OWA 2003 - Basic Versus Premium using Kerberos

[JVKAdmin]

Hi,

I can't find this information anywhere but does anyone know if there is a way to have a user log into Outlook Web Access and automatically use either the premium version or the Basic version depending on the URL they entered ? (any switches or config changes to OWA ?). The Forms Based Authentication isn't going to work for us because we don't want to use SSL between our DMZ proxy and our internal system (SSL is only from the client to the DMZ server).

We are using straight AD Kerberos with a reverse proxy device in the DMZ.

Thanks

 

[MarkArnold]

The back half of that question doesn't make any sense.
Where do you want SSL?
If you only want SSL to the FE then publish that on the proxy in the DMZ.
If you want SSL to the Proxy and also through to the FE then use ISA so you can push the SSL to the ISA, unwrap it and re-wrap it in SSL through to the FE.

I could go on but I think you're approaching this from the wrong end and I can't help just yet because the question needs a clarification.

 

[JVKAdmin]

Mark,

We have exchange server 2003 with a default installation on our trusted lan. Its the Backend and Frontend in one.

We don't want to spend money on setting up another Frontend Exchange Server configuration. We don't have an extra server for this either.

So we bought a Sonic Wall SSL VPN device which as a reverse proxy built into it for Outlook Web Access. The box does SSL from the client to the proxy. but not from the proxy from the DMZ to the trusted network. The sonicwall box sits on our DMZ.

we opened up holes through our DMZ to our trusted for the Sonic wall in order to do AD Authentication from any client who logs on to the sonic wall through to our trusted network.

Authentication work great, except that I wanted to figure out a way to set up a bookmark (or link) to activate the basic mode for OWA rather then the client getting the default OWA client which is the Premium version. We are using Active Directory with Kerberos and do not get an OWA menu for switching from Basic to Premium client like you do when you set up Forms Based authentication.

We don't want to set Forms Based authenication because it means we have to switch from Kerberos to using Basic mode auth (as best I can tell from documentation) and we don't want to use the Forms Based authentication menu for OWA on the internal server.

I hope this clarifies my question ?

 

[JVKAdmin]

Sorry one more point of clarification:

were using a Sonic Wall SSLVPN device behind our regular firewall.

So two devices, one is a firewall and one is an SSLVPN proxy device for OWA.

 

[btnet]

I too am interested in how to be able to provide a URL to a user for Basic Mode access. That is one URL would give Premium access and the other would give Basic access. All this without using Forms based auth.