Webservice https passthru using UAG 2010

Hi Team,
I have an application which need to be allowed from externally using https traffic. Application authentication need to be hadled by the webservice in the backend . Which means i need to allow without authentication in UAG.
I did below steps already and am almost close to the fix. But need your expert advice to proceed please.
1) Created a new trunk and unchecked authentication settings for the trunk
2)Disabled component installation and scripting under session tab
3)Created an application specific web application for the site .
After above am able to access the portal from the browser. But there is an office template update application which uses this URL in the backend. But application traffic is failing throuhg this and below it the error
head><title>Object moved</title></head>
<body><h1>Object Moved</h1>This object may be found <a HREF="/InternalSite/InitParams.aspx?referrer=/InternalSite/Login.asp&resource%5Fid=DDD75E7316B94F199BFB1B4C3AF3AD2A&login%5Ftype=10&site%5Fname=globaltemplate&secure=1&URLHASH=bb4bf683%2D5644%2D4405%2D87d7%2D61fd457997bd&orig%5Furl=https%3A%2F%2Fgtupdate%2Deu%2Ecorporateroot%2Enet%2F">here</a>.</body>
UAG web monitor logs does not giveany error. But i see for the application trafffic it shows as an un authenticated traffic.
Request to suggest if anyone has clarity on the issue. Also let me know in case you need more details.
Please keep in mind am able to get the page without any authentication pop up thru browser. But not from the application. Thanks in advance

And an update, I did another application publishing on a separate trunk/portal to a similar page
/index.cfm?FuseAction=Programs.Home
And I get the same error. Is there a switch/setting/policy I am missing to allow it to run those?

Similar Messages

Publish Exchange 2013 using UAG 2010 Sp4

Hi,
We need to publish Exchange 2013 through UAG 2010. But we are not getting any dedicated link for UAG 2010 to publish Exchange 2013. we have UAG 2010 with SP4.
Is there any Step by step UAG 2010 configuration link to publish Exchange 2013?
Thanks
jitender

Hi Jitender,
Based on my knowledge, publishing Exchange 2013 with UAG 2010 is similar with publishing Exchange 2010.
I find a related Blog and Guid for your reference:
1. Publishing Exchange Server 2010 with Forefront UAG and TMG
http://blogs.technet.com/b/exchange/archive/2010/07/16/publishing-exchange-server-2010-with-forefront-uag-and-tmg.aspx
2. Publishing Exchange Server 2010 with Forefront Unified Access Gateway 2010 and Forefront Threat Management Gateway 2010
http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=8946
Please also notice the System requirement of both Exchange 2013 and UAG 2010.
System Requirement
Exchange 2013
http://technet.microsoft.com/en-us/library/aa996719(v=exchg.150).aspx
UAG 2010 SP4
Supported Operating System
Windows Server 2008 R2
Servers running Forefront UAG and SP4 require the following:
• Windows Server 2008 R2 Standard, Windows Server 2008 R2 Enterprise, or Windows Server 2008 R2 DataCenter.
• Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 2
Thanks
Mavis Huang
TechNet Community Support

Webservice ,Http service using Actionscript

Hi,
I 'm trying to call webservice and http service from the
Action script....If any one has any example ...showing how to call
the webservice and also invoke the method and pass the request
object then please pass this to me.
From the Adobe tutorial I found only the webservice and how
to Load WSDL .But I'm looking for an example whih will show how to
use webservice and invoke a method (use operation) and pass the
argument (using request).

