Re: Complicated Exchange setup
- From: "Bharat Suneja [MVP]" <bharatsuneja@xxxxxxxxxxx>
- Date: Mon, 10 Apr 2006 18:51:35 -0700
A few pointers:
- Event 1: SSL/HTTPS is not supported between FE-BE servers. If you have a
FE-BE setup, you should use SSL on the FE. In that's the case, you don't
need to do any of this. The BE server will not have SSL-required.
- In Events 2 & 3: Forms-Based Auth sets authentication to Basic (SSL does
the encryption). ActiveSync can only connect to /Exchange virtual directory
using Kerberos. So FBA is out if you're not using a FE.
Typically you offload SSL to a FE server, in which case you should not (and
don't need to) *require* SSL on the backend. You can certainly use SSL on
the back-end, as long as it is also accessible over HTTP.
In a single server setup, you should simply setup separate HTTP virtual
servers and can then enable "require-SSL" on those.
--
Bharat Suneja
MVP - Exchange
www.zenprise.com
NEW blog location:
www.exchangepedia.com/blog
----------------------------------------------
<ajrosen@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1144718101.852104.64000@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi all.
I'm pretty new to administrating exchange server (have 2003 standard
edition running). I'm just wondering if I'm doing something wrong, or
if the whole setup for mobile access seems kind of overly complicated.
First, in order to setup RPC over HTTP, I have to follow KB 833401
(http://support.microsoft.com/?id=833401). This enables SSL according
to their guidlines. However, to have exchange activesync work with SSL
connections, you have to follow KB 817379
(http://support.microsoft.com/kb/817379).
These functions are touted as strengths to exchange. How come they
aren't easier to setup? Shouldn't there just be a couple of checkboxes
to select and have it all configured? Or is that all there, and I'm
just missing them? Or should I not have setup SSL on the RPC over HTTP
setup? Or did microsoft just decide to increase the size of their KB
database instead?
I'd really like to know what other people think about this.
Thanks
Adam
.
- References:
- Complicated Exchange setup
- From: ajrosen@xxxxxxxxxxxxxxxxxxxxxxxx
- Complicated Exchange setup
- Prev by Date: Re: Meeting Requests from external Exchange server show up as attachments
- Next by Date: Re: Complicated Exchange setup
- Previous by thread: Re: Complicated Exchange setup
- Next by thread: Re: Oversized attachment behavior?
- Index(es):
Relevant Pages
|