Outlook Web Access fails after migrating SSL certificate to dedicated SSL gateway

Hi we have just migrated our SSL certificate form our Outlook exchange server, outlook web access works perfectly but two of our users who have Blackberry devices set up to get their email via owa now fail.
Everything worked fine before the migration.
The new SSL gateway is an Apache box running mod_proxy, mod_SSL and mod_sec. Protecting the box running owa and IIS6.
I can provide the http.conf etc, but I can see the traffic passed by Apache but I am getting a 401 message on the way back through to the device.
Is there a specific IIS/Exchange or Apache config I need to enable to allow BB access?
Thanks in advance
Mike

Hello there!
You may have run up against some of the complexities between BIS and OWA. There are a couple of circumstances where BIS can't integrate to OWA. Plus, if the mailbox name changed, that may be the problem as well. While I'm neither a BIS nor OWA admin, I can point you to information resources that hopefully can help you.
Try this article.
And this one.
And this one.
And this one.
You also can search the public KBs for more relevant articles:
http://www.blackberry.com/btsc/microsites/microsite.do
Good luck and let us know!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Similar Messages

First time access to Outlook Web Access calendar after ADFS authenication redirects to mailbox

I am building an external web application that authenticates against ADFS. My current Exchange environment is a hybrid configuration of Office 365 with a Exchange 2013 hybrid server.
Here are the steps to reproduce my problem:
Open external web app
Authenticate via ADFS login page then redirect back to web app
Click on direct link to OWA calendar: https://outlook.office365.com/owa/#path=/calendar
From there, it will go through the OWA loading screen and open the mailbox instead of the calendar. This only occurs after the very first time accessing OWA after authentication; any attempts after that will correctly route to the calendar.
Is there a way to correctly route to the calendar everytime?

Hi Robert,
From your description, when you receive access denied message and hit back button in browser, it redirects you to the root site but not previous site. However, this just happens at the first time.
You may try to use some tool or check log which can tell us how does it handle the request when you hit the button. And compare the issue time and non-issue time.
I'd suggest you use Netmon tool:
http://blogs.msdn.com/b/carloshm/archive/2012/11/08/sharepoint-2013-network-monitor-parsers.aspx
Regards,
Rebecca Tu
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Cannot view OWA email - after upgrade to Firefox 5.0, Outlook Web Access displays ASCII characters (garbage) in message body. Same issue with multiple servers.

Email body of HTML or RTF messages are rendered in ASCII characters after upgrading to Firefox 5 when viewing email in MS Outlook Web Access (OWA) light from MS Exchange 2007 servers. Issue is repeatable with two entirely different Exchange systems.
Text email renders OK. Work around is to forward email (in use MS-IE).

You are welcome. I'm glad you got it back up.
(1) You say you did the symbolic link. I will assume this is set correctly; it's very important that it is.
(2) I don't know what you mean by "Been feeding the [email protected] for several weeks now, 700 emails each day at least." After the initial training period, SpamAssassin doesn't learn from mail it has already processed correctly. At this point, you only need to teach SpamAssassin when it is wrong. [email protected] should only be getting spam that is being passed as clean. Likewise, [email protected] should only be getting legitimate mail that is being flagged as junk. You are redirecting mail to both [email protected] and [email protected] ... right? SpamAssassin needs both.
(3) Next, as I said before, you need to implement those "Frontline spam defense for Mac OS X Server." Once you have that done and issue "postfix reload" you can look at your SMTP log in Server Admin and watch as Postfix blocks one piece of junk mail after another. It's kind of cool.
(4) Add some SARE rules:
Visit http://www.rulesemporium.com/rules.htm and download the following rules:
70sareadult.cf
70saregenlsubj0.cf
70sareheader0.cf
70sarehtml0.cf
70sareobfu0.cf
70sareoem.cf
70sarespoof.cf
70sarestocks.cf
70sareunsub.cf
72sare_redirectpost
Visit http://www.rulesemporium.com/other-rules.htm and download the following rules:
backhair.cf
bogus-virus-warnings.cf
chickenpox.cf
weeds.cf
Copy these rules to /etc/mail/spamassassin/
Then stop and restart mail services.
There are other things you can do, and you'll find differing opinions about such things. In general, I think implementing the "Frontline spam defense for Mac OS X Server" and adding the SARE rules will help a lot. Good luck!

