Answered by:
MailTips could not be retrieved

Question
-
i can not see mail tips when i connect from outside the network
looks like an auto discover problem - i found the below from a Microsoft article
Is the problem limited to Outlook clients?
If MailTips in Outlook Web App work as expected, but Outlook 2010 is not showing MailTips, the problem might be related to Autodiscover.
Outlook uses Autodiscover to find the URL for Exchange Web Services; EWS is used to retrieve MailTips. If Autodiscover isn't working, or if the EWS URL provided by Autodiscover is incorrect, then Outlook will not be able to contact the MailTips web service.
and when i ran
Test-OutlookWebServices -identity:user@domain.com | ft * -AutoSize -Wrap
i got this error
1104 Error The certificate for the URL https://server.domain/autodiscover/autodiscover.xml is incorrect. ForSSL to work, the certificate needs to
have a subject of server.domain, but the subject that was found is mail.domain Consider correcting service discovery, or installing
a correct SSL certificate.also - i have a 3rd party cert working fine
my question is i still have the self signed cert on the cas servers and also it is on the iis - do i need to remove that
will it solve the issue
this is the command i ran to configure the autodiscover
Set-WebServicesVirtualDirectory -identity "aljs022\EWS (Default Web Site)" -externalurl https://mail.sasref.com.sa/EWS/Exchange.asmx -BasicAuthentication:$True
i have 2 cas/hub servers aljs022 and aljs023 so i ran the same command from the same server twice once with aljs022 and the other with aljs023
i have also a cas array and the 3rd party cert is having the SAN for it
Sunday, July 8, 2012 5:38 AM
Answers
-
thank you Ed / Evan
actually i am checking with my network guys and the ISP 1st to make sure everything is ok - it will take a wail
- Marked as answer by MAHER0 Wednesday, August 8, 2012 10:47 PM
Sunday, July 15, 2012 12:52 PM
All replies
-
Leave the self-signed certificate enabled for SMTP only. Enable all services (including SMTP as well) to the third-party certificate. Is your third-party certificate a SAN certificate with the right hostnames in it?
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Sunday, July 8, 2012 6:06 AM -
opps i already removed the self signed cert - i believe the 3rd party is enough and i though it might be the reason for the error - it is not
because when i ran the command again the same cert error is there
hope removing the self-signed cert wont harm
regarding my cert SAN
DNS Name=mail.sasref.com.sa
DNS Name=aljs-cas.intra.sasref.com.sa
DNS Name=autodiscover.sasref.com.sa
DNS Name=legacy.sasref.com.sa
Sunday, July 8, 2012 7:18 AM -
Running New-ExchangeCertificate with no parameters should re-create the self-signed certificate. You will need this certificate if you have more than hub transport server.
Make sure you have all the virtual directories properly configured with the right URLs containing hostnames that are in the certificate.
See Set-ClientAccessServer -AutoDiscoverServiceExternalUri.
Check Set-OutlookAnywhere -ExternalHostName.
Also see the -ExternalUrl and -InternalUrl properties of Set-OwaVirtualDirecotry, Set-WebServicesVirtualDirectory, Set-AutodiscoverVirtualDirectory, Set-ActiveSyncVirtualDirectory, Set-EcpVirtualDirectory, and Set-OabVirtualDirectory.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Sunday, July 8, 2012 5:11 PM -
i can not create a new cert with no parameters it will not allow
for example i have to define the exchange configuration and then the certificate configuration
see i mentioned an example above in my post on how i configured the auto discovery
can you please explain more on how to check all these commands u sent - i need to know how can i check if these are configured correctly
Monday, July 9, 2012 8:40 AM -
-
you mean this cmdlet
Test-OutlookWebServices
Monday, July 9, 2012 10:21 AM -
-
sometimes it fails but at the button i shows success
also i want to note that users can use the OAW and web app and active sync normally
only the mail tips shows error "MailTips could not be retrieved".
also running the remote connectivity alyzer i get this
Attempting to resolve the host name blabla.com in DNS
The host name couldn't be resolved. - so do i need to create this in isp dns
also
Attempting to resolve the host name autodiscoverblabla.com in DNS The host name resolved successfully.
- Edited by MAHER0 Tuesday, July 10, 2012 4:58 AM
Monday, July 9, 2012 11:12 AM -
-
Uncheck the two Guessmart checkboxes when running that test.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Tuesday, July 10, 2012 9:46 PM -
To the contrary, the pictures do not show anything from Autodiscover.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Tuesday, July 10, 2012 9:46 PM -
thank you Ed
i think i should run this test from outside the network as well - over the internet
because as mentioned earlier i only face this problem when i am connecting from outside
within my network it is workig just fine - so do you agree that i should run the test from outside
also when i run the remote connectivity analyzer i get an error that is is not able to resolve my domain name 123.com wail it can resolve my mail mx record on the internet - mail.123.com
i also want to mention that i have some issues from the ISP side - could this also be a reason for this problem
for example when i shifted my mail link to the new exchange HUB/CAS IP and did the firewall changes my OWA was not opening from different places over the internet, hence different countries and locations (even we waited for 24 hours to populate the changes) - we called them and then it was fixed
Wednesday, July 11, 2012 5:32 AM -
You know, that's the kind of information that would be useful for us to know at the beginning of the thread.
You should use http://exrca.com to test from the outside.
Yes, your ISP could be contributing to the problem, as could your firewall, any reverse web proxy you might be using, your DNS entries or anything like that.
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Wednesday, July 11, 2012 6:16 AM -
-
thank you Ed / Evan
actually i am checking with my network guys and the ISP 1st to make sure everything is ok - it will take a wail
- Marked as answer by MAHER0 Wednesday, August 8, 2012 10:47 PM
Sunday, July 15, 2012 12:52 PM