Hi all, here is a question for you guys: Scenario: Multi domain in a single forest Public facing cas in a child domain in SiteA: cas1.child.mydomain.com Internal cas in root domain/SiteB: cas2.mydomain.com Target: cas1.child.mydomain.com should proxy https on cas2.mydomain.com, so users with mailbox in SiteB can use OWA I'm having some difficulties to get this working, did anybody here deploy a similar topology ? Is the CAS capable to proxy across domains ? It seems cas1.child.mydomain.com is not able to query the SPN for cas2 in the SiteB, if I run setspn -l cas2.mydomain.com from cas1 the query fails

Have you used child domain name in certificate you are usinh for OWA. See this thread for paret-child cas-cas proxy http://social.technet.microsoft.com/Forums/en-IN/exchangesvrmobility/thread/bffe41b9-21b6-40b9-a44e-33ca320881a2Anil MCC 2011,ITIL V3,MCSA 2003,MCTS 2010, My Blog : http://messagingschool.wordpress.com

I'm not seeing any issue with certs and I don't think I need the child domain in the certificate on CAS1. The client trusts the public facing CAS through a cert issued by a public CA and internally we have an enterprise root CA so also CAS1 and CAS2 trust each other CAS1 simply says (event viewer) that it cannot find any CAS server on the other side

Based on my research, proxy should work fine between the two domains. To troubleshoot the issue, please assure the internal URL is configured correctly and authentication is set as NTLM. Thanks. Novak