Re: Event 1287 MSExchangeSRS

Hello Ed,

Thanks. Been looking thru configs on ADC, E2K3, 5.5 servers, can't find any
places for SSL to be checked, other than E2K3 IIS and SMTP VS. We do not
have cert installed under SMTP VS, just for OWA so just in IIS. However,
the /Exchange virtual directory does *not* have Require SSL checked under
Directory Security tab, Secure Communications, Edit. Also not checked in
Exadmin but read in MS doc that is default. Require SSL *is* checked in
Default Web Site, ExchWeb, OMA, Microsoft-Server-Active-Sync and Public
virtual directories.

Would not having Require SSL checked in /Exchange vr cause 1287 issue?

Also, as this is my first SSL experience I wasn't sure whether the /Exchange
vr defaulted to have Require SSL once an SSL cert is installed. Some testing
showed that users can log onto OWA via http: unless Require SSL is checked,
but also found that my Windows 5.0 mobile phone won't sync, gets error
0x85010014 (setting This server requires SSL is checked) . Led me to KB
817379 - Exchange ActiveSync and Outlook Mobile Access errors occur when SSL
or forms-based authentication is required for Exchange Server 2003.

I can create exchange-oma vr as per KB. But I'm confused, is the process
then that mobile phones connect via SSL and the oma vr and active sync vr
connect to the /Exchange vr via port 80, or that the mobile phones do not
use SSL at all? (we want our mobile phones to use SSL).

Thanks,
jnremmc


"Ed Crowley [MVP]" <curspice@xxxxxxxxxxxxxx> wrote in message
news:%23V$YKJk0GHA.2196@xxxxxxxxxxxxxxxxxxxxxxx
My guess is that you're requiring SSL in a place where you shouldn't be.
--
Ed Crowley
MVP - Exchange
"Protecting the world from PSTs and brick backups!"

"jremmc" <jremmc@xxxxxxxxxxxxxx> wrote in message
news:ekkZjac0GHA.1568@xxxxxxxxxxxxxxxxxxxxxxx
We started getting this error Event ID 1287 from MSExchangeSRS

Unable to connect an LDAP SSL client due to an internal error. Verify
that the SSL credentials are properly set up on this server.

about three weeks ago. That is extent of error message; no info as to
which/what client. I have no experience with this error. Search Technet,
Google turned up nothing other than the small blurb in MS Help & Support
link in error mesage. I'd be inlined to think that since SRS is throwing
the error it would relate to either E2K3 server or ADC server (which is a
DC) or our branch 5.5 server. But none of the servers had an SSL
certificate when errors started, none would be trying to connect via SSL
to the other. Start of error "may" have coincided with a company wide
email that we were imminently installing an SSL certificate and someone
may have jumped the gun and configured their PC or phone for SSL early.
But then why would SRS be the reporting service?

We did install SSL (one of the big third-party) on E2K3 last week but
errors continue. Pretty sure SSL cert installed correctly, no issues
otherwise.

Any ideas, including how to track down client causing errors?

Thanks,
jremmc





.

Loading