EV OWA issues

[dennis_kloster]

I am having issues with accessing archived items via OWA. This used to work up until the past few days. The icons show up in OWA, but the toolbar no longer does. When I click on an archived item I get this message...

The archived item is currently unavailable.
If you choose reply or forward, only the content shown below will be included.

Click here to preview the original item.

When I click where it tells me to I get a new popup windows that gives me a link and says

This Web site may not be trusted and may be used to collect personal information, such as your user name and password. Are you sure that you want to continue to I click yes and then I get a

Page cannot be displayed

Error Code: 403 Forbidden. The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. (12202)

 

[JesusWept3]

This a front end server or a back end server?
Always troubleshoot on the backend server first, if it doesn't work on the backend then it won't work on the frontend server.

Have any changes been made to this exchange server? specifically the ip address?
First thing to do is after you determine it doesn't work on the backend server is go to the IIS Services on the EV Server and go to the IP Restrictions and make sure the IP Address of the Exchange server is in the allow list.

Most times this is where the 403 comes from.
But due to the fact that you are getting prompted for a username/password tends to suggest that its the ProxyBypass list on the Exchange server itself.

What i would suggest is try running proxycfg -d to allow for Direct connections and then re-test

[AndrewB]

what version of EV and what version of Exchange/OWA

[Rob_Wilcox1]

...and a diagnostic log :)

[dennis_kloster]

Sorry, I forgot to give background information.  The EV server is EV 8 sp3. There is an Exchange 2007 CAS server and an Exchange 2007 mailbox server.  Both Exchange servers are on the allow list for EVanon directory. Which server should I run the proxycfg -d command on? The mailbox server?

[JesusWept3]

It'd be run on the CAS server

concentrate purely on the CAS Server and the EV Server itself
Is there any ISA Server involved?

[dennis_kloster]

Log file is attached.....

[dennis_kloster]

Yes, ISA is involved.

[dennis_kloster]

The CAS server is a Windows 2008 box. I don't believe proxycfg can be used with W2K8, can it?

[Rob_Wilcox1]

The error you appear to be getting, looking at the log file, is around here :

10/26/2010 3:42:57 PM [3612,3] [WebDAVRequest::Send] Request url: http://localhost/exchange/dkloster@mydomain.com
10/26/2010 3:42:57 PM [3612,3] [WebDAVRequest::Send] Request method: PROPFIND
10/26/2010 3:42:57 PM [3612,3] [WebDAVRequest::Send] Request timeout (milliseconds): 30000
10/26/2010 3:42:57 PM [3612,3] [WebDAVRequest::Send] Adding Depth header: 0
10/26/2010 3:42:57 PM [3612,3] [WebDAVRequest::Send] Request body: <?xml version="1.0"?><d:propfind xmlns:d="DAV:" ><d:prop><u:inbox xmlns:u="urn:schemas:httpmail:" /></d:prop></d:propfind>
10/26/2010 3:42:57 PM [3612,3] [WebDAVRequest::Send] Exception sending WebDAV request: System.Net.WebException: The remote server returned an error: (404) Not Found.
   at System.Net.HttpWebRequest.GetResponse()
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVRequest.Send()
10/26/2010 3:42:57 PM [3612,3] [EVContext::LoadHiddenSettings] Exception loading hidden settings: 
10/26/2010 3:42:57 PM [3612,3] [EVContext::LoadHiddenSettings]     System.NullReferenceException: Object reference not set to an instance of an object.
   at Symantec.EnterpriseVault.Owa.ExchangeStoreAccess.WebDAVHelpers.GetEVHiddenMessageId(Log oLog, EVContext oEVContext)
   at Symantec.EnterpriseVault.Owa.Core.EVContext.LoadHiddenSettings(Log oLog, Boolean brefresh)
10/26/2010 3:42:57 PM [3612,3] [EVContext::LoadHiddenSettings] Using default settings
10/26/2010 3:42:57 PM [3612,3] [EVContext::ResetHiddenSettings] Resetting hidden settings to defaults
10/26/2010 3:42:57 PM [3612,3] [EVContext::LogHiddenSettings] Mailbox Settings loaded at: Monday, January 01, 0001, 12:00:00 AM
10/26/2010 3:42:57 PM [3612,3] [EVContext::LogHiddenSettings]     Enabled for archiving: Never Enabled

This is the section where the OWA extensions read the hidden message in your mailbox.  That hidden message contains your desktop settings.  Since we can't read it, we assume (wrongly) that you're not an enabled user.

