Quantcast
Channel: Exchange Server 2013 - Setup, Deployment, Updates, and Migration forum
Viewing all articles
Browse latest Browse all 7129

Exchange 2013 Weird Certificate behaviour - works on the server but not remotely

$
0
0

I have a DC server (mcdc) and an Exchange CAS/Mailbox server (mcexchange2). I have certificate issued from godaddy.com. Servername is mcExchange2.mailcluster.com and FQDN for external access is exchange.mailcluster.com. There is nothing wrong with the UCC certificate, rekeyed it twice to make sure that it is not something weird. I have setup the mcexchange2.mailcluster.com as internal URL and exchange.mailcluster as external URL for all virtual directories.

http://mcexchange2.mailcluster.com/ecp works fine from there but I want to use the generic exchange... name.

http://exchange.mailcluster.com/ecp from inside the exchange server works fine, all users

http://exchange.mailcluster.com/ecp from remote network gives me Error 500 internal server error when I login as Administrator. I created second account Test which is a copy of administrator and it worked for a week, now this account does not work either. Some regular users report the same problem, but it is random. Suddenly it works, then it stops. The most weird part was that it started to work in Chrome and would not work in IE. However, since the error is 500 Internal Server error, this means that the server is not responding right, so I can't figure out how it can work in one browser and not the other.

After about 2 days of working overnight I managed to get to this log data when not working(httpProxy_date.log file):

2014-03-20T11:04:22.264Z,daf0028a-2c29-4074-a8eb-4a6fccd51fbe,15,0,847,30,,Owa,exchange.mailcluster.com,/owa/auth.owa,,FBA,True,MAILCLUSTER\Administrator,,Sid~S-1-5-21-215416516-1168753235-3955503809-500,Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0),75.176.86.169,MCEXCHANGE2,500,,DatabaseGuidNotFound,POST,,,,,WindowsIdentity,Database~72114a15-a49d-4049-9419-4e105791e8c3~~04/06/2014 02:54:33,,,167,,,,0,,,0,,0,,0,0,0,0,,,,,,,,2,0,,2,,2,2,,,CorrelationID=<empty>;BeginRequest=2014-03-20T11:04:22.264Z;ProxyState-Run=None;ProxyState-Complete=CalculateBackEnd;I32:ADS.C[mcDC]=1;F:ADS.AL[mcDC]=0.9939,HttpProxyException=Microsoft.Exchange.HttpProxy.HttpProxyException: The database with ID 72114a15-a49d-4049-9419-4e105791e8c3 couldn't be found. ---> Microsoft.Exchange.Data.Storage.DatabaseNotFoundException: The database with ID 72114a15-a49d-4049-9419-4e105791e8c3 couldn't be found.    at Microsoft.Exchange.Data.ApplicationLogic.Cafe.MailboxServerLocator.ResolveMasterServerOrDag()    at Microsoft.Exchange.Data.ApplicationLogic.Cafe.MailboxServerLocator.BeginGetServer(AsyncCallback callback  Object asyncState)    at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.InternalBeginCalculateTargetBackEnd(AnchorMailbox& anchorMailbox)    at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.<BeginCalculateTargetBackEnd>b__30()    --- End of inner exception stack trace ---;
2014-03-20T11:04:22.280Z,b00bee26-216f-4052-9220-8f867e4dd0d2,15,0,847,30,,Owa,exchange.mailcluster.com,/owa/auth.owa,,FBA,True,MAILCLUSTER\Administrator,,Sid~S-1-5-21-215416516-1168753235-3955503809-500,Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0),75.176.86.169,MCEXCHANGE2,500,,DatabaseGuidNotFound,POST,,,,,WindowsIdentity,Database~72114a15-a49d-4049-9419-4e105791e8c3~~04/06/2014 02:54:33,,,167,,,,0,,,0,,0,,0,0,15.6251,0,,,,,,,,12,0,,12,,12,12,,,CorrelationID=<empty>;BeginRequest=2014-03-20T11:04:22.264Z;ProxyState-Run=None;ProxyState-Complete=CalculateBackEnd;I32:ADS.C[mcDC]=1;F:ADS.AL[mcDC]=10.9235,HttpProxyException=Microsoft.Exchange.HttpProxy.HttpProxyException: The database with ID 72114a15-a49d-4049-9419-4e105791e8c3 couldn't be found. ---> Microsoft.Exchange.Data.Storage.DatabaseNotFoundException: The database with ID 72114a15-a49d-4049-9419-4e105791e8c3 couldn't be found.    at Microsoft.Exchange.Data.ApplicationLogic.Cafe.MailboxServerLocator.ResolveMasterServerOrDag()    at Microsoft.Exchange.Data.ApplicationLogic.Cafe.MailboxServerLocator.BeginGetServer(AsyncCallback callback  Object asyncState)    at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.InternalBeginCalculateTargetBackEnd(AnchorMailbox& anchorMailbox)    at Microsoft.Exchange.HttpProxy.ProxyRequestHandler.<BeginCalculateTargetBackEnd>b__30()    --- End of inner exception stack trace ---;


Here is hte problem.
When the system works (from the server for example), the log is searching for a database GUID that I can find in the ADSIedit. When I see the error, it is looking for a guid that I can't find in the AD. So, if using the same URL from inside the exchange server, it works and uses the right GUID for the database and it finds the database. When using the same URL from remote computer, it is searching for another GUID of a database that does not exist. And this is per user bases, some users always work, some don't, and it happens on and off. When using the mcexchange2.mailcluster.com url it always works (same UCC cert with both SANs).

So far I have istalled second server with SP1, moved everything over, it worked for about 6 hours and it does not work again. Tried moving the mailboxes. If I copy the Administrator account which dose not work now and create new testa ccount, the new account works fine. I can't delete the administrator, but even if delete/create the account, this is really not a solution.



Viewing all articles
Browse latest Browse all 7129

Trending Articles