I am trying to set up my Outlook Web Access (OWA) 5.5 in a DMZ and would like to connect using SSL to my Exchange 5.5 Server. I have installed a stand-alone IIS 5.0 with OWA 5.5. Users can connect to my Exchange box only if I add them as a local user to that box. Is there another way to do this? I really don't want to have to add new users in two different places, not to mention dealing with password changes.
Requires Free Membership to View
It sounds like you've set your authentication settings incorrectly on your IIS server. Since you have OWA on a separate IIS server in your DMZ, you won't be able to use either NTLM or Challenge/Response authentication. Neither of these credentials can be passed through multiple hops. I suspect that one of these options (NTLM or Challenge/Response) is set, which would cause authentication to fail and explain the behavior you're seeing.
I would try setting the authentication on the OWA site in IIS to permit only basic authentication. This will prompt your users to authenticate using the appropriate domain, user and password information. They should be using their domain credentials and there should be no requirement for you to create local accounts on the OWA server.
This was first published in October 2004
Join the conversationComment
Share
Comments
Results
Contribute to the conversation