After updating to ios 7, I am now asked to enter my password continuously when using outlook web access for my work emails. This didn't happen before, I only had to enter my password once. How can I fix this?

After updating to ios 7, I am now asked to enter my password continuously when accessing my emails on outlook web access. Before I just had to log in and I was able to reply, save emails, etc without re entering my password. How do I fix this?

Similar thing is happening to a relative.
He upgraded his iPhone 5 and lost his iCloud account and all his email accounts. Major pain in the neck for a senior. And it was not a user error...unless you count the fact that he hit the upgrade button.

Digital Certificates - Getting kicked out of MS Outlook Web Access

Hi,
I've just upgraded my 3GS to iOS 4.0 and most things work Ok. I can't seem to work out the new Birthday calendar but that's not my real concern. My bigger worry is that I cannot access my office email which is in MS Outlook Web Access. When I go to log in it just kicks me straight out of the browser.
It may be due to the fact that we are using a local digital certificate i.e. not a Verisign cert. but it is good enough for us, for now. Does Safari require a globally signed trusted Cert?
thanks in advance,

Solution (found by searching forum for "Safari Crashes"):
Settings > Safari > Autofill > Names & Passwords "Set to OFF".
Then choose "Continue" the next time. You've lost your password fill-in but at least you can log in.

Can no longer connect to a Microsoft Outlook Web Access site

Hi,
I hope you can help.
I used to be able to access a Microsoft Outlook Web Access site. However recently I am unable to do so. It has a self signed certificate, which I used to choose to accept, and then the browser waits and waits and waits.
I have tried Safari, Firefox, Camino, Flock, Opera, even Internet Explorer. They all behave the same way.
I am not sure when it stopped working. I only log on infrequently. So I do not know if it stopped working after a security update or an OS upgrade.
My Mac is up to date with software updates. I have performed the usual things, repaired permissions etc.
The funny thing is I can connect using Netscape Comunicator under Classic. I have also borrowed a friend's MacBook running leopard, and that works too.
I am wondering if a setting somewhere has become corrputed or inadvertently set incorrectly.
Thank you in anticipation.
Ted

Hi Bryan,
Thanks for your input.
Unfortunately I cannot get any of the OS X browsers I have tried to get beyond the accepting the site's certificate. All just stall waiting on the Outlook Web Access site. Safari 3.1, Camino, Flock, Firefox (2.0.0.12 and 3 beta 4), Netscape (7.1 and 9), Microsoft's Internet Explorer (thinking that might be more integrated with its Outlook Web Access package).
I have even deleted the certificates from my Keychain (for Safari) or within the other browsers' preferences.
Last night I even re-applied the 10.4.11 combo updater and then checked for software updates to confirm my system was up to date, but again without success when attempting to reach the Outlook Web Access site.
Thanks anyway.
Ted

BlackBerry Internet Service with Microsoft Outlook Web Access account

I need to switch my 8820 to a new work account. They use Outlook Exchange 2003, but do not support BES. I have access via both regular desktop Outlook and also Outlook Web Access (from a different server). I read the procedure to use BIS in KnowledgeBase KB03133. After entering my email address and password, I get a message that it was successfully set up. But, I get no e-mail messages delivered. When I check the settings, it looks like it is not using the correct server for Web Access. However, I can find no way to manually enter it - I don't get the error message described in Step 5 where I can pick "I will provide the settings." I try to set up via computer but I get a message that my BIS cannot be accessed via HTML and need to set up on my BB.
Any suggestions? Would it work with a newer phone running a newer OS? Do I need to check with AT&T if it supports Outlook Web Access? Thanks in advance.

