Outlook Web Access - No login page?

[StumpedTechy]

We have OWA enabled on our only internal exchange server. There is no external access at all at this time. The problem is when we enabled OWA we don't get the standard login screen on the web browser we get a Windows authentication pop-up box. While I don't mind this (it does not hurt functionality) my boss wants something a little more pleasing for the user to see.

The URL we are using is

http://server/Exchange

The exact screen he is looking to show is -

http://www.msexchange.org/img/upl/image0061091787282328.jpg

I did verify that IIS is running and that there is the logon.asp in the C:\Program Files\Exchsrvr\exchweb\bin\auth\usa directory which I know the logon.asp is supposed to be the template for the logon page.... I just am now stumped at why the page isn't displaying.

 

[nell1]

Bonjour,

Sounds like an authentication tweak may be needed to me. What are you directory security settings on the web directory where OWA is hosted? Usually 'Default Website' I think...

Nell1

 

[rye8261]

You have to turn on form based authentication. Look here for instructions.

http://hellomate.typepad.com/exchange/2003/11/formsbased_auth.html

---------------------------------------

http://www.hybridtown.com

http://www.ryesworld.com

 

[StumpedTechy]

FBA is turned on - This is what allowed everyone to get the prompt - Before I enabled FBA everyone was getting Page not found errors.

Default Web Site - Directory security settings are -
checked - Enable Anon Access
Username- IUSER_SERVER
Pass - *'s
Only check in the 4 options below is in Integrated Windows Authentication.

 

[jkupski]

In order for FBA to work, you need to be using SSL.

The correct URL is https://server/exchange

 

[StumpedTechy]

When I do that with the s it no longer works at all. error is - The page cannot be displayed. Should I assume that SSL is not setup on this server defaultly? Can anyone point me to more about SSL and how to use it in an internal environment with no other exchange servers?

 

[rye8261]

Here are instructions on how to do this, first you must have the cert, then set up the form authentication.

http://www.petri.co.il/configure_ssl_on_owa.htm

http://www.petri.co.il/configuring_forms_based_authentication_in_exchange_2003.htm

---------------------------------------

http://www.hybridtown.com

http://www.ryesworld.com

 

[StumpedTechy]

Is there any way without "sending off to someone" for a certificate. Like I said this is all internal and noone external will be hitting this server and it seems a little lame that SSL is required internally. Also from what I am reading I have to pay then take this information to verisign or something to get a certificate?

On my server when I go to run this I get to step -

On the Delayed or Immediate Request page, click Send the request immediately to an online certification authority, and then click Next.

and I can only pick delayed...

Can anyone open my eyes to this whole SSL thing to get people to see this front page of FBA?

 

[rye8261]

Alright, i promise this is the last site i will give you. You can create your own CA and not have to pay for it. Here is another site that will walk you thorough ever step that you are trying to do from creating the cert to putting form based auth. on.

http://www.msexchange.org/tutorials/SSL_Enabling_OWA_2003.html

---------------------------------------

http://www.hybridtown.com

http://www.ryesworld.com

 

[StumpedTechy]

Thanks this looks to be just what I need. I'll go over it in detail. I'll come back and let you all know how it pans out.

 

[StumpedTechy]

Woot now I have the logon screen! The elation was short lived though because now I can't get past the login promt. If it was working fine before the SSL install and now I can't connect in what may be the causes for this one? I have checked the browser and I even tried on 2 or three builds to ensure its not a PC issue.

 

[rye8261]

when you are logging into the form based you have to enter your login as "DOMAIN_NAME\User name" so for the Domain of Microsoft and user Ryan I would put "Microsoft\Ryan" and then the password, or you can use ryan@microsoft.com or whatever the domain is. You can edit the login page later to change this if you have only one domain, but for not just try that.

---------------------------------------

http://www.hybridtown.com

http://www.ryesworld.com

 

[markdmac]

No need to edit the login page, if you go into IIS and edit the security, you can set the default domain to be the name of your domain and it will no longer be necessary to type it in. (if you have more than one domain then you can't do this but that would apply to editing the login page too).

I hope you find this post helpful.

Regards,

Mark

 

[StumpedTechy]

I have been doing that from day one - Domain\User and then password it then makes the "processing flag" wave and the loading bar goes VERY slow but it never passes the logon page.

 

[Zelandakh]

Try this:

http://www.msexchange.org/tutorials/OWA2003Forms-based-Authentication-default-domain.html

 

[xmsre]

checked - Enable Anon Access
Username- IUSER_SERVER"

Check your permissions, they're wrong.

 

[jkupski]

Yep, enable basic authentication, disable windows authentication.

 

[StumpedTechy]

OMG - You won't believe it but my exchange server died last night. The IIS service bounced while people were on the server and this knocked out exchange sevices that then would not restart. We did some exploratory searching and we looked under the C:\WINDOWS\System32\LogFiles\W3SVC1 and found the log for the 23rd was 180MB! All other logs were in the 24kb stage. Further check we notied that my web attempts were getting a 500 error but there were over 250 attempts per SECOND.

Well now MANY hours later we did an IIS uninstall and reinstall followed by a reinstall of Exchange and then Exchange SP1 and all is back to before...


But it still sucks because now OWA STILL does not work but now its a different problem.... I now get Unspecified Error when trying

http://server/Exchange

or

https://server/Exchange.

I am able to go to

http://server

and browse just fine so I think IIS is running on it right.

The one thing that has me a little scared is within IIS management console there is the Exchange and Exchweb under the Default website before I remember the virtual directory information having ExchangeAppPool under Application Pool now this isn't even an option and there is only DefaultAppPool.

So in all I am frustrated tired and almost insanely out of ideas.

I'll look at the last 2 links later tonight after my nap from being up all night restoring the server.

 

[Zelandakh]

Ok, stick the Exchange CD in. Go through and UNTICK the OWA. Then restart.

Then go through and repeat but tick the box.

Then service pack 1.

Unless the IIS is really wrecked, that should cure it. But be careful - I saw someone remove the whole of Exchange this way...

 

[markdmac]

How to re-create the Exchange-related virtual directories in Internet Information Services 6

http://support.microsoft.com/?kbid=888033

I hope you find this post helpful.

Regards,

Mark