Hi Mona,
If by "SSL logon procedure", you mean client certificate authentication, there should not be user/password set in SICF.
But a mapping will be needed between the client certificate and an ABAP user.
Setting a user/password in SICF is as secured as an open door even if the door is armoured (SSL)....
As I said before, all of this depends from your specific security and confidentiality needed in your company for this PDF.
Regards,
Olivier

Exchange Active Sync using UAG 2010 SP1 Event ID 14

I'm trying to find out what these mean. I have a few users, usually with a iPhone, that will get periodically prompted for credentials with their Exchange Active Sync account.
In the application log on the UAG I see quite a few of the following:
LogName: Application
Source: Microsoft Forefront UAG
Event ID: 14
Logged 2/1/2012 6:04:43 AM
Task Category: None
Keywords: Classic
Computer: CACUAG01
I removed the domain and user name to protect the innocent. Can someone explain what causes these?
"User domain\username with source IP address
failed to log into trunk exchangeactivesync (secure=1) using authentication server MSAD with session ID 6E0357C8-7196-4A30-9FD3-613839303E6A. Error code is Invalid Credentials."

Have a very similar issue...
Searched online for clues but none found.
Further investigation and found out this particular user had changed his network password about a week earlier. Had not checked messages on the mobile device since, but when checked was showing an error. Had to reset the password on the mobile
device and the errors stopped.
the actual error (event id 14) on the UAG Server is listed below.
User xxxx\xxxxx with source IP address failed to log into trunk brsite (secure=1) using authentication server xxxxx with session ID 55DxxB50-C3FC-4Exx-8732-AFFxxxxEB655. Error code is Logon failure: unknown user name or bad password.
Dave

UAG 2010 - SharePoint Redirect using Direct URLs

In the Initial Internal Application section on our single UAG 2010 trunk our SharePoint2007 application is listed as the Portal home page and the Display home page within portal frame is checked. Users log into the UAG and the next page is our SharePoint2007
site that is inside of a frame, the standard UAG portal toolbar is above. We have a tab within the SharePoint 2007 site that opens up a SharePoint 2010 site in the same frame which works great. If user right clicks in IE and chooses to
open in a new tab/window the SharePoint 2010 site comes up but there is no portal toolbar. This is the same thing that happens if an application is set to open in a new window, the new window does not have the portal toolbar. The goal is to
always have the Portal Toolbar visible regardless however not really sure how to make that happen. Is this actually possible, if so how?

In the Initial Internal Application section on our single UAG 2010 trunk our SharePoint2007 application is listed as the Portal home page and the Display home page within portal frame is checked. Users log into the UAG and the next page is our SharePoint2007
site that is inside of a frame, the standard UAG portal toolbar is above. We have a tab within the SharePoint 2007 site that opens up a SharePoint 2010 site in the same frame which works great. If user right clicks in IE and chooses to
open in a new tab/window the SharePoint 2010 site comes up but there is no portal toolbar. This is the same thing that happens if an application is set to open in a new window, the new window does not have the portal toolbar. The goal is to
always have the Portal Toolbar visible regardless however not really sure how to make that happen. Is this actually possible, if so how?

UAG 2010 SP4 and Outlook 2011 for MAC

Hi
We have UAG 2010 SP4 with trunk where autodiscover and EWS services are published without pre-authentication (Authorize all users). Exchange 2013 accepts basic auth on services.
RCA tests for Outlook Anywhere are passing and we can configure any windows/Outlook2007+ from internet through UAG using autodiscover.
However with Outlook2011 for MAC does not go through the mail account creation process when connecting to UAG.
According to Outlook logs, it will connect to autodiscover service and receive correct service urls for EWS, OAB etc.
After autodiscover, it tries to connect to EWS which fails and logs following UAG message
"<DIV style=""" id=""Error_Msg"">You are not authorized to access the application.</div>"
However with browser and same credentials I can connect to all service urls and they popup authentication prompt and lets user in. Outlook 2011 MAC works when connecting directly to Exchange so this is 99% sure an UAG issue.
Any suggestion where to look at?

