Hello,
[Description]
Right now i have an environment where Exchange 2010 coexists with Exchange 2007, yesterday i installed the mailbox roles, and in order to make sure everything is working fine, i've migrated my account and a few test ones to the 2010 mailbox server.
Current environment:
- 2 HUB/Cas 2007 servers, Windows server 2003
- 2 Mailbox 2007 servers, windows server 2003
- 2 Edge 2010 SP3 servers, windows server 2012
- 2 Mailbox 2010 SP3 servers, windows server 2012
- 2 Hub/Cas SP3 servers, windows server 2012
- NLB: mail.company.com
-Cas Array: CasArray.company.com
[ISSUE]
- I can't authenticate to https://mail.company.com/autodiscover/autodiscover.xml, it keeps prompting for credentials, but i can access https://cas01.company.com/autodiscover/autodiscover.xml without a problem.
- the error below appears on the clients with outlook 2007/2010
The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server cas01$. The target name used was HTTP/mail.company.com. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (COMPANY.COM) is different from the client domain (COMPANY.COM), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
- Test-outlookwebservices provides the below error
RunspaceId : a363864b-855a-4723-876f-708d1c9e4afc
Id : 1019
Type : Information
Message : A valid Autodiscover service connection point was found. The Autodiscover URL on this object is https://ma
il.company.com/autodiscover/autodiscover.xml.
RunspaceId : a363864b-855a-4723-876f-708d1c9e4afc
Id : 1013
Type : Error
Message : When contacting https://mail.company.com/autodiscover/autodiscover.xml received the error The remote server
returned an error: (401) Unauthorized.
RunspaceId : a363864b-855a-4723-876f-708d1c9e4afc
Id : 1013
Type : Error
Message : When contacting https://mail.company.com/autodiscover/autodiscover.xml received the error The target princip
al name is incorrect
RunspaceId : a363864b-855a-4723-876f-708d1c9e4afc
Id : 1023
Type : Error
Message : The Autodiscover service couldn't be contacted.