reverse proxy for outlook web access & 503

Hi all,

I'm running 2.0.46 on Red Hat EL3. I've been seemingly successfully Reverse
Proxying Exchange 2003 Outlook Web Access with the following parameters:

ProxyPass /exchange https://www.example.com/exchange
ProxyPassReverse /exchange https://www.example.com/exchange
ProxyPass /exchweb https://www.example.com/exchweb
ProxyPassReverse /exchweb https://www.example.com/exchweb
ProxyPass /public https://www.example.com/public
ProxyPassReverse /public https://www.example.com/public
ProxyPass /iisadmpwd https://www.example.com/iisadmpwd
ProxyPassReverse /iisadmpwd https://www.example.com/iisadmpwd

The whole setup works beautifully 99% of the time. However, it seems certain
messages in Public Folders (which are basically just files dropped in) are
getting forbidden errors only when using apache:

/var/log/httpd/ssl_access_log.3:68.236.178.68 - - [14/Jun/2004:10:31:47 -0400]
"GET /public/Group%20Fitness/GFI%20New%20Hire%20Forms/InstructorAuditionForm.pdf
HTTP/1.1" 403 141

/var/log/httpd/ssl_access_log:192.168.2.50 - - [17/Jun/2004:15:33:26 -0400] "GET
/public/Group%20Fitness/Candidate%20List%20NYC%20area/Candidate%20Audition%20List%20(Nov%2021%202003).do c
HTTP/1.1" 403 141

If I access the same items directly using the IIS server things work as
expected. All NTLM authentication is disabled.

What should I look at?

thanks
Karnov

Exchange was the problem:

http://support.microsoft.com/default...b;en-us;834743

I needed to specify my apache server under AcceptedAttachmentFrontEnds in the
registry.

Chris

In article <97505817.00017232.050@drn.newsguy.com>, Karnov says...
>
>Hi all,
>
>I'm running 2.0.46 on Red Hat EL3. I've been seemingly successfully Reverse
>Proxying Exchange 2003 Outlook Web Access with the following parameters:
>
>ProxyPass /exchange https://www.example.com/exchange
>ProxyPassReverse /exchange https://www.example.com/exchange
>ProxyPass /exchweb https://www.example.com/exchweb
>ProxyPassReverse /exchweb https://www.example.com/exchweb
>ProxyPass /public https://www.example.com/public
>ProxyPassReverse /public https://www.example.com/public
>ProxyPass /iisadmpwd https://www.example.com/iisadmpwd
>ProxyPassReverse /iisadmpwd https://www.example.com/iisadmpwd
>
>The whole setup works beautifully 99% of the time. However, it seems certain
>messages in Public Folders (which are basically just files dropped in) are
>getting forbidden errors only when using apache:
>
>/var/log/httpd/ssl_access_log.3:68.236.178.68 - - [14/Jun/2004:10:31:47 -0400]
>"GET /public/Group%20Fitness/GFI%20New%20Hire%20Forms/InstructorAuditionForm.pdf
>HTTP/1.1" 403 141
>
>/var/log/httpd/ssl_access_log:192.168.2.50 - - [17/Jun/2004:15:33:26 -0400] "GET
>/public/Group%20Fitness/Candidate%20List%20NYC%20area/Candidate%20Audition%20List%20(Nov%2021%202003).do c
>HTTP/1.1" 403 141
>
>If I access the same items directly using the IIS server things work as
>expected. All NTLM authentication is disabled.
>
>What should I look at?
>
>thanks
>Karnov

Dear karnov,

I'm struggling to setup to publish my Exchange 2000 OWA in Apache2
with Reveres Proxy. Unfortunately still I couldn’t achieve it.
If don't you mind would you like to help with your configurations, how
to configure Apache server & relevant objects. The following is my
current setup
I have Apache-2.0.40-21
Openssl-0.9.7a-2
Mod_ssl-2.0.40-21 rpm installed.
Exchange server on 192.168.100.1 mail.exchange.com ;; exchange 2000
sever
Apache2 server on 192.168.100.2 apache2.exchange.com ;; RedHat Linux
v9

In Apache2
/etc/hosts file
192.168.100.2 apache2.exchange.com
192.168.100.1 webmail.exchange.com webmail

My httpd.conf is.

