Спрашивающий
Подключение через OWA из дочерних доменов

Вопрос
-
Не хотите отвечать в старой теме, задам вопрос заново:
Проблема с доступом пользователей дочернего домена в Exchange 2007 через OWA.
Через Outlook все проходит нормально пользователи подключаются, отправляют и получают почту. Так же прекрасно работают пользователи основного домена, причем через OWA тоже. Не могут подключится к OWA только пользователи дочерних доменов, причем все (включая Администраторов, которые входят в группу Администраторов предприятия), появляется следующая ошибка:
Ошибка OWARequest
Url: https://pp06:443/owa/lang.owa
User host address: 192.168.0.3
Exception
Exception type: Microsoft.Exchange.Data.Directory.ADTransientException
Exception message: Could not find any available Domain Controller in domain DC=n50,DC=PP,DC=local.
Call stackMicrosoft.Exchange.Data.Directory.DSAccessTopologyProvider.GetServerFromDomainDN(String distinguishedName, NetworkCredential credential)Microsoft.Exchange.Data.Directory.ConnectionPoolManager.GetConnection(ConnectionType connectionType, ADObjectId domain, String serverName, Int32 port, NetworkCredential credential)Microsoft.Exchange.Data.Directory.ConnectionPoolManager.GetConnection(ConnectionType connectionType, NetworkCredential networkCredential, ADObjectId domain)Microsoft.Exchange.Data.Directory.ADSession.GetConnection(String preferredServer, Boolean isWriteOperation, Boolean isNotifyOperation, ADObjectId& rootId)Microsoft.Exchange.Data.Directory.ADSession.GetReadConnection(String preferredServer, ADObjectId& rootId)Microsoft.Exchange.Data.Directory.ADSession.Find(ADObjectId rootId, String optionalBaseDN, ADObjectId readId, QueryScope scope, QueryFilter filter, SortBy sortBy, Int32 maxResults, IEnumerable`1 properties, CreateObjectDelegate objectCreator, CreateObjectsDelegate arrayCreator)Microsoft.Exchange.Data.Directory.ADSession.Read(ADObjectId entryId, IEnumerable`1 properties, CreateObjectDelegate objectCtor)Microsoft.Exchange.Data.Directory.Recipient.ADRecipientSession.Read(ADObjectId entryId)Microsoft.Exchange.Data.Storage.ExchangePrincipal.Save()Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostLocally(OwaContext owaContext, OwaIdentity logonIdentity, CultureInfo culture, String timeZoneKeyName, Boolean isOptimized)Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchLanguagePostRequest(OwaContext owaContext)Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.PrepareRequestWithoutSession(OwaContext owaContext, UserContextCookie userContextCookie)Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.InternalDispatchRequest(OwaContext owaContext)Microsoft.Exchange.Clients.Owa.Core.RequestDispatcher.DispatchRequest(OwaContext owaContext)System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)Все действия из соседней темы выполнял.- Перемещено Hengzhe Li 18 марта 2012 г. 6:50 forum merge (От:Exchange Server 2007)
15 января 2008 г. 6:31
Все ответы
-
А адрес полный веб-сервера набирали, т.е. https://exchsrv.local.mydomain.ru/owa ?
Запускали PS> test-systemhealth на сервере доступа (owa) ?
Что netdiag говорит на сервере доступа (owa) ? и dcdiag на контроллере домена с ролью GC?
15 января 2008 г. 6:44 -
Соединение идет по VPN-тунелю.
test-systemhealth - выдает 2 предупреждения:
1. Что система не зарегистрирована и осталось 80 дней
2. Что используется старый драйвер хранилища на рейд-масиве
Итак, netdiag:
NETDIAG (OWA сервер).................................
Computer Name: PP06
DNS Host Name: PP06.PP.local
System info : Microsoft Windows Server 2003 R2 (Build 3790)
Processor : EM64T Family 6 Model 15 Stepping 7, GenuineIntel
List of installed hotfixes :
KB926139
KB933360
Q147222Netcard queries test . . . . . . . : Passed
[WARNING] The net card 'RAS асинхронный адаптер' may not be working because it has not received any packets.
GetStats failed for 'Прямой параллельный порт'. [ERROR_NOT_SUPPORTED]
[WARNING] The net card 'Минипорт WAN (PPTP)' may not be working because it has not received any packets.
[WARNING] The net card 'Минипорт WAN (PPPoE)' may not be working because it has not received any packets.
[WARNING] The net card 'Минипорт WAN (IP)' may not be working because it has not received any packets.
