cancel
Showing results for 
Search instead for 
Did you mean: 

EV 11 - PST Import button prompts for authentication

Moose100
Level 3

An appeal for help.

We are having an issue with the client driven PST migration feature in EV 11 constantly prompting the user for authentication, even if the user does provide credentials the prompt reappears.

If we disable the Client Side migration feature EV works just fine no user prompts at all!

 

The error appears to be with the path https://EVServer01:443/EnterpriseVault/ReadPstFiles.aspx

from th Event viewer on EVserver (I have changed my domain name details for this post)

Event code: 4011
Event message: An unhandled access exception has occurred.
Event time: 18/08/2014 11:58:19
Event time (UTC): 18/08/2014 10:58:19
Event ID: ff4645717cb248699f6f9f93323a0b72
Event sequence: 55
Event occurrence: 2
Event detail code: 0
 
Application information:
    Application domain: /LM/W3SVC/1/ROOT/EnterpriseVault-1-130527594037297992
    Trust level: Full
    Application Virtual Path: /EnterpriseVault
    Application Path: C:\Program Files (x86)\Enterprise Vault\WebApp\
    Machine name: MYEVSERVER
 
Process information:
    Process ID: 720
    Process name: w3wp.exe
    Account name: NT AUTHORITY\SYSTEM
 
Request information:
    Request URL: https://EVServer01:443/EnterpriseVault/ReadPstFiles.aspx
    Request path: /EnterpriseVault/ReadPstFiles.aspx
    User host address: 192.168.7.117
    User: Mydomain\mytestusername
    Is authenticated: True
    Authentication Type: Negotiate
    Thread account name: NT AUTHORITY\SYSTEM

 

We are using IE11 on windows 7 machines with exchange 2010 in one domain.

What I can confirm so far.

 

The EVServer name and  alias (FQDN) is present in local Intranet . I added the IP address of the EV server  for good measure.  Protected mode is switched off and Automatic logon only in intranet zone is set under the User Authentication setting.
 
Turning the proxy server on and off has not made any difference, I also added the EV sever as a proxy exception (just In case)
 
I tried the following in  order reverting config after each step  but still get the login prompt.  Every  time tested something I closed outlook on the test machine, opened performed sync  then clicked the .PST migration button which always triggers the prompt.
 
•         Disabling  the authentication settings for ReadPstFiles.aspx between basic and IWA.
 
•         Changing the permissions on the ReadPstFiles.aspx to everyone full control (at present EVServer users  have read and execute).
 
•         Removing the requirement for SSL from the EV site in IIS
 
I have also tried changing the providers in windows authentication between negotiate and NTLM on the root of EV in IIS and just the directory pointing at ReadPstFiles.aspx I can see switching the methods does actually change as the authentication details are in the event log but no lot up on the user prompts.

 

I can see someone had the exact same issue here, but there isn't any solution:

https://www-secure.symantec.com/connect/forums/enterprise-vault-pst-import-button-prompts-authentica...

 

Any help or suggestions much appreciated.

 

 

 

 

 

1 ACCEPTED SOLUTION

Accepted Solutions

Moose100
Level 3

OK.  Update on this issue.  After weeks of pain Symantec have finally acknowledeged this bug detailed in the technote here:

 

http://www.symantec.com/business/support/index?page=content&id=TECH225685&profileURL=https%3A%2F%2Fs...

I sincerely hope that nobody has to go through the hassle and earache I have in getting to the bottom of this issue.

The upshot: Wait for  SP1 which will fix this issue.

 

I

View solution in original post

4 REPLIES 4

TonySterling
Moderator
Moderator
Partner    VIP    Accredited Certified

Highly recommend opening a case with Symantec.  This is a new feature and will probably require some hand-on investigation.

Best,

 

JesusWept3
Level 6
Partner Accredited Certified

the prompting isn't coming from a permissions issue on IIS or windows, its coming from an error in the background, so you're best bet is to dtrace W3WP

https://www.linkedin.com/in/alex-allen-turl-07370146

Moose100
Level 3

 Thanks for the replies.

 

@Tony, As you suggested this problem  has been logged with Symantec support they are looking into the issue I will post the resolution here when I have it.

 

@JesusWept3

 

Thanks for the suggestion. I will ahve a look at DTrace now. I guess I need to make freinds with this tool if I am to support EV in the future.

 

 

Moose100
Level 3

OK.  Update on this issue.  After weeks of pain Symantec have finally acknowledeged this bug detailed in the technote here:

 

http://www.symantec.com/business/support/index?page=content&id=TECH225685&profileURL=https%3A%2F%2Fs...

I sincerely hope that nobody has to go through the hassle and earache I have in getting to the bottom of this issue.

The upshot: Wait for  SP1 which will fix this issue.

 

I