none
Подключение через OWA из дочерних доменов RRS feed

  • Вопрос

  •  

    Не хотите отвечать в старой теме, задам вопрос заново:

     

    Проблема с доступом пользователей дочернего домена в Exchange 2007 через OWA.

    Через Outlook все проходит нормально пользователи подключаются, отправляют и получают почту. Так же прекрасно работают пользователи основного домена, причем через OWA тоже. Не могут подключится к OWA только пользователи дочерних доменов, причем все (включая Администраторов, которые входят в группу Администраторов предприятия), появляется следующая ошибка:

     

    Ошибка OWA

    Request
    Url: https://pp06:443/owa/lang.owa
    User host address: 192.168.0.3

    Exception
    Exception type: Microsoft.Exchange.Data.Directory.ADTransientException
    Exception message: Could not find any available Domain Controller in domain DC=n50,DC=PP,DC=local.

    Call stack

    Microsoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetServerFromDomainDN(String distinguishedName, NetworkCredential credential)
    Microsoft.Exchange.Data.Directory.ConnectionPoolManager.GetConnection(ConnectionType connectionType, ADObjectId domain, String serverName, Int32 port, NetworkCredential credential)
    Microsoft.Exchange.Data.Directory.ConnectionPoolManager.GetConnection(ConnectionType connectionType, NetworkCredential networkCredential, ADObjectId domain)
    Microsoft.Exchange.Data.Directory.ADSession.GetConnection(String preferredServer, Boolean isWriteOperation, Boolean isNotifyOperation, ADObjectId& rootId)
    Microsoft.Exchange.Data.Directory.ADSession.GetReadConnection(String preferredServer, ADObjectId& rootId)
    Microsoft.Exchange.Data.Directory.ADSession.Find(ADObjectId rootId, String optionalBaseDN, ADObjectId readId, QueryScope scope, QueryFilter filter, SortBy sortBy, Int32 maxResults, IEnumerable`1 properties, CreateObjectDelegate objectCreator, CreateObjectsDelegate arrayCreator)
    Microsoft.Exchange.Data.Directory.ADSession.Read(ADObjectId entryId, IEnumerable`1 properties, CreateObjectDelegate objectCtor)
    Microsoft.Exchange.Data.Directory.Recipient.ADRecipientSession.Read(ADObjectId entryId)
    Microsoft.Exchange.Data.Storage.ExchangePrincipal.Save()
    Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostLocally(OwaContext owaContext, OwaIdentity logonIdentity, CultureInfo culture, String timeZoneKeyName, Boolean isOptimized)
    Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostRequest(OwaContext owaContext)
    Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.PrepareRequestWithoutSession(OwaContext owaContext, UserContextCookie userContextCookie)
    Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.InternalDispatchRequest(OwaContext owaContext)
    Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchRequest(OwaContext owaContext)
    System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
    System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

     

     

     

    Все действия из соседней темы выполнял.
    • Перемещено Hengzhe Li 18 марта 2012 г. 6:50 forum merge (От:Exchange Server 2007)
    15 января 2008 г. 6:31

Все ответы

  • А адрес полный веб-сервера набирали, т.е. https://exchsrv.local.mydomain.ru/owa ?

     

    Запускали PS> test-systemhealth на сервере доступа (owa) ?

     

    Что netdiag говорит на сервере доступа (owa) ? и dcdiag на контроллере домена с ролью GC?

    15 января 2008 г. 6:44
  • https://server_name/owa

     

    Соединение идет по VPN-тунелю.

     

    test-systemhealth - выдает 2 предупреждения:

    1. Что система не зарегистрирована и осталось 80 дней Smile

    2. Что используется старый драйвер хранилища на рейд-масиве

     

     

    Итак, netdiag:

     


    NETDIAG (OWA сервер)

    .................................

