Hi,

Facing Wiered issue in Exchange 2013, POP3 is not working ... When configuring POP3 in outlook it failed to authenticate.

unknown user name or bad password. [Error=ProxyNotAuthenticated Proxy=ZAJNBEXC03.cws.sasol.com:1995:SSL]

Is it happening to all the users?
It seems issue is with the credentials

Credentials are correct

Here is the output ..... pls. let me know if this is correct

[PS] C:\Windows\system32>Get-PopSettings |fl

RunspaceId                        : ecc593c8-067e-4d9d-aca1-c121295b8499
Name                              : 1
ProtocolName                      : POP3
MaxCommandSize                    : 512
MessageRetrievalSortOrder         : Ascending
UnencryptedOrTLSBindings          : {[::]:110, 0.0.0.0:110}
SSLBindings                       : {[::]:995, 0.0.0.0:995}
InternalConnectionSettings        : {ZAJNBEXC02.cws.sasol.com:995:SSL, ZAJNBEXC02.cws.sasol.com:110:TLS}
ExternalConnectionSettings        : {ZAJNBEXC02.cws.sasol.com:995:SSL}
X509CertificateName               : mail.sasol.com
Banner                            : The Microsoft Exchange POP3 service is ready on ZAJNBEXC02.
LoginType                         : PlainTextLogin
AuthenticatedConnectionTimeout    : 00:30:00
PreAuthenticatedConnectionTimeout : 00:01:00
MaxConnections                    : 2147483647
MaxConnectionFromSingleIP         : 2147483647
MaxConnectionsPerUser             : 16
MessageRetrievalMimeFormat        : BestBodyFormat
ProxyTargetPort                   : 1995
CalendarItemRetrievalOption       : iCalendar
OwaServerUrl                      :
EnableExactRFC822Size             : False
LiveIdBasicAuthReplacement        : False
SuppressReadReceipt               : False
ProtocolLogEnabled                : True
EnforceCertificateErrors          : False
LogFileLocation                   : D:\Program Files\Microsoft\Exchange Server\V15\Logging\Pop3
LogFileRollOverSettings           : Daily
LogPerFileSizeQuota               : 0 B (0 bytes)
ExtendedProtectionPolicy          : None
EnableGSSAPIAndNTLMAuth           : True
Server                            : ZAJNBEXC02
AdminDisplayName                  :
ExchangeVersion                   : 0.10 (14.0.100.0)
DistinguishedName                 : CN=1,CN=POP3,CN=Protocols,CN=ZAJNBEXC02,CN=Servers,CN=Exchange Administrative
                                    Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Sasol,CN=Microsoft
                                    Exchange,CN=Services,CN=Configuration,DC=cws,DC=sasol,DC=com
Identity                          : ZAJNBEXC02\1
Guid                              : 4c5d5409-1b4a-4127-a4cd-11b064156322
ObjectCategory                    : cws.sasol.com/Configuration/Schema/ms-Exch-Protocol-Cfg-POP-Server
ObjectClass                       : {top, protocolCfg, protocolCfgPOP, protocolCfgPOPServer}
WhenChanged                       : 2015-02-24 08:57:41 AM
WhenCreated                       : 2014-12-08 11:25:29 AM
WhenChangedUTC                    : 2015-02-24 06:57:41 AM
WhenCreatedUTC                    : 2014-12-08 09:25:29 AM
OrganizationId                    :
OriginatingServer                 : ZAJNBWCWSFGC001.cws.sasol.com
IsValid                           : True
ObjectState                       : Unchanged

==================================================================

In my case I have 4 DAG and each having 3 server. .. I am POP test and it is failing with below error

 

RunspaceId                  : 75d8800c-3f32-4750-8fe1-940133eaf6e8
LocalSite                   : AFR-BYN
SecureAccess                : True
VirtualDirectoryName        :
Url                         :
UrlType                     : Unknown
Port                        : 0
ConnectionType              : Plaintext
ClientAccessServerShortName : ZAJNBEXC01
LocalSiteShortName          : AFR-BYN
ClientAccessServer          : ZAJNBEXC01.cws.sasol.com
Scenario                    : Create a MailboxSession object.
ScenarioDescription         : Creating MailboxSession object to access the mailbox [Test3.Migration@sasol.com].
PerformanceCounterName      :
Result                      : Failure
Error                       : Unable to create MailboxSession object to access the mailbox [Test3.Migration@sasol.com].

