Exchange 2003 OWA Logon Issue
Hello all,
I just installed Exchange 2003 in a new environment and although it would normally work perfectly after SP2, OWA is failing to allow user's to logon.Below are the specifics. Has anyone ever experienced this type of issue? I am going MAD because it should be working just like the hundreds of other times I installed Exchange AND the fact that there is not meaningful troubleshooting information in anywhere to be found.
Event ID 537 in Security Log:
The user name and domain names are blank for some strange reason.
The logon process is Kerberos
Logon Type is 3
Status code and "Substatus code" are both 0xC000006D
Event ID 553 in Security Log:
the username is corrent, but the domain name looks like this: "%%mydomain.local"
Request Type is "KRB_AP_REQ"
Logon process is "Kerberos"
The communications bebetween a client to OWA lookes exactly like this:
GET /Exchange/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322)
Host: sa-temp
Connection: Keep-Alive
Authorization: Negotiate YIIFLwYGKwYBBQUCoIIFIzCCBR+gJDAiBgkqhkiC9xIBAgIGCSqGSIb3EgECAgYKKwYBBAGCNwICCqKCBPUEggTxYIIE7QYJKoZIhvcSAQICAQBuggTcMIIE2KADAgEFoQMCAQ6iBwMFACAAAACjggPwYYID7DCCA+igAwIBBaEbGxlERU1PTkVULk9NRUdVU1BSSU1FLkxPQ0FMojQwMqADAgECoSswKRsESFRUUBshc2EtdGVtcC5kZW1vbmV0Lm9tZWd1c3ByaW1lLmxvY2Fso4IDjDCCA4igAwIBF6EDAgECooIDegSCA3avm0HXIuIVJaB6vboqCgBr4QY2NFHvNHgEaMh57hbzvi37YLanPDzFjVW/W9bBQxIoLNWq4H/RCSI9Sq5NrIabAFkzC5D7UpOpnZIGRnzRPqSfmPZTt1nvvNWHC/4mgEI6YvmNBVnhUSfOzjfpftfYMKqy6Qy9k5LhtWUGdlpTDF/JGiGlo34WxNepLMUpeP3XtlqlfvGhTLyOmVOD28y5tfjY8YybCf5nZFJ9DZsTrqqIeeqkqoz7/hxJjGya7iMNVZkN5lz83w0gZuXsBQiE8b1YjRtWlu7fk+6dM9bgyJYI0wLR+NOFgKlpynPOPZw+tS3ln4nX6HioxZdA2u1SCcmMBxyady6PpXJk3G/5/8YUNljvVPdRrmGU7VkYJBysjrJru+A9xvOIISXFmMf/fA0QWhDPm3h76SVPIxy/tFExpnsYRW9xB5m/K25cBxEwPmmtnczVYWAcTOCrmMjPvBZlytHUWbTqURYOzVb8o7D8IHcSzuLgoPDGw49tILgrsBTe81g7ny6ai1dDHQ1JMonGNawt38nseoAdLyfYPoT8BF8vAxeT1YFpV/HRC+f75kxXlzMLBCZ+DtoHqOHJW0e+LbfUFFhC6iFMgC8o/Lv5i4UJMZGVr5XyWh6uDou2zQsN9mZvcWCNy+LXFzzYsoaitoFs2JDpltf6hqsxkzvOv87WXAx+D/BxG1dWzKTCBI6YPO4RlI8hEhkWIVADWTkgQ12vSuDdEF4MO5UWju3wigK6PUjPHFXfa5iVj+FezbL9C6fRXI2m+eqR4h9JdMPYMVTRcMHC34w5CB+/dQCwu0CnDJ9eRn3sBj4xaAaMKgEqnUizb4BcyBM9cEPnr8GpYjwP27XBzHptTRlIvpA+lS4DM19eNaU4Bl2BQ+2eoBx/6aWLrScuZIRY7wBmRQpvp+RSJ9QzYbIux+kXEBSoLl9m3z5n6w4P14mtvtPcblbV5aIBUfE/Uzr8CyMe3retjcAHaMl7uwzV0fJlXJiS3bZcJh8ELlt06aT34VIFJc/x/ARa3ix7+IXWkmtVsByJwGE5mFqxEnzSzE8VaojG/T6W0fjFnH1eM6hExStm/1ymTGyMhwlWFBGXzEqU+uwJ6FfU1uC44qFs9EHXCMkpqKYxSmhxLsroXdoMITrpabPyp+XLyYEqUGxxRmWsYJieejOOpIHOMIHLoAMCAReigcMEgcAS2aBiHCmC3VeSMcAfUUWSCDTCN3Hsb6iVCoHzctBcDrrfU8BNs3Oi1c0X5yMMsSoaVoNSHiItT9yNHngMtTfb1m5XKQ5yqQHO3p/WxYne5DPvgFN3eUfvoY70NcKNqJtAD0EDbuSK9F2X0ORejP6F41m10A1jVl+jmWw1F51YekGdBo3UyYEaQQlrr3ZpIOvUstwnSyrV1/nKRz5Bhy56++xseamiuX4/HeTdsw5DGCCMmmhCvyAnchyZOS465sM=