        Computer Name: PP06
        DNS Host Name: PP06.PP.local
        System info : Microsoft Windows Server 2003 R2 (Build 3790)
        Processor : EM64T Family 6 Model 15 Stepping 7, GenuineIntel
        List of installed hotfixes :
            KB926139
            KB933360
            Q147222

    Netcard queries test . . . . . . . : Passed
        [WARNING] The net card 'RAS асинхронный адаптер' may not be working because it has not received any packets.
        GetStats failed for 'Прямой параллельный порт'. [ERROR_NOT_SUPPORTED]
        [WARNING] The net card 'Минипорт WAN (PPTP)' may not be working because it has not received any packets.
        [WARNING] The net card 'Минипорт WAN (PPPoE)' may not be working because it has not received any packets.
        [WARNING] The net card 'Минипорт WAN (IP)' may not be working because it has not received any packets.
        GetStats failed for 'Минипорт WAN (L2TP)'. [ERROR_NOT_SUPPORTED]

    Per interface results:

        Adapter : Подключение по локальной сети

            Netcard queries test . . . : Passed

            Host Name. . . . . . . . . : PP06
            IP Address . . . . . . . . : 192.168.0.234
            Subnet Mask. . . . . . . . : 255.255.255.0
            Default Gateway. . . . . . : 192.168.0.18
            Dns Servers. . . . . . . . : 192.168.0.18
                                         192.168.0.80

            AutoConfiguration results. . . . . . : Passed

            Default gateway test . . . : Passed

            NetBT name test. . . . . . : Passed
            [WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.

            WINS service test. . . . . : Skipped
                There are no WINS servers configured for this interface.

    Global results:

    Domain membership test . . . . . . : Passed

    NetBT transports test. . . . . . . : Passed
        List of NetBt transports currently configured:
            NetBT_Tcpip_{E6C1D5F8-CB10-4F0A-B7FA-B13D81413F8B}
        1 NetBt transport currently configured.

    Autonet address test . . . . . . . : Passed

    IP loopback ping test. . . . . . . : Passed

    Default gateway test . . . . . . . : Passed

    NetBT name test. . . . . . . . . . : Passed
        [WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.

    Winsock test . . . . . . . . . . . : Passed

    DNS test . . . . . . . . . . . . . : Passed

    Redir and Browser test . . . . . . : Passed
        List of NetBt transports currently bound to the Redir
            NetBT_Tcpip_{E6C1D5F8-CB10-4F0A-B7FA-B13D81413F8B}
        The redir is bound to 1 NetBt transport.

        List of NetBt transports currently bound to the browser
            NetBT_Tcpip_{E6C1D5F8-CB10-4F0A-B7FA-B13D81413F8B}
        The browser is bound to 1 NetBt transport.

    DC discovery test. . . . . . . . . : Passed

    DC list test . . . . . . . . . . . : Passed

    Trust relationship test. . . . . . : Passed
        Secure channel for domain 'PP' is to '\\pp-pdc.PP.local'.

    Kerberos test. . . . . . . . . . . : Passed

    LDAP test. . . . . . . . . . . . . : Passed

    Bindings test. . . . . . . . . . . : Passed

    WAN configuration test . . . . . . : Skipped
        No active remote access connections.

    Modem diagnostics test . . . . . . : Passed

    IP Security test . . . . . . . . . : Skipped

        Note: run "netsh ipsec dynamic show /?" for more detailed information

    The command completed successfully

     

     

    dcdiag, на основном ГК

     

    DCDIAG (НА ГК основного домена)

    Domain Controller Diagnosis

    Performing initial setup:
       Done gathering initial info.

    Doing initial required tests
      
       Testing server: Default-First-Site-Name\PP-PDC
          Starting test: Connectivity
             ......................... PP-PDC passed test Connectivity