                              Detailed error information:
                              [Microsoft.Exchange.Data.Storage.WrongServerException]: The user and the mailbox are in different Active Directory sites. Inner error [Microsoft.Mapi.Ma
UserName                    : migrationtest3
StartTime                   : 2015-02-24 10:58:51 AM
Latency                     : -00:00:00.0010000
EventType                   : Error
LatencyInMillisecondsString :
Identity                    :
IsValid                     : True
ObjectState                 : New

 

Hi ,

Seems like the proxy target port is changed on your end and by default it would be 9955.But on your case it was 1995.

So please set it to default port and then check the results.

can you please run Test-PopConenctivity command and check if it shows you any error.

No luck ... Still same error

[PS] C:\Windows\system32>Test-PopConnectivity -ClientAccessServer:ZAJNBEXC01 -MailboxCredential:(Get-Credential sasolcws\migrationtest3) |fl

RunspaceId                  : 75d8800c-3f32-4750-8fe1-940133eaf6e8
LocalSite                   : AFR-BYN
SecureAccess                : True
VirtualDirectoryName        :
Url                         :
UrlType                     : Unknown
Port                        : 0
ConnectionType              : Plaintext
ClientAccessServerShortName : ZAJNBEXC01
LocalSiteShortName          : AFR-BYN
ClientAccessServer          : ZAJNBEXC01.cws.sasol.com
Scenario                    : Create a MailboxSession object.
ScenarioDescription         : Creating MailboxSession object to access the mailbox [Test3.Migration@sasol.com].
PerformanceCounterName      :
Result                      : Failure
Error                       : Unable to create MailboxSession object to access the mailbox [Test3.Migration@sasol.com].

                              Detailed error information:
                              [Microsoft.Exchange.Data.Storage.WrongServerException]: The user and the mailbox are in different Active Directory sites.
UserName                    : migrationtest3
StartTime                   : 2015-02-24 01:21:12 PM
Latency                     : -00:00:00.0010000
EventType                   : Error
LatencyInMillisecondsString :
Identity                    :
IsValid                     : True
ObjectState                 : New

Is this POP authentication related to default connector of CAS server ??

I t was working earlier during setup and after that it stopped working?

This is coming when Mailbox is on same server on which I am testing POP command.

it is not happening with all users and infact this is just request for few application who work through POP.

Just a quick question after looking at this value closely.

InternalConnectionSettings        : {ZAJNBEXC02.cws.sasol.com:995:SSL, ZAJNBEXC02.cws.sasol.com:110:TLS

Do you use by any chance a h/w load balancer or NLB and if yes is this the same name configured on over there.

one more question can you please check the certificate on your pop3 settings if you see the correct certificate.

It's correct Assigned to IIS, POP & IMAP.

Yes I have F5 load balancer but, I am testing on individual server.

So if i understand it correctly your oultook client will connect to F5 and from there to CAS box. If my understanding is correct then.

You might need to add fqdn assigned to F5 HLB in InternalConnectionSettings  and remove the host name fqdn from it and check.

Not exactly ... Internal outlook never connect to F5 it always connect to server where mailbox is ... I am trying to connect POP using individual server and load balncer doesn't comes in picture.

InternalConnectionSettings        : {ZAJNBEXC01.cws.sasol.com:995:SSL, ZAJNBEXC01.cws.sasol.com:110:TLS}
ExternalConnectionSettings        : {ZAJNBEXC01.cws.sasol.com:995:SSL}

I want to use POP on port 110 with Plan text login

Hi,

Please use the remote connectivity analyzer to test the POP settings and post the result.

https://testconnectivity.microsoft.com/

Note: Please hide sensitive information like your internal server name, user name and etc.

Thanks,

Receive connector on servers had issue .. Created new recieve connector in E2k13 with 110 & SMP 25 and it worked...

Thanks Everyone for your help and support !!