<VirtualHost 192.168.100.2:80>
ServerName webmail.exchange.com
DocumentRoot /var/www/html/html.webmail
RedirectMatch ^/(index.html?)$ https://mail.exchange.com/exchange/
RedirectMatch ^/exchange$ https://mail.exchange.com/exchange/
</VirtualHost>

<VirtualHost 192.168.100.2:443>
ServerName webmail.exchange.com
DocumentRoot /var/www/html/html.webmail
RedirectMatch ^/(index.html?)$ https://mail.exchange.com/exchange/
RedirectMatch ^/exchange$ https://mail.exchange.com/exchange/
ProxyPass /public/ https://mail.exchange.com/public/
ProxyPassReverse /public/ https://mail.exchange.com/public/
ProxyPass /exchweb/ https://mail.exchange.com/exchweb/
ProxyPassReverse /exchweb/ https://mail.exchange.com/exchweb/
ProxyPass /exchange/ https://mail.exchange.com/exchange/
ProxyPassReverse /exchange/ https://mail.exchange.com/exchange/
</VirtualHost>

Your support is much appreciated

thanks in advance
- Hirantha
dylan912@yahoo.com



> Hi all,
>
> I'm running 2.0.46 on Red Hat EL3. I've been seemingly successfully Reverse
> Proxying Exchange 2003 Outlook Web Access with the following parameters:
>
> ProxyPass /exchange https://www.example.com/exchange
> ProxyPassReverse /exchange https://www.example.com/exchange
> ProxyPass /exchweb https://www.example.com/exchweb
> ProxyPassReverse /exchweb https://www.example.com/exchweb
> ProxyPass /public https://www.example.com/public
> ProxyPassReverse /public https://www.example.com/public
> ProxyPass /iisadmpwd https://www.example.com/iisadmpwd
> ProxyPassReverse /iisadmpwd https://www.example.com/iisadmpwd
>
> The whole setup works beautifully 99% of the time. However, it seems certain
> messages in Public Folders (which are basically just files dropped in) are
> getting forbidden errors only when using apache:
>
> /var/log/httpd/ssl_access_log.3:68.236.178.68 - - [14/Jun/2004:10:31:47 -0400]
> "GET /public/Group%20Fitness/GFI%20New%20Hire%20Forms/InstructorAuditionForm.pdf
> HTTP/1.1" 403 141
>
> /var/log/httpd/ssl_access_log:192.168.2.50 - - [17/Jun/2004:15:33:26 -0400] "GET
> /public/Group%20Fitness/Candidate%20List%20NYC%20area/Candidate%20Audition%20List%20(Nov%2021%202003).do c
> HTTP/1.1" 403 141
>
> If I access the same items directly using the IIS server things work as
> expected. All NTLM authentication is disabled.
>
> What should I look at?
>
> thanks
> Karnov

Hirantha,

You're 90% there. Remove your /etc/hosts entry:

192.168.100.1 webmail.exchange.com webmail

And add this to your httpd.conf:

ProxyPreserveHost On

This works with Exchange 2003; I'm not sure if it will work with Exchange 2000.

Karnov

ps - you might need to move the :443 Virtual host to ssl.conf

In article <e78bb4db.0406290221.4bbabac3@posting.google.com >, Hirantha says...
>
>Dear karnov,
>
>I'm struggling to setup to publish my Exchange 2000 OWA in Apache2
>with Reveres Proxy. Unfortunately still I couldn’t achieve it.
>If don't you mind would you like to help with your configurations, how
>to configure Apache server & relevant objects. The following is my
>current setup
>I have Apache-2.0.40-21
> Openssl-0.9.7a-2
> Mod_ssl-2.0.40-21 rpm installed.
>Exchange server on 192.168.100.1 mail.exchange.com ;; exchange 2000
>sever
>Apache2 server on 192.168.100.2 apache2.exchange.com ;; RedHat Linux
>v9
>
>In Apache2
>/etc/hosts file
>192.168.100.2 apache2.exchange.com
>192.168.100.1 webmail.exchange.com webmail
>
>My httpd.conf is.
>
><VirtualHost 192.168.100.2:80>
>ServerName webmail.exchange.com
>DocumentRoot /var/www/html/html.webmail
>RedirectMatch ^/(index.html?)$ https://mail.exchange.com/exchange/
>RedirectMatch ^/exchange$ https://mail.exchange.com/exchange/
></VirtualHost>
>
><VirtualHost 192.168.100.2:443>
>ServerName webmail.exchange.com
>DocumentRoot /var/www/html/html.webmail
>RedirectMatch ^/(index.html?)$ https://mail.exchange.com/exchange/
>RedirectMatch ^/exchange$ https://mail.exchange.com/exchange/
>ProxyPass /public/ https://mail.exchange.com/public/
>ProxyPassReverse /public/ https://mail.exchange.com/public/
>ProxyPass /exchweb/ https://mail.exchange.com/exchweb/
>ProxyPassReverse /exchweb/ https://mail.exchange.com/exchweb/
>ProxyPass /exchange/ https://mail.exchange.com/exchange/
>ProxyPassReverse /exchange/ https://mail.exchange.com/exchange/
></VirtualHost>
>
>Your support is much appreciated
>
>thanks in advance
>- Hirantha
> dylan912@yahoo.com

