none
Autodiscover test-outlookwebservcies error RRS feed

  • Question

  • Hello,

    I am deploying Exchanage 2007.  I have OWA working fine internal and external. 

    Note, I have all external and internal DNS pointers configured. 

    When I test wtih testexchangeconnectivity I get teh following: 

    PASS: Outlook AutoDiscover

    FAIL : Exchange ActiveSync & Exchange ActiveSynd Autodiscover. 

    Here is the result

    Attempting the Autodiscover and Exchange ActiveSync test (if requested).
      Testing of Autodiscover for Exchange ActiveSync failed.
     
    Test Steps
     
    Attempting each method of contacting the Autodiscover service.
      The Autodiscover service couldn't be contacted successfully by any method.
     
    Test Steps
     
    Attempting to test potential Autodiscover URL https://thewiechmanns.com/AutoDiscover/AutoDiscover.xml
      Testing of this potential Autodiscover URL failed.
     
    Test Steps
     
    Attempting to resolve the host name thewiechmanns.com in DNS.
      The host name resolved successfully.
     
    Additional Details
      IP addresses returned: 71.136.205.241
    Testing TCP port 443 on host thewiechmanns.com to ensure it's listening and open.
      The port was opened successfully.
    Testing the SSL certificate to make sure it's valid.
      The certificate passed all validation requirements.
     
    Test Steps
     
    Validating the certificate name.
      The certificate name was validated successfully.
     
    Additional Details
      Host name thewiechmanns.com was found in the Certificate Subject Common name.
    Certificate trust is being validated.
      The certificate is trusted and all certificates are present in the chain.
     
    Additional Details
      The certificate chain has been validated up to a trusted root. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
    Testing the certificate date to confirm the certificate is valid.
      Date validation passed. The certificate hasn't expired.
     
    Additional Details
      The certificate is valid. NotBefore = 3/10/2011 6:17:59 PM, NotAfter = 3/10/2016 6:17:59 PM
    Checking the IIS configuration for client certificate authentication.
      Client certificate authentication wasn't detected.
     
    Additional Details
      Accept/Require Client Certificates isn't configured.
    Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
      Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
     
    Test Steps
     
    ExRCA is attempting to retrieve an XML Autodiscover response from URL https://thewiechmanns.com/AutoDiscover/AutoDiscover.xml for user test@thewiechmanns.com.
      ExRCA failed to obtain an Autodiscover XML response.
     
    Additional Details
      An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: You do not have permission to view this directory or page.
    Attempting to test potential Autodiscover URL https://autodiscover.thewiechmanns.com/AutoDiscover/AutoDiscover.xml
      Testing of this potential Autodiscover URL failed.
     
    Test Steps
     
    Attempting to resolve the host name autodiscover.thewiechmanns.com in DNS.
      The host name resolved successfully.
     
    Additional Details
      IP addresses returned: 71.136.205.241
    Testing TCP port 443 on host autodiscover.thewiechmanns.com to ensure it's listening and open.
      The port was opened successfully.
    Testing the SSL certificate to make sure it's valid.
      The certificate passed all validation requirements.
     
    Test Steps
     
    Validating the certificate name.
      The certificate name was validated successfully.
     
    Additional Details
      Host name autodiscover.thewiechmanns.com was found in the Certificate Subject Alternative Name entry.
    Certificate trust is being validated.
      The certificate is trusted and all certificates are present in the chain.
     
    Additional Details
      The certificate chain has been validated up to a trusted root. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
    Testing the certificate date to confirm the certificate is valid.
      Date validation passed. The certificate hasn't expired.
     
    Additional Details
      The certificate is valid. NotBefore = 3/10/2011 6:17:59 PM, NotAfter = 3/10/2016 6:17:59 PM
    Checking the IIS configuration for client certificate authentication.
      Client certificate authentication wasn't detected.
     
    Additional Details
      Accept/Require Client Certificates isn't configured.
    Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
      Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
     
    Test Steps
     
    ExRCA is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.thewiechmanns.com/AutoDiscover/AutoDiscover.xml for user test@thewiechmanns.com.
      ExRCA failed to obtain an Autodiscover XML response.
     