I guess you already went through this http://technet.microsoft.com/en-us/library/ee921443.aspx
On Exchange, there is a command related to Outlook for Mac
Set-CASMailbox -Identity <alias> -EWSAllowEntourage:$True –EWSAllowMacOutlook:$true –EWSAllowList:"*+Mail*"
According to the blog entry below, if you publish with UAG/TMG it has to be enabled on the Organization level :
http://blog.hametbenoit.info/Lists/Posts/Post.aspx?ID=197
Please don't do it in production, it is just a suggestion :)

Publish Sharepoint 2013 with UAG 2010 SP3

Hi All,
I'm hoping some of you may be trying to accomplish the same task I am and are seeing similar problems.
We have a single SharePoint 2013 Server running in our forest behind a UAG server that is setup to publish other applications (Exchange and RDS Connections which all works fine). When publishing the SharePoint site following the instructions found
here (http://www.wictorwilen.se/sharepoint-2013-and-unified-access-gateway-uag-2010-service-pack-3) we are presented with the logon to UAG and then
redirected to the SharePoint site where I'm informed that I don't have access to the site. One change that we made to the instructions above was to terminate SSL on the UAG server and are using HTTP to the sharepoint server from UAG.
The SharePoint site shares the same DNS name as the internal network and the users can access the site internally with no issue.
My gut feeling on this issue is that some where UAG is not passing the credentials to the SharePoint server correctly but I'm not able to locate a log to determine failed login attempts. If someone could point me to where that may be that could be
pretty helpful.
Any help that you can provide would be greatly appreciated.
Thanks,
Jeremy,

Hi Jeremy,
Did you ever get this sorted? We've just migrated from Sharepoint 2010 to 2013 and everything looks good - except in the UAG (2010 SP3) that gives a "this site hasnt been shared with you". We also have SSL termination in the UAG, and the internal name is
different from the external name, but it worked in Sharepoint 2010 without this issue. And yes we recreated the application with the 2013 template.
// Kristoffer

How to configure array for UAG 2010 with topology Between a frontend firewall and a backend firewall

Hi,
We want to publish exchange 2013 through UAG 2010. What is the best topology for UAG 2010?
Can we configure UAG 2010 arrawy with topology "Between a frontend firewall and a backend firewall" ?
Can we configure UAG 2010 array in workgroup?
What is the drawback to use ARR to publish exchange 2013?
Thanks
Jitender
jitender

Hi Jitender - I have doen quite a few UAG deployments like this and is fully supported sitting in a DMZ between Firewalls. However, for an array the UAG Servers muts be domain joined. In these deployments the question is whether to place a Domain In the
DMZ (locked down of course) or allow traffic through to a domain controller via the backend firewall.
The link you require is here -
http://technet.microsoft.com/en-gb/library/ee428826.aspx
Kr
John Davies

UAG 2010 SP4 Cold Fusion Web Application "You Are Not Authorized To Access This Application" error

Hi folks,
2010 UAG SP4 publishing a web app that is a Cold Fusion login page.
The portal trunk is set to not verify URLs and open with that page directly rather than a Portal page, I also have it set to not install client components, basically using UAG as a reverse proxy with some other items.
The published app does not require authentication and all users are authorized the path is as follows:
/index.cfm?FuseAction=Security.Login
And the hostname is set as www.apps.x.x.edu name removed but is correct. UAG has an http to https redirection and it requires https.
The Portal Link has https://xxxx as the address which is correct as it is using an SSL connection to the backend web server and I can reach the page successfully from the UAG server by simply browsing.
I previously had the application launching within the portal but the client does not want the extra step so I removed the portal interaction all together and while I had the application launching within the portal, it worked. I'm not certain what changed
to make it fail, though.
In the Web Monitor I receive this error:
A request on trunk nonuvaportal; Secure=1 failed because of an unknown application. The URL is /index.cfm?FuseAction=Security.Login. The source IP address is 137.54.129.238. The user is .
Any help or tips or advice would be superb.
Thanks,
Justin

And an update, I did another application publishing on a separate trunk/portal to a similar page
/index.cfm?FuseAction=Programs.Home
And I get the same error. Is there a switch/setting/policy I am missing to allow it to run those?

Publish Exchange 2013 OWA + Active Sync + Outlook Anywhere using TMG 2010

We plan to publish our new Exchange 2013 SP1 servers (3 in DAG) outside corporate network using TMG 2010. I am looking for some guide how to do it in the proper way. What I found is little old and does not take into consideration Exchange 2013
SP1
http://blogs.technet.com/b/exchange/archive/2012/11/21/publishing-exchange-server-2013-using-tmg.aspx
Any advice how to publish Exchange 2013 OWA using form-based authentication and how to use Kerberos Constrained Delegation?