There are a few links that might help :

https://www-secure.symantec.com/connect/forums/ev-80-sp3-exchange-2007-owa-archived-item-unavailable

http://www.symantec.com/business/support/index?page=content&id=TECH78377

http://www.symantec.com/business/support/index?page=content&id=TECH78412

On your EV server, what entries do you have in your ExchangeServers.txt file when you ran the OWAUser script?

Does your CAS server have WebDAV components installed?  I imagine it must do, or we'd get a different error back (I think!)

[dennis_kloster]

I have a bunch of IP addresses in the Exchangeservers.txt file. There is the IPs of the CAS server, mailbox server, ISA, and 2 addresses that I have no idea what they are. (they don't answer to ping requests and aren't registered in DNS) I removed the 2 unfamiliar addresses. Do I need to run the OWAUser script?

[dennis_kloster]

Sorry, I meant to ask if I need to run the OWAUSer script again now that I have removed the IP addresses that didn't belong in the Exchangeservers.txt file.

[Natalia_B_]

what happens when you enter the URL http://localhost/exchange/dkloster@mydomain.com
 in the browser on the cas server? You should be redirected to owa login site.

[dennis_kloster]

When I try http://localhost/exchange/dkloster@mydomain.com from the CAS I get a 404 error. (the webpage cannot be displayed.) I believe this is for 2 reasons.

1.) SSL is required for the OWA site and the url I tried is a http request.

1.) The website's binding in IIS is only to the IP address, not all IP addresses. If I update the host file on the CAS server so that localhost points to it's real IP and not 127.0.0.1 and also use https, it takes me to the login page.

[Natalia_B_]

you should edit the web.config file on the CAS, which can typically be found in the directory:\Program Files\Microsoft\Exchange Server\ClientAccess\Owa\

remove the line <add key="EnterpriseVault_WebDAVRequestProtocol" value="http"/>.

the access should be happen now via https. check it in the owa log

[dennis_kloster]

Progress! After editing the web.config file I am able to eventually view the archived item via OWA. There is still something wrong though. When I click on the archived item I get this. (see 1st popup attachment) When I click to preview the original item, I get the 2nd popup attachment. If I click yes, I can view the archived item. 

[Natalia_B_]

you should run the owauser.wsf script now:

http://www.symantec.com/docs/TECH67715
 

[dennis_kloster]

I ran the script but am still having issues. The Event Viewer on the EV server gives about 5 error messages everytime that I try to open an archived item from OWA.

1. Event ID 2226

The IRestorationAgent->RestoreItem() function failed whilst processing the item with TransactionID: mydomain\eanon\20101028161053673\1, SavesetID: 201001110000000~200911101629590000~Z~000547B7A4B88820E7E97C6117E276B1

The account in bold is my account used for anonymous access.

2. There are 2 Event ID 6531

Failed to open Queue: Enterprise Vault Storage Restore Queue
Queue FormatName: \Enterprise Vault Storage Restore
The queue does not exist or you do not have sufficient permissions to perform the operation.  [0xc00e0003]

3. Ther are 2 Event ID 6263

Error sending Saveset Restore request to Storage Server
Check Event Log for previous errors

[JesusWept3]

OK so the first error stems from the second error
Theres no chance the EVAdmin lost its Local admin priveliges on the EV Server is there?
 

[dennis_kloster]

The EV service account is still a local admin on the EV server.