Implementation Team Lead
HHS Engineering
Unisys
11493 Sunset Hills Rd.
Reston, VA 20190
Office: 703-579-2727
Cell: 703-625-1468
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL
AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the
intended recipient. If you
received this in error, please contact the
sender and delete the e-mail
and its attachments from all computers.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
<isalist-bounce@xxxxxxxxxxxxx>
To: isalist@xxxxxxxxxxxxx
<isalist@xxxxxxxxxxxxx>
Sent: Thu Apr 27 18:21:29 2006
Subject: [isalist] configure oma with isa
Hello everyone
Sorry for asking stupid question but I can't
find the link on website
for territorial on publishing exchange oma
behind isa 2004
Would kindly anyone post it here?
Appreciated
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives:
//www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about
our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.385 / Virus Database: 268.5.0/325 -
Release Date: 4/26/2006
Other related posts:
