OWA access Front-end server not passing authentication to Back-end

Here is my Config:

Back-end Cluster running Win2k3 and Exch2k3
Front-end Single Server running Win2k3 and Exch2k3

I just added the Front-end server and I'm trying to move
the OWA access point to the server.

Here is the problem:
When I connect to https://webmail.server.com/exchange I
get the error "The page must be viewed over a secure
channel" which I'm doing.

I've looked at the Exchange and Exchweb website
configurations and they are exactly the same as my
clustered back-end servers which I had OWA working
perfectly.

I've tried to remove the SSL certificate and removed the
requirement for SSL on the Back-end servers, but I still
get the same error.

I finally tried to remove the SSL certificate and removed
the requirement for SSL on the Front-end server, then it
seems as if the Front-end server doesn't pass the
authentication to any DC. I try to logon and I keep
getting the username and password window. After the 3rd
window I get the following error: "Error: Access is
Denied."

Could someone please help me with this one.
Thanks,
Will

Please post all reply to the newsgroup, so everyone can
benifit.

anonymous
Wed Oct 22 10:40:19 CDT 2003

Additional Note:

After 3 login windows I get "Error: Access is
Denied." I went back into AD and noticed that my account
was locked out. I tryied to logon again and got the
following error: "HTTP/1.1 401 Unauthorized"

My account is a Domain Admin and an Exchange Admin

Thanks,
Will

>-----Original Message-----
>Here is my Config:
>
>Back-end Cluster running Win2k3 and Exch2k3
>Front-end Single Server running Win2k3 and Exch2k3
>
>I just added the Front-end server and I'm trying to move
>the OWA access point to the server.
>
>Here is the problem:
>When I connect to https://webmail.server.com/exchange I
>get the error "The page must be viewed over a secure
>channel" which I'm doing.
>
>I've looked at the Exchange and Exchweb website
>configurations and they are exactly the same as my
>clustered back-end servers which I had OWA working
>perfectly.
>
>I've tried to remove the SSL certificate and removed the
>requirement for SSL on the Back-end servers, but I still
>get the same error.
>
>I finally tried to remove the SSL certificate and
removed
>the requirement for SSL on the Front-end server, then it
>seems as if the Front-end server doesn't pass the
>authentication to any DC. I try to logon and I keep
>getting the username and password window. After the 3rd
>window I get the following error: "Error: Access is
>Denied."
>
>Could someone please help me with this one.
>Thanks,
>Will
>
>Please post all reply to the newsgroup, so everyone can
>benifit.
>
>.
>

anonymous
Wed Oct 22 12:25:21 CDT 2003

Found the solution:

After removing the SSL Cert on the Back-end Cluster, I
forgot to stop and restart the HTTP Virtual Server
resouce. Once I did that everything worked.

Will


>-----Original Message-----
>Here is my Config:
>
>Back-end Cluster running Win2k3 and Exch2k3
>Front-end Single Server running Win2k3 and Exch2k3
>
>I just added the Front-end server and I'm trying to move
>the OWA access point to the server.
>
>Here is the problem:
>When I connect to https://webmail.server.com/exchange I
>get the error "The page must be viewed over a secure
>channel" which I'm doing.
>
>I've looked at the Exchange and Exchweb website
>configurations and they are exactly the same as my
>clustered back-end servers which I had OWA working
>perfectly.
>
>I've tried to remove the SSL certificate and removed the
>requirement for SSL on the Back-end servers, but I still
>get the same error.
>
>I finally tried to remove the SSL certificate and
removed
>the requirement for SSL on the Front-end server, then it
>seems as if the Front-end server doesn't pass the
>authentication to any DC. I try to logon and I keep
>getting the username and password window. After the 3rd
>window I get the following error: "Error: Access is
>Denied."
>
>Could someone please help me with this one.
>Thanks,
>Will
>
>Please post all reply to the newsgroup, so everyone can
>benifit.
>
>.
>