    Additional Details
      An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: You do not have permission to view this directory or page.
    Attempting to contact the Autodiscover service using the HTTP redirect method.
      The attempt to contact Autodiscover using the HTTP Redirect method failed.
     
    Test Steps
     
    Attempting to resolve the host name autodiscover.thewiechmanns.com in DNS.
      The host name resolved successfully.
     
    Additional Details
      IP addresses returned: 71.136.205.241
    Testing TCP port 80 on host autodiscover.thewiechmanns.com to ensure it's listening and open.
      The port was opened successfully.
    ExRCA is checking the host autodiscover.thewiechmanns.com for an HTTP redirect to the Autodiscover service.
      ExRCA failed to get an HTTP redirect response for Autodiscover.
     
    Additional Details
      A Web exception occurred because an HTTP 404 - NotFound response was received from Unknown.
    Attempting to contact the Autodiscover service using the DNS SRV redirect method.
      ExRCA failed to contact the Autodiscover service using the DNS SRV redirect method.
     
    Test Steps
     
    Attempting to locate SRV record _autodiscover._tcp.thewiechmanns

    Attempting the Autodiscover and Exchange ActiveSync test (if requested).
      Testing of Autodiscover for Exchange ActiveSync failed.
       Test Steps
       Attempting each method of contacting the Autodiscover service.
      The Autodiscover service couldn't be contacted successfully by any method.
       Test Steps
       Attempting to test potential Autodiscover URL https://thewiechmanns.com/AutoDiscover/AutoDiscover.xml
      Testing of this potential Autodiscover URL failed.
       Test Steps
       Attempting to resolve the host name thewiechmanns.com in DNS.
      The host name resolved successfully.
       Additional Details
      IP addresses returned: 71.136.205.241
     
     Testing TCP port 443 on host thewiechmanns.com to ensure it's listening and open.
      The port was opened successfully.
     Testing the SSL certificate to make sure it's valid.
      The certificate passed all validation requirements.
       Test Steps
       Validating the certificate name.
      The certificate name was validated successfully.
       Additional Details
      Host name thewiechmanns.com was found in the Certificate Subject Common name.
     
     Certificate trust is being validated.
      The certificate is trusted and all certificates are present in the chain.
       Additional Details
      The certificate chain has been validated up to a trusted root. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
     
     Testing the certificate date to confirm the certificate is valid.
      Date validation passed. The certificate hasn't expired.
       Additional Details
      The certificate is valid. NotBefore = 3/10/2011 6:17:59 PM, NotAfter = 3/10/2016 6:17:59 PM
     
     
     
     Checking the IIS configuration for client certificate authentication.
      Client certificate authentication wasn't detected.
       Additional Details
      Accept/Require Client Certificates isn't configured.
     
     Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
      Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
       Test Steps
       ExRCA is attempting to retrieve an XML Autodiscover response from URL https://thewiechmanns.com/AutoDiscover/AutoDiscover.xml for user test@thewiechmanns.com.
      ExRCA failed to obtain an Autodiscover XML response.
       Additional Details
      An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: You do not have permission to view this directory or page.
     
     
     
     
     
     Attempting to test potential Autodiscover URL https://autodiscover.thewiechmanns.com/AutoDiscover/AutoDiscover.xml
      Testing of this potential Autodiscover URL failed.
       Test Steps
       Attempting to resolve the host name autodiscover.thewiechmanns.com in DNS.
      The host name resolved successfully.
       Additional Details
      IP addresses returned: 71.136.205.241
     
     Testing TCP port 443 on host autodiscover.thewiechmanns.com to ensure it's listening and open.
      The port was opened successfully.
     Testing the SSL certificate to make sure it's valid.
      The certificate passed all validation requirements.
       Test Steps
       Validating the certificate name.
      The certificate name was validated successfully.
       Additional Details
      Host name autodiscover.thewiechmanns.com was found in the Certificate Subject Alternative Name entry.
     
     Certificate trust is being validated.
      The certificate is trusted and all certificates are present in the chain.
       Additional Details
      The certificate chain has been validated up to a trusted root. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
     
     Testing the certificate date to confirm the certificate is valid.
      Date validation passed. The certificate hasn't expired.
       Additional Details
      The certificate is valid. NotBefore = 3/10/2011 6:17:59 PM, NotAfter = 3/10/2016 6:17:59 PM
     
     
     
     Checking the IIS configuration for client certificate authentication.
      Client certificate authentication wasn't detected.
       Additional Details
      Accept/Require Client Certificates isn't configured.
     
     Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
      Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
       Test Steps
       ExRCA is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.thewiechmanns.com/AutoDiscover/AutoDiscover.xml for user test@thewiechmanns.com.
      ExRCA failed to obtain an Autodiscover XML response.
       Additional Details
      An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: You do not have permission to view this directory or page.
     
     
     
     
     
     Attempting to contact the Autodiscover service using the HTTP redirect method.
      The attempt to contact Autodiscover using the HTTP Redirect method failed.
       Test Steps
       Attempting to resolve the host name autodiscover.thewiechmanns.com in DNS.
      The host name resolved successfully.
       Additional Details
      IP addresses returned: 71.136.205.241
     
     Testing TCP port 80 on host autodiscover.thewiechmanns.com to ensure it's listening and open.
      The port was opened successfully.
     ExRCA is checking the host autodiscover.thewiechmanns.com for an HTTP redirect to the Autodiscover service.
      ExRCA failed to get an HTTP redirect response for Autodiscover.
       Additional Details
      A Web exception occurred because an HTTP 404 - NotFound response was received from Unknown.
     
     
     
     Attempting to contact the Autodiscover service using the DNS SRV redirect method.
      ExRCA failed to contact the Autodiscover service using the DNS SRV redirect method.
       Test Steps
       Attempting to locate SRV record _autodiscover._tcp.thewiechmanns.com in DNS.
      The Autodiscover SRV record wasn't found in DNS.
       Tell me more about this issue and how to resolve it
     
     
     I next ran the test-outlookwebservcies | fl and got

    [PS] C:\Windows\system32>Test-OutlookWebServices | fl


    Id      : 1003
    Type    : Information
    Message : About to test AutoDiscover with the e-mail address test@thewiechmanns
              .com.

    Id      : 1007
    Type    : Information
    Message : Testing server TWEXCH1.thewiechmanns.com with the published name http
              s://twexch1.thewiechmanns.com/EWS/Exchange.asmx & .

    Id      : 1019
    Type    : Information
    Message : Found a valid AutoDiscover service connection point. The AutoDiscover
               URL on this object is https://TWExch1.thewiechmanns.com/Autodiscover
              /Autodiscover.xml.

    Id      : 1013
    Type    : Error
    Message : When contacting https://TWExch1.thewiechmanns.com/Autodiscover/Autodi
              scover.xml received the error The underlying connection was closed: A
              n unexpected error occurred on a send.

    Id      : 1013
    Type    : Error
    Message : When contacting https://TWExch1.thewiechmanns.com/Autodiscover/Autodi
              scover.xml received the error Unable to read data from the transport
              connection: An existing connection was forcibly closed by the remote
              host.

    Id      : 1013
    Type    : Error
    Message : When contacting https://TWExch1.thewiechmanns.com/Autodiscover/Autodi
              scover.xml received the error An existing connection was forcibly clo
              sed by the remote host

    Id      : 1006
    Type    : Error
    Message : The Autodiscover service could not be contacted.
     
     
     

    Attempting the Autodiscover and Exchange ActiveSync test (if requested).
      Testing of Autodiscover for Exchange ActiveSync failed.
     
    Test Steps
     
    Attempting each method of contacting the Autodiscover service.
      The Autodiscover service couldn't be contacted successfully by any method.
     
    Test Steps
     
    Attempting to test potential Autodiscover URL https://thewiechmanns.com/AutoDiscover/AutoDiscover.xml
      Testing of this potential Autodiscover URL failed.
     
    Test Steps
     
    Attempting to resolve the host name thewiechmanns.com in DNS.
      The host name resolved successfully.
     
    Additional Details
      IP addresses returned: 71.136.205.241
    Testing TCP port 443 on host thewiechmanns.com to ensure it's listening and open.
      The port was opened successfully.
    Testing the SSL certificate to make sure it's valid.
      The certificate passed all validation requirements.
     
    Test Steps
     
    Validating the certificate name.
      The certificate name was validated successfully.
     