Hi,
The blog below describes some scenarios about publishing Exchange. You could have a look the Scenario 2.
Exchange publishing after TMG/UAG
http://dizdarevic.ba/ddamirblog/?p=168
Note: Microsoft provides third-party contact information to help you find technical support. This contact
information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

I am using Outlook 2010 and have a iphone 4s. In Outlook I have issues with my contacts not being the same as what I have corrected them to be. Is there a way to check and see which file Outlook is sharing with I-cloud?

I am using Outlook 2010 and I also use a Iphone 4s. I use Outlook to correct all my contacts and them it sync with my phone BUT I get different variations of the contacts. Almost as if there is another file it is going to. Can I check to see which file it is reading from??

This may be helpful.
http://itconflict.com/2012/01/08/troubleshooting-icloud-sync-with-outlook/

Using Excel 2010 with SharePoint 2013 Excel services

Hello:
What features are we missing when using Excel 2010 (rather than Excel 2013) with SharePoint 2013 Excel services?
Regards
Jeff Gorvits

Hi Jeff,
You might want to read the articles below:
https://support.office.com/en-us/article/Whats-new-in-Power-View-in-Excel-2013-and-in-SharePoint-Server-8e3b4259-421e-41fc-a48e-854388ad14d0?ui=en-US&rs=en-US&ad=US
https://support.office.com/en-us/article/Version-compatibility-between-Power-Pivot-Data-Models-in-Excel-2010-and-Excel-2013-188f44fd-3cfd-4aa7-b4e6-a9402653cbf3?ui=en-US&rs=en-US&ad=US
Regards,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected] .
Rebecca Tu
TechNet Community Support

Error opening Project 2007 file after using project 2010

This is the second time I'm experiencing this problem.
Created a file (say Rev 1) in Project 2007 at work and took it home and updated it using Project 2010. When I finished updating using Project 2010, I saved the file in Project 2007 format. Came to work the next day, opened the file using
Project 2007 and did a "Save As" so that I have another revision of the file (Rev 2).
After updating Rev 2 in Project 2007 I closed it but when I came to work the next day I couldn't open Rev 2 file again either in Project 2007 or 2010. This has happened to me with 2 different files.
The error message I get is
An unexpected error occured during command execution.
Try the following:
Verify that all argumen names and values are correct and are of the correct type.
You may have run out of memory. To free up available memory, close programs, projects, or windows that you aren't using.

It seems to me that it has to do something with invalid characters in the file name of the timeline. Or it could be anything from an '&' to two concurrent spaces, mulitple '.' or even a dash (-). Stick with single spaces, letter and
number combinations and you should be fine. The problems arise based on how the file has been opened. Here’s one thread like yours. It could be useful for your, read http://www.filerepairforum.com/forum/microsoft/microsoft-aa/project/625-project-error-“an-import-error-occurred”

Can i use exchange 2010 in the mail(4.5)?

Can i use exchange 2010 in the mail（4.5）？
i can't use exchange 2010 in the mail （4.5），but i can use normally in the mail （3.6）。why？

Of course you can use your iPhone in the rain but since devices are not waterproof, nobody in their right mind would recommend it. The risk is yours and an out-of-warranty repair might cost more than a few bucks.
I highly recommend you read this article: http://support.apple.com/kb/ht3302
And some kind of a protective casing if you insist on using the device in the rain.
Live long and prosper!

Can i use my 2010 20" imac as an external monitor for my Power mac

can i use my 2010 20" imac as an external monitor for my Power mac? Sounded like a 'no' a couple years back, but not sure if there are any new adapters out there.

https://discussions.apple.com/thread/4082303?start=0&tstart=0

Webservice https passthru using UAG 2010

Similar Messages

Maybe you are looking for