    Doing primary tests
       Testing server: Default-First-Site-Name\PP-PDC
          Starting test: Replications
             REPLICATION-RECEIVED LATENCY WARNING
             PP-PDC:  Current time is 2008-01-15 14:02:12.
                DC=ForestDnsZones,DC=PP,DC=local
                   Last replication recieved from S8001 at 2008-01-14 11:59:37.
                CN=Schema,CN=Configuration,DC=PP,DC=local
                   Last replication recieved from S8001 at 2008-01-14 11:59:25.
                CN=Configuration,DC=PP,DC=local
                   Last replication recieved from S8001 at 2008-01-14 12:02:30.
                DC=n80,DC=PP,DC=local
                   Last replication recieved from S8001 at 2008-01-14 11:58:41.
             ......................... PP-PDC passed test Replications
          Starting test: NCSecDesc
             ......................... PP-PDC passed test NCSecDesc
          Starting test: NetLogons
             ......................... PP-PDC passed test NetLogons
          Starting test: Advertising
             ......................... PP-PDC passed test Advertising
          Starting test: KnowsOfRoleHolders
             ......................... PP-PDC passed test KnowsOfRoleHolders
          Starting test: RidManager
             ......................... PP-PDC passed test RidManager
          Starting test: MachineAccount
             ......................... PP-PDC passed test MachineAccount
          Starting test: Services
             ......................... PP-PDC passed test Services
          Starting test: ObjectsReplicated
             ......................... PP-PDC passed test ObjectsReplicated
          Starting test: frssysvol
             ......................... PP-PDC passed test frssysvol
          Starting test: frsevent
             ......................... PP-PDC passed test frsevent
          Starting test: kccevent
             ......................... PP-PDC passed test kccevent
          Starting test: systemlog
             ......................... PP-PDC passed test systemlog
          Starting test: VerifyReferences
             ......................... PP-PDC passed test VerifyReferences
       Running partition tests on : ForestDnsZones
          Starting test: CrossRefValidation
             ......................... ForestDnsZones passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... ForestDnsZones passed test CheckSDRefDom
       Running partition tests on : DomainDnsZones
          Starting test: CrossRefValidation
             ......................... DomainDnsZones passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... DomainDnsZones passed test CheckSDRefDom
       Running partition tests on : Schema
          Starting test: CrossRefValidation
             ......................... Schema passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... Schema passed test CheckSDRefDom
       Running partition tests on : Configuration
          Starting test: CrossRefValidation
             ......................... Configuration passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... Configuration passed test CheckSDRefDom
       Running partition tests on : PP
          Starting test: CrossRefValidation
             ......................... PP passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... PP passed test CheckSDRefDom
       Running enterprise tests on : PP.local
          Starting test: Intersite
             ......................... PP.local passed test Intersite
          Starting test: FsmoCheck
             ......................... PP.local passed test FsmoCheck

     

     

    dcdiag, ГК дочернего домена

    DCDIAG (НА ГК дочернего домена)

    Domain Controller Diagnosis

    Performing initial setup:
       Done gathering initial info.

    Doing initial required tests
       Testing server: Default-First-Site-Name\S5001
          Starting test: Connectivity
             ......................... S5001 passed test Connectivity

    Doing primary tests
       Testing server: Default-First-Site-Name\S5001
          Starting test: Replications
             REPLICATION-RECEIVED LATENCY WARNING
             S5001:  Current time is 2008-01-15 13:00:11.
                DC=ForestDnsZones,DC=PP,DC=local
                   Last replication recieved from S8001 at 2008-01-14 10:59:37.
                CN=Schema,CN=Configuration,DC=PP,DC=local
                   Last replication recieved from S8001 at 2008-01-14 10:59:25.
                CN=Configuration,DC=PP,DC=local
                   Last replication recieved from S8001 at 2008-01-14 11:02:30.
                DC=n80,DC=PP,DC=local
                   Last replication recieved from S8001 at 2008-01-14 10:58:41.
             ......................... S5001 passed test Replications
          Starting test: NCSecDesc
             ......................... S5001 passed test NCSecDesc
          Starting test: NetLogons
             ......................... S5001 passed test NetLogons
          Starting test: Advertising
             ......................... S5001 passed test Advertising
          Starting test: KnowsOfRoleHolders
             ......................... S5001 passed test KnowsOfRoleHolders
          Starting test: RidManager
             ......................... S5001 passed test RidManager
          Starting test: MachineAccount
             ......................... S5001 passed test MachineAccount
          Starting test: Services
             ......................... S5001 passed test Services
          Starting test: ObjectsReplicated
             ......................... S5001 passed test ObjectsReplicated
          Starting test: frssysvol
             ......................... S5001 passed test frssysvol
          Starting test: frsevent
             ......................... S5001 passed test frsevent
          Starting test: kccevent
             ......................... S5001 passed test kccevent
          Starting test: systemlog
             ......................... S5001 passed test systemlog
          Starting test: VerifyReferences
             ......................... S5001 passed test VerifyReferences
       Running partition tests on : DomainDnsZones
          Starting test: CrossRefValidation
             ......................... DomainDnsZones passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... DomainDnsZones passed test CheckSDRefDom
       Running partition tests on : n50
          Starting test: CrossRefValidation
             ......................... n50 passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... n50 passed test CheckSDRefDom
       Running partition tests on : ForestDnsZones
          Starting test: CrossRefValidation
             ......................... ForestDnsZones passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... ForestDnsZones passed test CheckSDRefDom
       Running partition tests on : Schema
          Starting test: CrossRefValidation
             ......................... Schema passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... Schema passed test CheckSDRefDom
       Running partition tests on : Configuration
          Starting test: CrossRefValidation
             ......................... Configuration passed test CrossRefValidation
          Starting test: CheckSDRefDom
             ......................... Configuration passed test CheckSDRefDom
       Running enterprise tests on : PP.local
          Starting test: Intersite
             ......................... PP.local passed test Intersite
          Starting test: FsmoCheck
             ......................... PP.local passed test FsmoCheck