Dear Karvon

Thank for your post. I tried what you suggested, but no luck it
redirect to me to https://mail.exchange.com/exchange & prompt me the
Authentication box from Exchange server-mail.exchange.com. And there
are some error messages as follows in error_log file

[Wed Jun 30 16:44:15 2004] [warn] child process 14644 still did not
exit, sending a SIGTERM
[Wed Jun 30 16:44:15 2004] [warn] child process 14645 still did not
exit, sending a SIGTERM
[Wed Jun 30 16:44:15 2004] [warn] child process 14646 still did not
exit, sending a SIGTERM
[Wed Jun 30 16:44:15 2004] [warn] child process 14647 still did not
exit, sending a SIGTERM
[Wed Jun 30 16:44:16 2004] [notice] caught SIGTERM, shutting down
[Wed Jun 30 16:44:18 2004] [notice] Digest: generating secret for
digest authentication ...
[Wed Jun 30 16:44:18 2004] [notice] Digest: done
[Wed Jun 30 16:44:19 2004] [notice] Apache/2.0.40 (Red Hat Linux)
configured -- resuming normal operations

I place ProxyPreserveHost On & SSLProxyEngine On in httpd.conf.

I moved my second virtual host-<VirtualHost 192.168.100.2:443> to
ssl.conf hut no luck.

please help with some suggestions to resolve this ..

Thanks in advance
- Hirantha
dylan912@yahoo.com


Karnov <karnov@newsguy.com> wrote in message news:<98511576.0000e0dc.030@drn.newsguy.com>...
> Hirantha,
>
> You're 90% there. Remove your /etc/hosts entry:
>
> 192.168.100.1 webmail.exchange.com webmail
>
> And add this to your httpd.conf:
>
> ProxyPreserveHost On
>
> This works with Exchange 2003; I'm not sure if it will work with Exchange 2000.
>
> Karnov
>
> ps - you might need to move the :443 Virtual host to ssl.conf
>
> In article <e78bb4db.0406290221.4bbabac3@posting.google.com >, Hirantha says...
> >
> >Dear karnov,
> >
> >I'm struggling to setup to publish my Exchange 2000 OWA in Apache2
> >with Reveres Proxy. Unfortunately still I couldn’t achieve it.
> >If don't you mind would you like to help with your configurations, how
> >to configure Apache server & relevant objects. The following is my
> >current setup
> >I have Apache-2.0.40-21
> > Openssl-0.9.7a-2
> > Mod_ssl-2.0.40-21 rpm installed.
> >Exchange server on 192.168.100.1 mail.exchange.com ;; exchange 2000
> >sever
> >Apache2 server on 192.168.100.2 apache2.exchange.com ;; RedHat Linux
> >v9
> >
> >In Apache2
> >/etc/hosts file
> >192.168.100.2 apache2.exchange.com
> >192.168.100.1 webmail.exchange.com webmail
> >
> >My httpd.conf is.
> >
> ><VirtualHost 192.168.100.2:80>
> >ServerName webmail.exchange.com
> >DocumentRoot /var/www/html/html.webmail
> >RedirectMatch ^/(index.html?)$ https://mail.exchange.com/exchange/
> >RedirectMatch ^/exchange$ https://mail.exchange.com/exchange/
> ></VirtualHost>
> >
> ><VirtualHost 192.168.100.2:443>
> >ServerName webmail.exchange.com
> >DocumentRoot /var/www/html/html.webmail
> >RedirectMatch ^/(index.html?)$ https://mail.exchange.com/exchange/
> >RedirectMatch ^/exchange$ https://mail.exchange.com/exchange/
> >ProxyPass /public/ https://mail.exchange.com/public/
> >ProxyPassReverse /public/ https://mail.exchange.com/public/
> >ProxyPass /exchweb/ https://mail.exchange.com/exchweb/
> >ProxyPassReverse /exchweb/ https://mail.exchange.com/exchweb/
> >ProxyPass /exchange/ https://mail.exchange.com/exchange/
> >ProxyPassReverse /exchange/ https://mail.exchange.com/exchange/
> ></VirtualHost>
> >
> >Your support is much appreciated
> >
> >thanks in advance
> >- Hirantha
> > dylan912@yahoo.com