Hi and Welcome to the Forums!
Lot's of possible variables...here a several other KBs to try:
KB03133How to integrate a Microsoft Outlook Web Access email address with a BlackBerry Internet Service account
KB18567BlackBerry Internet Service cannot connect to a Microsoft Outlook Web Access account using Microsoft Exchange 2007 or Microsoft Exchange 2010
KB15173Locate the mailbox name for a Microsoft Outlook Web Access 2007 email account
KB04804Error message appears when attempting to integrate a Microsoft Outlook Web Access 2010 account
KB02858Unable to integrate a Microsoft Outlook Web Access email address with a BlackBerry Internet Service account
The trick to getting to the manual settings screen is to provide your valid email address, but an incorrect password...then, it will allow you to manually enter the settings.
Good luck!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Solution to problems loging in to Outlook Web Access (solution here)

Hey all, i had to share. From what I've read a lot of people, including me are having problems loging into their Outlook Web Access pages. Just like many, mine would connect, ask for my login/pass and then just sit there trying to load the page. Here's the solution:
Instead of going to: email.companyname.com/exchange
point iPhone Safari to: email.companyname.com/oma
I think that's a cell phone, low bandwith/txt only version, which still lets you access all the info that the usual OWA lets you access.
But the extra tip is, that if after going to the "oma" site, you point Safari to the "/exchange" site--for some reason it will work.
Hope this helps everyone.

We found this was the solution as well. Its strange but it works.
Once you get logged into OMA (text only version) then it goes into OWA (graphical version) without any problems.
Great find.

Error - Outlook Web Access has encountered a Web Browsing error.

Several of our users who are using Outlook Web Access are getting this error. We are running Exchange2007 on Server2003 Enterprise SP1. Any help on this problem would be greatly appreciated. Thank-you
Error - Outlook Web Access has encountered a Web browsing error.
The entire error report is listed below: [[Note: I have removed the actual names of servers]]
Client Information
User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 1.1.4322)
CPU Class: x86
Platform: Win32
System Language: en-us
User Language: en-us
CookieEnabled: true
Mime Types:
Exception Details
Date: Wed Dec 23 15:19:06 EST 2009
Message: 'gtLV' is null or not an object
Url: https://exchangeserver.domain.net/owa/8.1.8.61/scripts/premium/clistview.js
Line: 39
Call Stack
onFcsInLV()
Dump Event
recordset = null
type = error
fromElement = null
toElement = null
altLeft = false
keyCode = 0
repeat = false
reason = 0
data =
behaviorCookie = 0
source = null
contentOverflow = false
behaviorPart = 0
url =
dataTransfer = null
ctrlKey = false
shiftLeft = false
dataFld =
returnValue = undefined
qualifier =
wheelDelta = 0
bookmarks = null
button = 0
srcFilter = null
nextPage =
cancelBubble = false
x = 0
y = 0
srcElement = null
screenX = 1588
screenY = 220
srcUrn =
origin =
boundElements = [object]
clientX = 130
clientY = 26
propertyName =
shiftKey = false
ctrlLeft = false
offsetX = 0
offsetY = 0
altKey = false
errorMessage = 'gtLV' is null or not an object
errorUrl = https://exchangeserver.domain.net/owa/8.1.8.9/scripts/premium/clistview.js
errorLine = 39
errorCharacter = 22
errorCode = 0

I had a similar issue. Have been trying various ways to include images in Outlook Web Mail and had an issue with one particular user only. All other users were OK. The issue reproduced on a different lap top with the same account so I assumed was somehow
saved back to Exchange server.
Outlook Web Access has encountered a Web browsing error.The entire error report is listed below (see end of this post)
The solution was found at: http://www.exchangefreaks.com/Error-with-OAB-t140759.html
Where someone said opening web mail in Mozilla Firefox and deleteing both the signature and out of office assistant text fields which contained html code that was breaking the functionality in IE. After replacing with the word blank and saving, the problem
was resolved.
my error:
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET
CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0;
OfficeLiveConnector.1.3; OfficeLivePatch.0.0; MAAU; .NET CLR 1.1.4322; MS-RTC LM 8)
CPU Class: x86
Platform: Win32
System Language: en-au
User Language: en-au
CookieEnabled: true
Mime Types:
Exception Details
Date: Thu Oct 13 13:25:56 UTC+1100 2011
Message: 'all' is null or not an object
Url: [removed private]
Line: 14
Call Stack
dispFb(oFb,fDspPuClr)
oFb = 'undefined'
fDspPuClr = 'undefined'
unload()
Dump Event
recordset = null
type = error
fromElement = null
toElement = null
altLeft = false
keyCode = 0
repeat = false
reason = 0
data =
behaviorCookie = 0
source = null
contentOverflow = false
behaviorPart = 0
url =
dataTransfer = null
ctrlKey = false
shiftLeft = false
dataFld =
returnValue = undefined
qualifier =
wheelDelta = 0
bookmarks = null
button = 0
srcFilter = null
nextPage =
cancelBubble = false
x = 0
y = 0
srcElement = null
screenX = 243
screenY = 373
srcUrn =
origin =
boundElements = [object]
clientX = 56
clientY = 218
propertyName =
shiftKey = false
ctrlLeft = false
offsetX = 0
offsetY = 0
altKey = false
errorMessage = 'all' is null or not an object
errorUrl = [private omitted] errorLine = 14
errorCharacter = 32
errorCode = 0
Close

