Home All Groups Group Topic Archive Search About

RPC over HTTP/S single server environment

Author
24 May 2006 5:39 PM
Jeremy Henry
My Exchange server is my global catalog.  Exchange is service pack 2 and the
OS is 2003 sp1.

The proxy is installed.  I've edited the valid ports regsitry key and
confirmed they are working via the rpccfg /hd command.  The correct server
names and ports are listed.  I think my problem is with IIS 6.0 and to be
more specific the certificate.  By the way this server is the CA.  With SSL
disabled on the RPC directory I can hit the directory from a client.  It
prompts me for my user creds three times then gives me the desired page.  If
I enable SSL on the RPC virtual directory and then try to access it via HTTP
of course I get the page telling me that the page has to be displayed via a
SSL connection.  I use HTTPS and I get "page cannot be displayed".
I have removed the certificate and re-created it once and I'm about to try
it again.  The name of the certificate is "mail.domain.com".  Of course when
I run outlook /rpcdiag It doesn't connect.  I know that my laptop is
configured properly because I hit my company's server using RPC over HTTPS
through another profile.

I've configured this in several cases but never on a single server.  Are
there some tricks I don't know about?
Any help would be greatly appeciated.

Author
25 May 2006 1:56 PM
Michael L. Meyer
I've found that this page has worked forme:

http://www.petri.co.il/configure_rpc_over_https_on_a_single_server.htm

regards,

Mike

Show quote
"Jeremy Henry" wrote:

> My Exchange server is my global catalog.  Exchange is service pack 2 and the
> OS is 2003 sp1.
>
> The proxy is installed.  I've edited the valid ports regsitry key and
> confirmed they are working via the rpccfg /hd command.  The correct server
> names and ports are listed.  I think my problem is with IIS 6.0 and to be
> more specific the certificate.  By the way this server is the CA.  With SSL
> disabled on the RPC directory I can hit the directory from a client.  It
> prompts me for my user creds three times then gives me the desired page.  If
> I enable SSL on the RPC virtual directory and then try to access it via HTTP
> of course I get the page telling me that the page has to be displayed via a
> SSL connection.  I use HTTPS and I get "page cannot be displayed".
> I have removed the certificate and re-created it once and I'm about to try
> it again.  The name of the certificate is "mail.domain.com".  Of course when
> I run outlook /rpcdiag It doesn't connect.  I know that my laptop is
> configured properly because I hit my company's server using RPC over HTTPS
> through another profile.
>
> I've configured this in several cases but never on a single server.  Are
> there some tricks I don't know about?
> Any help would be greatly appeciated.
Author
31 May 2006 3:47 PM
Jeremy Henry
I've been through this site and all it's child links.  I'm currently going
through it again
to see if there is anything I've missed.  It's just strange, from inside
this network if I go to http://serverNetBIOSname/rpc  I get the desired
effect.  If I enable SSL on the RPC virtual directory then try
https://serverNetBIOS/RPC, I get page cannot be displayed instead of the
three logon prompts followed by the "you are unauthorized" page.  Being that
this is coming from the internal network that eliminates a possible firewall
problem.  I'm also reading through the default website logs to see if I can
find the "needle in the haystack". 

Thanks, for your reply
Jeremy

Show quote
"Michael L. Meyer" wrote:

> I've found that this page has worked forme:
>
> http://www.petri.co.il/configure_rpc_over_https_on_a_single_server.htm
>
> regards,
>
> Mike
>
> "Jeremy Henry" wrote:
>
> > My Exchange server is my global catalog.  Exchange is service pack 2 and the
> > OS is 2003 sp1.
> >
> > The proxy is installed.  I've edited the valid ports regsitry key and
> > confirmed they are working via the rpccfg /hd command.  The correct server
> > names and ports are listed.  I think my problem is with IIS 6.0 and to be
> > more specific the certificate.  By the way this server is the CA.  With SSL
> > disabled on the RPC directory I can hit the directory from a client.  It
> > prompts me for my user creds three times then gives me the desired page.  If
> > I enable SSL on the RPC virtual directory and then try to access it via HTTP
> > of course I get the page telling me that the page has to be displayed via a
> > SSL connection.  I use HTTPS and I get "page cannot be displayed".
> > I have removed the certificate and re-created it once and I'm about to try
> > it again.  The name of the certificate is "mail.domain.com".  Of course when
> > I run outlook /rpcdiag It doesn't connect.  I know that my laptop is
> > configured properly because I hit my company's server using RPC over HTTPS
> > through another profile.
> >
> > I've configured this in several cases but never on a single server.  Are
> > there some tricks I don't know about?
> > Any help would be greatly appeciated.
Author
7 Jun 2006 7:45 PM
Jeremy Henry
I now have it to where I can hit https://mail.domainname.com/rpc and I get
prompted for my login 3 x's before it tells me that I don't have the
permissions to view the page.  I can run the outlook /rpcdiag and of course
it keeps prompting me for a logon.  I have tried several different accounts
with no luck.  After doing this I can view the default website logs and see
where the RPC IN and RPC OUT traffic where getting to the default website. 
I'm thinking that the existing setup is working as is to the IIS part.   Now
I'm thinking that the problem is whith the authentication.  I'm kind of at a
loss where to go in troubleshooing now.  If you want to see the registry
entries I've made changes to then I can email to you for confirmation.

Thanks

Show quote
"Jeremy Henry" wrote:

> I've been through this site and all it's child links.  I'm currently going
> through it again
> to see if there is anything I've missed.  It's just strange, from inside
> this network if I go to http://serverNetBIOSname/rpc  I get the desired
> effect.  If I enable SSL on the RPC virtual directory then try
> https://serverNetBIOS/RPC, I get page cannot be displayed instead of the
> three logon prompts followed by the "you are unauthorized" page.  Being that
> this is coming from the internal network that eliminates a possible firewall
> problem.  I'm also reading through the default website logs to see if I can
> find the "needle in the haystack". 
>
> Thanks, for your reply
> Jeremy
>
> "Michael L. Meyer" wrote:
>
> > I've found that this page has worked forme:
> >
> > http://www.petri.co.il/configure_rpc_over_https_on_a_single_server.htm
> >
> > regards,
> >
> > Mike
> >
> > "Jeremy Henry" wrote:
> >
> > > My Exchange server is my global catalog.  Exchange is service pack 2 and the
> > > OS is 2003 sp1.
> > >
> > > The proxy is installed.  I've edited the valid ports regsitry key and
> > > confirmed they are working via the rpccfg /hd command.  The correct server
> > > names and ports are listed.  I think my problem is with IIS 6.0 and to be
> > > more specific the certificate.  By the way this server is the CA.  With SSL
> > > disabled on the RPC directory I can hit the directory from a client.  It
> > > prompts me for my user creds three times then gives me the desired page.  If
> > > I enable SSL on the RPC virtual directory and then try to access it via HTTP
> > > of course I get the page telling me that the page has to be displayed via a
> > > SSL connection.  I use HTTPS and I get "page cannot be displayed".
> > > I have removed the certificate and re-created it once and I'm about to try
> > > it again.  The name of the certificate is "mail.domain.com".  Of course when
> > > I run outlook /rpcdiag It doesn't connect.  I know that my laptop is
> > > configured properly because I hit my company's server using RPC over HTTPS
> > > through another profile.
> > >
> > > I've configured this in several cases but never on a single server.  Are
> > > there some tricks I don't know about?
> > > Any help would be greatly appeciated.

AddThis Social Bookmark Button