HTTP/1.1 401 Unauthorized
Content-Length: 83
Content-Type: text/html
Server: Microsoft-IIS/6.0
WWW-Authenticate: Negotiate oYGrMIGooAMKAQGhCwYJKoZIgvcSAQICooGTBIGQYIGNBgkqhkiG9xIBAgIDAH5+MHygAwIBBaEDAgEepBEYDzIwMDgwMjEwMjIyNzAwWqUFAgMNXSWmAwIBIqkbGxlERU1PTkVULk9NRUdVU1BSSU1FLkxPQ0FMqjQwMqADAgEDoSswKRsEaG9zdBshc2EtdGVtcC5kZW1vbmV0Lm9tZWd1c3ByaW1lLmxvY2Fs
X-Powered-By: ASP.NET
Date: Sun, 10 Feb 2008 22:27:00 GMT
<html><head><title>Error</title></head><body>Error: Access is Denied.</body></html>GET /Exchange/ HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
Accept-Language: en-us
UA-CPU: x86
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322)
Host: sa-temp
Connection: Keep-Alive
HTTP/1.1 401 Unauthorized
Content-Length: 83
Content-Type: text/html
Server: Microsoft-IIS/6.0
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
WWW-Authenticate: Basic realm="sa-temp"
X-Powered-By: ASP.NET
Date: Sun, 10 Feb 2008 22:27:01 GMT
<html><head><title>Error</title></head><body>Error: Access is Denied.</body></html>
- Rashad Rivera
www.omegusprime.com
February 11th, 2008 1:30am
Hi,
Did you enable forms based authentication?
Did you install a certificate?
Did you enable basic authentication?
What exactly happens on a user wotkstation when trying to logon to OWA?
Leif
Free Windows Admin Tool Kit Click here and download it now
February 12th, 2008 1:31am
Does anyone has an answer to the question posted?I am also experiencing the same issue, see th details belowFE/BE exchange enviornmentuser access OWA/IMAP4/POP3 using FE serverThey cannect to their MBx okay but the OWA comes as page loading and doesn't display any content.We use SSL and cert is deployed, the auth is NTLMI took netmon and it saysHTTP/1.1 401 Unauthorized
Content-Length: 83
Content-Type: text/html
Server: Microsoft-IIS/6.0
WWW-Authenticate: NTLM TlRMTVNTUAACAAAADAAMADgAAAAVgoniFhCppLhsA5kAAAAAAAAAAMgAyABEAAAABQLODgAAAA9BAEsAQQBNAEEASQACAAwAQQBLAEEATQBBAEkAAQAaAEEAUwBJAE4AMQBFAFgALQBDAEwAVQAxAEEABAAeAGMAbwByAHAALgBhAGsAYQBtAGEAaQAuAGMAbwBtAAMATgBBAFMASQBOADEARQBYAC0AQwBMAFUAMQBBAC4AYgBhAG4AZwBhAGwAbwByAGUALgBjAG8AcgBwAC4AYQBrAGEAbQBhAGkALgBjAG8AbQAFAB4AYwBvAHIAcAAuAGEAawBhAG0AYQBpAC4AYwBvAG0AAAAAAA==
X-Powered-By: ASP.NET
Date: Thu, 14 May 2009 17:17:29 GMT
<html><head><title>Error</title></head><body>Error: Access is Denied.</body></html>
May 15th, 2009 4:16pm
Issue was resolved by applying the Exchange latest service pack.
Free Windows Admin Tool Kit Click here and download it now
June 24th, 2009 3:24pm
Rashad,Did you also verified whether the permissions are set properly or not....below are few linkshttp://support.microsoft.com/kb/317471http://support.microsoft.com/kb/327843Regards,Pushkal Mishra
July 16th, 2009 5:42pm
This topic is archived. No further replies will be accepted.
Other recent topics