    Additional Details
      Host name thewiechmanns.com was found in the Certificate Subject Common name.
    Certificate trust is being validated.
      The certificate is trusted and all certificates are present in the chain.
     
    Additional Details
      The certificate chain has been validated up to a trusted root. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
    Testing the certificate date to confirm the certificate is valid.
      Date validation passed. The certificate hasn't expired.
     
    Additional Details
      The certificate is valid. NotBefore = 3/10/2011 6:17:59 PM, NotAfter = 3/10/2016 6:17:59 PM
    Checking the IIS configuration for client certificate authentication.
      Client certificate authentication wasn't detected.
     
    Additional Details
      Accept/Require Client Certificates isn't configured.
    Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
      Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
     
    Test Steps
     
    ExRCA is attempting to retrieve an XML Autodiscover response from URL https://thewiechmanns.com/AutoDiscover/AutoDiscover.xml for user test@thewiechmanns.com.
      ExRCA failed to obtain an Autodiscover XML response.
     
    Additional Details
      An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: You do not have permission to view this directory or page.
    Attempting to test potential Autodiscover URL https://autodiscover.thewiechmanns.com/AutoDiscover/AutoDiscover.xml
      Testing of this potential Autodiscover URL failed.
     
    Test Steps
     
    Attempting to resolve the host name autodiscover.thewiechmanns.com in DNS.
      The host name resolved successfully.
     
    Additional Details
      IP addresses returned: 71.136.205.241
    Testing TCP port 443 on host autodiscover.thewiechmanns.com to ensure it's listening and open.
      The port was opened successfully.
    Testing the SSL certificate to make sure it's valid.
      The certificate passed all validation requirements.
     
    Test Steps
     
    Validating the certificate name.
      The certificate name was validated successfully.
     
    Additional Details
      Host name autodiscover.thewiechmanns.com was found in the Certificate Subject Alternative Name entry.
    Certificate trust is being validated.
      The certificate is trusted and all certificates are present in the chain.
     
    Additional Details
      The certificate chain has been validated up to a trusted root. Root = OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US.
    Testing the certificate date to confirm the certificate is valid.
      Date validation passed. The certificate hasn't expired.
     
    Additional Details
      The certificate is valid. NotBefore = 3/10/2011 6:17:59 PM, NotAfter = 3/10/2016 6:17:59 PM
    Checking the IIS configuration for client certificate authentication.
      Client certificate authentication wasn't detected.
     
    Additional Details
      Accept/Require Client Certificates isn't configured.
    Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
      Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
     
    Test Steps
     
    ExRCA is attempting to retrieve an XML Autodiscover response from URL https://autodiscover.thewiechmanns.com/AutoDiscover/AutoDiscover.xml for user test@thewiechmanns.com.
      ExRCA failed to obtain an Autodiscover XML response.
     
    Additional Details
      An HTTP 403 forbidden response was received. The response appears to have come from Unknown. Body of the response: You do not have permission to view this directory or page.
    Attempting to contact the Autodiscover service using the HTTP redirect method.
      The attempt to contact Autodiscover using the HTTP Redirect method failed.
     
    Test Steps
     
    Attempting to resolve the host name autodiscover.thewiechmanns.com in DNS.
      The host name resolved successfully.
     
    Additional Details
      IP addresses returned: 71.136.205.241
    Testing TCP port 80 on host autodiscover.thewiechmanns.com to ensure it's listening and open.
      The port was opened successfully.
    ExRCA is checking the host autodiscover.thewiechmanns.com for an HTTP redirect to the Autodiscover service.
      ExRCA failed to get an HTTP redirect response for Autodiscover.
     
    Additional Details
      A Web exception occurred because an HTTP 404 - NotFound response was received from Unknown.
    Attempting to contact the Autodiscover service using the DNS SRV redirect method.
      ExRCA failed to contact the Autodiscover service using the DNS SRV redirect method.
     
    Test Steps
     
    Attempting to locate SRV record _autodiscover._tcp.thewiechmanns.com in DNS.
      The Autodiscover SRV record wasn't found in DNS.
       <label for="testSelectWizard_ctl12_ctl06_ctl00_ctl03_ctl00_tmmArrow">Tell me more about this issue and how to resolve it</label>
    Thanks, Mike

    Sunday, March 13, 2011 8:41 PM

All replies

  • Autodiscover is separate from web services, so you apparently have two problems.  Let's start with Autodiscover.