     

     


    15 января 2008 г. 8:13
  •  

    странно...... а почему у вас шлюз совпадает с DNS Сервером?
    15 января 2008 г. 13:05
  • Service Pack 1 установлен на Exchange 2007?

     

    Службы Exchange какие запущенны?

     

    При обращении через полный путь OWA авторизует?

     

    Как настроены фаервол(ы) на серверах?

    15 января 2008 г. 13:48
  •  spavlov написано:

    странно...... а почему у вас шлюз совпадает с DNS Сервером?

     

    а что незя да? =)

    здесь все номано

    16 января 2008 г. 3:12
  •  Sergey Bezpalov написано:

    Service Pack 1 установлен на Exchange 2007?

     

    Службы Exchange какие запущенны?

     

    При обращении через полный путь OWA авторизует?

     

    Как настроены фаервол(ы) на серверах?

     

    1. Да, SP1 установлен.

     

    2.

    Службы MSExchange
    Status   Name               DisplayName                          
    ------   ----               -----------                          
    Running  MSExchangeADTop... Служба топологии Microsoft Exchange...
    Running  MSExchangeAntis... Обновление средства защиты от нежел...
    Running  MSExchangeEdgeSync Microsoft Exchange EdgeSync          
    Running  MSExchangeFDS      Рассылка файлов Microsoft Exchange   
    Running  MSExchangeImap4    Microsoft Exchange IMAP4             
    Running  MSExchangeIS       Банк данных Microsoft Exchange       
    Running  MSExchangeMailb... Помощники по обслуживанию почтовых ...
    Running  MSExchangeMailS... Отправка почты Microsoft Exchange    
    Stopped  MSExchangeMonit... Наблюдение Microsoft Exchange        
    Running  MSExchangePop3     Microsoft Exchange POP3              
    Running  MSExchangeRepl     Служба репликации Microsoft Exchange 
    Running  MSExchangeSA       Системный помощник Microsoft Exchange
    Running  MSExchangeSearch   Индексатор поиска Microsoft Exchange 
    Running  MSExchangeServi... Microsoft Exchange Service Host      
    Running  MSExchangeTrans... Транспорт Microsoft Exchange         
    Running  MSExchangeTrans... Поиск журналов транспорта Microsoft...

     

     

     

    3. Авторизация проходит, потом спрашивает часовой пояс, начинает открывать OWA и появляется такая ошибка.

     

    4. Внутри VPN-тунелей фаерволы отключены

     

     

    16 января 2008 г. 4:47
  • Один человек:

     Ok, I've solved this problem for my domains.

    I did it by running the exchange setup with the /PrepareDomain arg on the child domain PDCs...

    OWA works fine now...

     

    Второй человек:

    I have run the domain prep from a workstation. And now OWA works great.

     

     

    Попробуйте :-)

    16 января 2008 г. 6:18
    Модератор
  •  Pavel Nagaev написано:

    I did it by running the exchange setup with the /PrepareDomain arg on the child domain PDCs...
    Попробуйте :-)

     

    А это действие разве не выполняется когда даешь команду /PrepareAllDomain ???

    17 января 2008 г. 4:01