Re: Activesync HTTP_500

From: jerry cantrell (undisclosed_at_earth.net)
Date: 03/24/04 

Date: Wed, 24 Mar 2004 15:43:15 +0800

Activesync in our test environment is working fine without these nodes set
at any node in the metabase. There's so much conflicting but little official
documentation from Microsft to make this clearer.

C:\Inetpub\AdminScripts>cscript adsutil.vbs get
w3svc/NTAuthenticationProviders

Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.

The parameter "NTAuthenticationProviders" is not set at this node.

C:\Inetpub\AdminScripts>
"Ben Wolfe [MSFT]" <benwolfe@online.microsoft.com> wrote in message
news:4Df8tiSEEHA.2956@cpmsftngxa06.phx.gbl...
> Hi
>
> One of the main causes of the HTTP_500 error is if Kerberos authentication
> has been turned off in the metabase. To verify if Kerberos has been turned
> off in the metabase perform the following steps.
>
> 1. From a command prompt on the Exchange 2000 computer, change to the
> <WinDir>\Inetpub\AdminScripts folder.
>
> 2. Type the following, and then press ENTER:
>
> "cscript adsutil.vbs get w3svc/NTAuthenticationProviders" (without the
> quotation marks)
>
> If Kerberos is enabled, the ""Negotiate,NTLM"" response appears
>
> If the response is ""NTLM"" only, Kerberos is disabled. To enable
> Kerberos, type the following, and then press ENTER:
>
> "cscript adsutil.vbs set w3svc/NTAuthenticationProviders "Negotiate,NTLM""
> (without the quotation mark)
>
> IISRESET was what I wanted you to run. This is run from the command line.
>
> Ben Wolfe
> Microsoft PSS
>
> This posting is provided 'AS IS' with no warranties and confers no rights.
> Please do not send email directly to this alias. This alias is for
> newsgroup purposes only.
>
> --------------------
>
> I have no problem doing a: http://servername/exchange .... have always
> worked fine..
>
> I have 2 senarios the first wored all fine
> the first retuns a http/1.1 401 Unathorized under server response then
> ---start of body--- then again --server response --
> http/1.200 ok
>
> the sceond logfile is the one posted here earlier.
>
> are you sure the problem is kerberos auth
> and
> when you write issreset, did you mean issrestart....
>
> Thanks
>
>
> ----- Ben Wolfe [MSFT] wrote: -----
>
> When Windows Sharepoint Services is installed it does two things to
> the
> default website.
>
> - It installs its own ISAPI filter and takes ownership of the
default
> website, this ISAPI filter handles all incoming url requests. What
> this
> means is that when you have WSS installed on an Exchange Server, and
> you
> attempt to browse to http://servername/exchange the WSS ISAPI filter
> looks
> for the folder called Exchange in its configuration database (which
it
> can't locate because its not there) instead of redirecting the
request
> to
> the Exchange virutal directory. You can fix this by setting up
> exlusions in
> WSS but its best not to have WSS installed on an Exchange Server.
>
> -The second thing it does to the default website is turn off Kerberos
> Authentication. ActiveSync usess Kerberos authentication when
talking
> to
> the Exchange virtual directory, if Kerberos has been turned off then
> the
> Exchange Server returns a 401 error to ActiveSync Server, and this in
> turn
> returns a http_500 error to the device.
>
> Your Pocket PC log files that you sent through show the Exchange
> Server is
> returning "HTTP/1.1 401 Unauthorized" which indicates that Kerberos
> Autentication has been turned off on your default website.
>
> To turn Kerberos back on you need to do the following.
>
> Navigate to the C:\Inetpub\Adminscripts directory
>
> Run this command from command line.
>
> cscript adsutil.vbs set w3svc/1/NTAuthenticationProviders
> "Negotiate,NTLM
>
> Run an issreset and then test ActiveSync again.
>
> Ben Wolfe
> Microsoft PSS
>
> This posting is provided 'AS IS' with no warranties and confers no
> rights.
> Please do not send email directly to this alias. This alias is for
> newsgroup purposes only.
>
>
>
>

Relevant Pages

  • Re: "exchange server must support auto-detect for the phone"
    ... You can sync with a Microsoft Exchange Server 2003 Service Pack 2 or Microsoft Exchange Server 2007.On the All application menu tap Mail. ... Then, on the Choose a mail provider screen, tap Microsoft Exchange ActiveSync. ...
    (microsoft.public.windows.server.sbs)
  • Re: Activesync HTTP_500
    ... This folder, and other ActiveSync properties only get created in the ... > WSS but its best not to have WSS installed on an Exchange Server. ... > -The second thing it does to the default website is turn off Kerberos ...
    (microsoft.public.exchange.clients)
  • Re: Wireless Exchange Activesync not working with Cingular 8125
    ... I have been trying to get the over-the-air Exchange ... Activesync to work but have been unsuccessful. ... I have configured Activesync ... Your account in Microsoft Exchange Server does not have permission ...
    (microsoft.public.pocketpc.activesync)
  • RE: Activesync HTTP_500
    ... One of the main causes of the HTTP_500 error is if Kerberos authentication ... From a command prompt on the Exchange 2000 computer, ... WSS but its best not to have WSS installed on an Exchange Server. ...
    (microsoft.public.exchange.clients)
  • Re: Support Code:85010014?
    ... that is usually an Exchange issue. ... Here is the link for the Microsoft KB article on ActiveSync ... as an exchange server. ... This error code usually indicates that the device and the HTTP server are ...
    (microsoft.public.pocketpc.activesync)
Loading