Cannot contact Exchange Server or open Outlook Web Access in Safari

I am a small business user operating in an Exchange environment and have been having some connectivity problems:
1. Mail: I have been able to connect to and download emails from my Exchange server in Mail (both public and private folders) but have not been able to send mails through the same account. The server address is the same address as we use for Outlook Web Access (OWA). We do not use POP or SMTP, nor do we have separate addresses on the Exchange/OWA account.
2. Safari: For some reason, it is not possible for me to open OWA; Safari just "hangs" indefinitely and does not prompt for password or username. The window just remains blank. My OWA works perfectly with Windows-based machines.
3. Address: it is not possible to contact the Exchange server from Address Book to synchronize contacts. I keep getting an error that "iSync couldn't connect to Exchange". As I have just purchsed an iPhone, it is critical to make this work, otherwise I have no contacts on the iPhone.
In all cases, my Exchange/OWA server address is *https://mail.servername.com/exchange/username* for both outgoing and incoming mails. I have checked that the password and username are correct.
Can somebody help me here? Is there a server or client side adjustment that needs to be made? Are there any special certificates that are required? Making this work is really important...
Thanks in advance for your help!
Message was edited by: ERAC

I have the exact same problem as you have detailed in your #2 comment. OWA just hangs and will not proceed to the sign in screen. Any luck getting support on this?

Won't validate my password to outlook web access, but it work using a browser

I changed my office network password and my blackberry won't validate my new password a few days ago.
But I can go to my company outlook web access using a browser and the new password work.
It means a problem with a connector on my blackberry.

If you migrated your MobileMe account to iCloud before September last year then your @me.com address should still be functioning. If you sign into http://icloud.com can you see your mail there?
If you did migrate, and can get into Mail on the website, then you can set up Mail on Snow Leopard to access it. However when you try to set it up, the Mail 'Wizard' will attempt to force you to te MobileMe settings, because it's never heard of iCloud. To get round this you will need to follow the procedure outlined here:
Entering iCloud email settings manually in Snow Leopard or Leopard
If you did not migrate your account then you don't have an iCloud account and your @me.com address will no longer function.

Safari 5.0 problems attaching document in email (Outlook web access)

We have Windows Server 2008, and Exchange 2010 (since January).
I recently upgraded to Safari 5.0 on Mac, and when I try to attach a file to an email in Outlook Web access (to our Exchange server), it freezes Safari 5.0.
This does not occur in Safari 4.x (I tried it on a computer not upgraded to Safari 5).
Safari 5.0 in Windows won't freeze, but it doesn't let me attach the file either (the interface to attaching the file is bugged, does not completely display once a file is selected).
I am NOT using Yahoo, and don't have the browser plugin that has been reported as the problem for that similar issue.

HI,
From the Safari Menu Bar click Safari/Preferences then select the Security tab. Click: Show Cookies
Delete all Outlook/Microsoft cookies. Relaunch Safari and try attaching a file.
If that doesn't help, go to ~/Library/Caches/com.apple.Safari and move the "cache.db" file to the Trash.
Note. ~ (Tilde) character represents your Home Folder.
Relaunch Safari and try again. If that didn't help ...
Go to the Safari Menu Bar, click Safari/Preferences. Make note of all the preferences under each tab. Quit Safari. Now go to ~/Library/Preferences and move this file com.apple.safari.plist to the Desktop.
Relaunch Safari and see if that makes a difference. If not, move the .plist file back to the Preferences folder. If Safari functions as it should, move that .plist file to the Trash.
And if you haven't repaired permissions after updating Safari, it would be beneficial to do so.
Launch Disk Utility. (Applications/Utilities) Select MacintoshHD in the panel on the left, select the FirstAid tab. Click: Repair Disk Permissions. When it's finished from the Menu Bar, Quit Disk Utility and restart your Mac. If you see a long list of "messages" in the permissions window, it's ok. That can be ignored. As long as you see, "Permissions Repair Complete" when it's finished... you're done. Quit Disk Utility and restart your Mac.
Carolyn