GetStats failed for 'Минипорт WAN (L2TP)'. [ERROR_NOT_SUPPORTED]Per interface results:
Adapter : Подключение по локальной сети
Netcard queries test . . . : Passed
Host Name. . . . . . . . . : PP06
IP Address . . . . . . . . : 192.168.0.234
Subnet Mask. . . . . . . . : 255.255.255.0
Default Gateway. . . . . . : 192.168.0.18
Dns Servers. . . . . . . . : 192.168.0.18
192.168.0.80AutoConfiguration results. . . . . . : Passed
Default gateway test . . . : Passed
NetBT name test. . . . . . : Passed
[WARNING] At least one of the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names is missing.WINS service test. . . . . : Skipped
There are no WINS servers configured for this interface.Global results:
Domain membership test . . . . . . : Passed
NetBT transports test. . . . . . . : Passed
List of NetBt transports currently configured:
NetBT_Tcpip_{E6C1D5F8-CB10-4F0A-B7FA-B13D81413F8B}
1 NetBt transport currently configured.Autonet address test . . . . . . . : Passed
IP loopback ping test. . . . . . . : Passed
Default gateway test . . . . . . . : Passed
NetBT name test. . . . . . . . . . : Passed
[WARNING] You don't have a single interface with the <00> 'WorkStation Service', <03> 'Messenger Service', <20> 'WINS' names defined.Winsock test . . . . . . . . . . . : Passed
DNS test . . . . . . . . . . . . . : Passed
Redir and Browser test . . . . . . : Passed
List of NetBt transports currently bound to the Redir
NetBT_Tcpip_{E6C1D5F8-CB10-4F0A-B7FA-B13D81413F8B}
The redir is bound to 1 NetBt transport.List of NetBt transports currently bound to the browser
NetBT_Tcpip_{E6C1D5F8-CB10-4F0A-B7FA-B13D81413F8B}
The browser is bound to 1 NetBt transport.DC discovery test. . . . . . . . . : Passed
DC list test . . . . . . . . . . . : Passed
Trust relationship test. . . . . . : Passed
Secure channel for domain 'PP' is to '\\pp-pdc.PP.local'.Kerberos test. . . . . . . . . . . : Passed
LDAP test. . . . . . . . . . . . . : Passed
Bindings test. . . . . . . . . . . : Passed
WAN configuration test . . . . . . : Skipped
No active remote access connections.Modem diagnostics test . . . . . . : Passed
IP Security test . . . . . . . . . : Skipped
Note: run "netsh ipsec dynamic show /?" for more detailed information
The command completed successfully
dcdiag, на основном ГК
DCDIAG (НА ГК основного домена)Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.Doing initial required tests
Testing server: Default-First-Site-Name\PP-PDC
Starting test: Connectivity
......................... PP-PDC passed test ConnectivityDoing primary tests
Testing server: Default-First-Site-Name\PP-PDC
Starting test: Replications
REPLICATION-RECEIVED LATENCY WARNING
PP-PDC: Current time is 2008-01-15 14:02:12.
DC=ForestDnsZones,DC=PP,DC=local
Last replication recieved from S8001 at 2008-01-14 11:59:37.
CN=Schema,CN=Configuration,DC=PP,DC=local
Last replication recieved from S8001 at 2008-01-14 11:59:25.
CN=Configuration,DC=PP,DC=local
Last replication recieved from S8001 at 2008-01-14 12:02:30.
DC=n80,DC=PP,DC=local
Last replication recieved from S8001 at 2008-01-14 11:58:41.
......................... PP-PDC passed test Replications
Starting test: NCSecDesc
......................... PP-PDC passed test NCSecDesc
Starting test: NetLogons
......................... PP-PDC passed test NetLogons
Starting test: Advertising
......................... PP-PDC passed test Advertising
Starting test: KnowsOfRoleHolders
......................... PP-PDC passed test KnowsOfRoleHolders
Starting test: RidManager
......................... PP-PDC passed test RidManager
Starting test: MachineAccount
......................... PP-PDC passed test MachineAccount
Starting test: Services
......................... PP-PDC passed test Services
Starting test: ObjectsReplicated
......................... PP-PDC passed test ObjectsReplicated
Starting test: frssysvol
......................... PP-PDC passed test frssysvol
Starting test: frsevent
......................... PP-PDC passed test frsevent
Starting test: kccevent
......................... PP-PDC passed test kccevent
Starting test: systemlog
......................... PP-PDC passed test systemlog
Starting test: VerifyReferences
......................... PP-PDC passed test VerifyReferences
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running partition tests on : PP
Starting test: CrossRefValidation
......................... PP passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... PP passed test CheckSDRefDom
Running enterprise tests on : PP.local
Starting test: Intersite
......................... PP.local passed test Intersite
Starting test: FsmoCheck
......................... PP.local passed test FsmoCheckdcdiag, ГК дочернего домена
DCDIAG (НА ГК дочернего домена)Domain Controller Diagnosis
Performing initial setup:
Done gathering initial info.Doing initial required tests
Testing server: Default-First-Site-Name\S5001
Starting test: Connectivity
......................... S5001 passed test ConnectivityDoing primary tests
Testing server: Default-First-Site-Name\S5001
Starting test: Replications
REPLICATION-RECEIVED LATENCY WARNING
S5001: Current time is 2008-01-15 13:00:11.
DC=ForestDnsZones,DC=PP,DC=local
Last replication recieved from S8001 at 2008-01-14 10:59:37.
