Here’s what got it to work: In the F5, on the https virtual server for the CAS array, set the OneConnect profile to None.
Once I did that, I could load the page fine. Autodiscover in Outlook still doesn’t work until the mailbox is on Exchange 2007+. DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.217.6851 (fax) HARRISON COLLEGE From: Harry Singh [mailto:hbo...@gmail.com] Sent: Thursday, March 31, 2011 12:30 PM To: MS-Exchange Admin Issues Subject: Re: CAS Array with SSL offloading Damien, I'm curious to find out what the fix was/is on the F5 since I plan on implementing a similar setup in the future. On Thu, Mar 31, 2011 at 11:31 AM, Michael B. Smith <mich...@smithcons.com> wrote: There are whitepapers on the Exchange TechNet site that describe the proper way to configure an F5 for use with Exchange. I’d check that out. (Sorry, I know nothing about F5’s, but I remember scanning the whitepaper when it was first released.) Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Damien Solodow [mailto:damien.solo...@harrison.edu] Sent: Thursday, March 31, 2011 11:28 AM To: MS-Exchange Admin Issues Subject: RE: CAS Array with SSL offloading I’d suspected as such. J I was just hoping someone knew enough about the cursed thing to help narrow it down. Might just have to open a case with them for it. DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.217.6851 (fax) HARRISON COLLEGE From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, March 31, 2011 11:25 AM To: MS-Exchange Admin Issues Subject: RE: CAS Array with SSL offloading Then you’ve found your problem. It’s with your F5 config. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Damien Solodow [mailto:damien.solo...@harrison.edu] Sent: Thursday, March 31, 2011 10:10 AM To: MS-Exchange Admin Issues Subject: RE: CAS Array with SSL offloading Here are the related lines in the log: Attempting URL https://mail.harrison.edu/autodiscover/autodiscover.xml found through SCP Autodiscover to https://mail.harrison.edu/autodiscover/autodiscover.xml start Autodiscover request completed with http status code 500 It then tries the normal autodiscover urls, the one that it finds showing the same results. The interesting thing is that if I update my hosts file to point to either of the servers in the CAS array for mail.harrison.edu, the XML doc comes up as expected. It’s when I go to it via the F5 that it doesn’t authenticate. DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.217.6851 (fax) HARRISON COLLEGE From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Wednesday, March 30, 2011 11:14 PM To: MS-Exchange Admin Issues Subject: RE: CAS Array with SSL offloading You’d have to show me the autodiscover output to answer that question. Sounds to me like you have something set up wrong. After ONE time of providing your credentials, you should get an XML doc that has a 600 error. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Damien Solodow [mailto:damien.solo...@harrison.edu] Sent: Wednesday, March 30, 2011 6:12 PM To: MS-Exchange Admin Issues Subject: CAS Array with SSL offloading I’m settings things up for our Exchange 2010 migration and have run into a snag that is proving obstinate. We have two CAS servers, Exchange 2010 SP1 on Windows 2008R2 SP1. I’ve created the CAS array via EMS. I’m using an F5 BigIP to provide load balancing between the two members, and configured it using the including Exchange 2010 template. OWA seems to be working properly. The issue I’m having is with autodiscovery. When I have Outlook 2007 create a new profile, it say that it’s able to configure my settings. However, it doesn’t setup Outlook Anywhere. If I tell Outlook to test autoconfiguration, it says that it was unable to determine my settings. The log message for the autoconfig in Outlook says “autodiscover request completed with status code 500”. If I have that PC point a web-browser to the autodiscover URL, I am prompted for credentials multiple times before it returns “you are not authorized”. If I disable basic authentication for the autodiscover virtual directory and hit it with the browser I get what looks like an XML file. Currently I only have CAS and HT servers, no mailbox role yet. Could that be part of my problem? DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.217.6851 (fax) HARRISON COLLEGE 500 North Meridian St Suite 500 Indianapolis, IN 46204-1213 www.harrison.edu <http://www.harrison.edu/> --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