    You do have a DNS record for autodiscover.thewiechmanns.com.  However, when I open a browser and look at https://autodiscover.thewiechmanns.com/AutoDiscover/AutoDiscover.xml, it throws a certificate error because although you do have a SAN certificate, autodiscover.thewiechmanns.com is not one of the SANs.  The name thewiechmanns.com is a SAN, however, so if you can make https://thewiechmanns.com/AutoDiscover/AutoDiscover.xml go to your CAS server, you should be able to get by the certificate error.  Most people don't do it that way, though (I haven't had a single customer do that), so I suggest you need to add autodiscover.thewiechmanns.com as a SAN.  Are you planning to use https://www.thewiechmanns.com/OWA as your OWA URL?  Because the only two SANs are www.thewiechmanns.com and thewiechmanns.com.

    Even if you get the right certificate installed, both https://autodiscover.thewiechmanns.com/AutoDiscover/AutoDiscover.xml and https://thewiechmanns.com/AutoDiscover/AutoDiscover.xml throw a 404 error, which says that neither is getting to your CAS or your CAS is misconfigured.

    I recommend that you focus on getting everything working internally first and then go for making it work externally.


    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Sunday, March 13, 2011 10:26 PM
  • Hello and thanks for the reply,

    I needed to switch back the firewall forward ports to the legacy Exchange 2003 server.  I am doing a migration and trying to get the last things working. 

    So the external and internal DNS records for the 2007 Exchange server are

    twexch1.thewiechmanns.com, autodiscover.thewiechmanns.com, mymail.thewiechmanns.com.  I have a UCC certificate for all three.  When I point the ports to the Exchange 2007 server OWA works externally with mymail.thewiechmanns.com.

    I also tested https://autodiscover.thewiechmanns.com/AutoDiscover/AutoDiscover.xml,  and I am prompted to logon and then get the default 600 error message. 

    I was trying to wrap this up over the weekend, but needed to switch back the services.  I was thinking of moving the mailboxes to 2007 and have all staff use OWA, but it would be nice to get the services working to they can use Outlook externally and sync services.

    Monday, March 14, 2011 1:40 AM
  • When I connected, the certificate did not have the SANs you listed.
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Monday, March 14, 2011 3:24 PM
  • Hi, I just switched the firewall settings.

    Here is what I get from the cert.

     

    DNS Name=thewiechmanns.com
    DNS Name=www.thewiechmanns.com
    DNS Name=twexch1.thewiechmanns.com
    DNS Name=autodiscover.thewiechmanns.com
    DNS Name=mymail.thewiechmanns.com

     

     

    Monday, March 14, 2011 4:21 PM
  • https://autodiscover.thewiechmanns.com/AutoDiscover/AutoDiscover.xml is throwing an HTTP 403 error.  Do you have some sort of web publishing proxy server between the Internet and your Exchange CAS?
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Monday, March 14, 2011 4:38 PM
  • not that I know of.  this is a fresh install. is there a paramater i can check?

    i also just corrected the authentication of the autodiscover VD and it now prompts for a logon.  i logon then get the following

      <?xml version="1.0" encoding="utf-8" ?>

    - <Autodiscover xmlns="http://schemas.microsoft.com/exchange/autodiscover/responseschema/2006">
    - <Response>
    - <Error Time="09:48:44.5149553" Id="2716222832">
      <ErrorCode>600</ErrorCode>
      <Message>Invalid Request</Message>
      <DebugData />
      </Error>
      </Response>
      </Autodiscover>
    thx.
    Monday, March 14, 2011 4:54 PM
  • That is what you should expect to see.
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Monday, March 14, 2011 5:36 PM
  • thanks - good newws.

    now i can successfully test Active Sync & Outlook Anywhere without autodiscover

    when I use autodiscover it fails with the same error as the original post.  any suggestions?

     

    thx.

    Monday, March 14, 2011 5:39 PM
  • No, that's saying that Autodiscover is returning what you should expect it to return when doing a web query.
    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    Monday, March 14, 2011 11:37 PM