CN=Schema,CN=Configuration,DC=PP,DC=local
Last replication recieved from S8001 at 2008-01-14 10:59:25.
CN=Configuration,DC=PP,DC=local
Last replication recieved from S8001 at 2008-01-14 11:02:30.
DC=n80,DC=PP,DC=local
Last replication recieved from S8001 at 2008-01-14 10:58:41.
......................... S5001 passed test Replications
Starting test: NCSecDesc
......................... S5001 passed test NCSecDesc
Starting test: NetLogons
......................... S5001 passed test NetLogons
Starting test: Advertising
......................... S5001 passed test Advertising
Starting test: KnowsOfRoleHolders
......................... S5001 passed test KnowsOfRoleHolders
Starting test: RidManager
......................... S5001 passed test RidManager
Starting test: MachineAccount
......................... S5001 passed test MachineAccount
Starting test: Services
......................... S5001 passed test Services
Starting test: ObjectsReplicated
......................... S5001 passed test ObjectsReplicated
Starting test: frssysvol
......................... S5001 passed test frssysvol
Starting test: frsevent
......................... S5001 passed test frsevent
Starting test: kccevent
......................... S5001 passed test kccevent
Starting test: systemlog
......................... S5001 passed test systemlog
Starting test: VerifyReferences
......................... S5001 passed test VerifyReferences
Running partition tests on : DomainDnsZones
Starting test: CrossRefValidation
......................... DomainDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... DomainDnsZones passed test CheckSDRefDom
Running partition tests on : n50
Starting test: CrossRefValidation
......................... n50 passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... n50 passed test CheckSDRefDom
Running partition tests on : ForestDnsZones
Starting test: CrossRefValidation
......................... ForestDnsZones passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... ForestDnsZones passed test CheckSDRefDom
Running partition tests on : Schema
Starting test: CrossRefValidation
......................... Schema passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Schema passed test CheckSDRefDom
Running partition tests on : Configuration
Starting test: CrossRefValidation
......................... Configuration passed test CrossRefValidation
Starting test: CheckSDRefDom
......................... Configuration passed test CheckSDRefDom
Running enterprise tests on : PP.local
Starting test: Intersite
......................... PP.local passed test Intersite
Starting test: FsmoCheck
......................... PP.local passed test FsmoCheck15 января 2008 г. 8:13 -
15 января 2008 г. 13:05
-
Service Pack 1 установлен на Exchange 2007?
Службы Exchange какие запущенны?
При обращении через полный путь OWA авторизует?
Как настроены фаервол(ы) на серверах?
15 января 2008 г. 13:48 -
spavlov написано: странно...... а почему у вас шлюз совпадает с DNS Сервером?
а что незя да? =)
здесь все номано
16 января 2008 г. 3:12 -
Sergey Bezpalov написано: Service Pack 1 установлен на Exchange 2007?
Службы Exchange какие запущенны?
При обращении через полный путь OWA авторизует?
Как настроены фаервол(ы) на серверах?
1. Да, SP1 установлен.
2.
Службы MSExchangeStatus Name DisplayName
------ ---- -----------
Running MSExchangeADTop... Служба топологии Microsoft Exchange...
Running MSExchangeAntis... Обновление средства защиты от нежел...
Running MSExchangeEdgeSync Microsoft Exchange EdgeSync
Running MSExchangeFDS Рассылка файлов Microsoft Exchange
Running MSExchangeImap4 Microsoft Exchange IMAP4
Running MSExchangeIS Банк данных Microsoft Exchange
Running MSExchangeMailb... Помощники по обслуживанию почтовых ...
Running MSExchangeMailS... Отправка почты Microsoft Exchange
Stopped MSExchangeMonit... Наблюдение Microsoft Exchange
Running MSExchangePop3 Microsoft Exchange POP3
Running MSExchangeRepl Служба репликации Microsoft Exchange
Running MSExchangeSA Системный помощник Microsoft Exchange
Running MSExchangeSearch Индексатор поиска Microsoft Exchange
Running MSExchangeServi... Microsoft Exchange Service Host
Running MSExchangeTrans... Транспорт Microsoft Exchange
Running MSExchangeTrans... Поиск журналов транспорта Microsoft...3. Авторизация проходит, потом спрашивает часовой пояс, начинает открывать OWA и появляется такая ошибка.
4. Внутри VPN-тунелей фаерволы отключены
16 января 2008 г. 4:47 -
Один человек:
Ok, I've solved this problem for my domains.
I did it by running the exchange setup with the /PrepareDomain arg on the child domain PDCs...
OWA works fine now...Второй человек:
I have run the domain prep from a workstation. And now OWA works great.
Попробуйте :-)
16 января 2008 г. 6:18Модератор -
Pavel Nagaev написано: I did it by running the exchange setup with the /PrepareDomain arg on the child domain PDCs...
Попробуйте :-)А это действие разве не выполняется когда даешь команду /PrepareAllDomain ???
17 января 2008 г. 4:01