Outlook Web Access (OWA)

My company uses an Exchange Server with Outlook Web Access enabled, but I'm not sure of the other settings (IMAP?)
When I got my iPhone I could not set up a link to the main server, but after some research discovered I could retrieve and send mail if I set up the account like this:
webmail.companyname.com
username: first.lastname (as my company designates us)
password: as required.
This worked fine until the company turned off some function of the server so that we can only access mail by signing into webmail with a browser (very cumbersome). However, users of Sprint Instincts can still access their mail by using the Instinct's mail setup and specifying an OWA account. Their mail is not "pushed" to their phones, but they can still access it by going to their mail function similar to us iPhone users just touching the mail icon. They are not looking at a website like through a browser, but rather just like any other synched mailbox.
Why can't the iPhone still access webmail like the Instinct? Is there a way around this or an App that makes webmail accessible without going through the browser?
Thanks,
Tim

check www.emoze.com
Haikal

ACS 5.1 with Outlook Web Access

Hi Everyone,
I have a weird issue which i am troubleshooting. I just wanted to see if anyone had a different view on this.....
I have an AD User, lets call them work\auser and there password just expired, so next logon to the domain they need to change there password.
They decide while at home to connect to Outlook Web Access, which authenticates to via ACS 5.1 to AD, when they try and connect they are denied with the following message in ACS -
24407 User authentication against Active Directory failed since user is required to change his password
: Authentication failed
ACS also says this as resolution -
Check the password expiry under Account options in the properties of an external database user. If the password is expired and the Enable Change Password is turned on in the Users and Identity Stores: External Identity Stores > Active Directory page, then the password will be changed.
Now, our OWA is not configured to allow password resets, so they must call in to have there password reset, or they can connect via VPN and our ASA allows them to change there password as configured under Identity Stores > Active Directory > Enable Password Change
This VPN password change is successful although OWA still will not work. The only way to fix it is to select passwsord does not expire within AD. Let it replicate, then de-select password does not expire and let it replicate.
This is pointing to a OWA issue in my opinion, although ACS is somehow involved, is it possible that ACS caches authentication, or because OWA does not allow password resets, it keeps responding with user required to change his password?
Any thoughts or different ways to look at this from a troubleshooting perspective would be greatly appreciated!
Thanks

The following is the procedure I am familiar with:
Resetting the Administrator Password
If you are not able to log in to the system due to loss of administrator password, you can use the ACS 5.1 Recovery DVD to reset the administrator password.
To reset the administrator password:
Step 1 Power up the appliance.
Step 2 Insert the ACS 5.1 Recovery DVD.
The console displays:
Welcome to Cisco Secure ACS 5.1 Recovery - CSACS 1121
To boot from hard disk press
Available boot options:
[1] Cisco Secure ACS 5.1 Installation (Keyboard/Monitor)
[2] Cisco Secure ACS 5.1 Installation (Serial Console)
[3] Reset Administrator Password (Keyboard/Monitor)
[4] Reset Administrator Password (Serial Console)
Boot from hard disk
Please enter boot option and press .
boot:
Step 3 To reset the administrator password, at the system prompt, enter 3 if you are using a keyboard and video monitor, or enter 4 if you are using a serial console port.

Using Safari with Outlook web access

I use MS Outlook Web Access to access my work email (OWA). When I first bought the iPhone and tried to access OWA, Safari would "hang" and never connect.
My IT department found the solution. They implemented OWA with SSL. Once they activiated that feature on the Exchange server, it worked fine.
You will access your OWA account through Safari with an https://mail.yourmail.com/exchange. It will prompt you for your ID and password. You are good to go!

Try turning off the pop up blocker. The reply in OWA opens a new window.

Outlook Web Access fails after migrating SSL certificate to dedicated SSL gateway

Similar Messages

Maybe you are looking for