Windows Server - Weblistener w/SSL Client Cert. Auth. and Outlook Anywhere

Asked By BWol

05-Oct-08 04:40 PM

Hello folks,

I have configures a Weblistener with SSL Client Cert. Auth. in ISA 2006. For
OWA and ActiveSync it works perfect with kerberos constrained delegation in
the publishing rule.

For Outlook Anywhere I use the same weblistener (just one official ip). The
publishing rule is configured to ask client for authentication. The problem
is that there comes no dialogue for certificate authtication at the client.
Just the dialogue for user and password...  Don't know whats going wrong...
The client tries to connect but it doesn't work.

In advance thanks.

Kind reagrds,
B. Wolf

05-Oct-08 04:56 PM

You can't do this.
Outlook doesn't support certificate auth.
You can have HTTP-Basic or HTTP-NTLM and that's all.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



Hello folks,

I have configures a Weblistener with SSL Client Cert. Auth. in ISA 2006. For
OWA and ActiveSync it works perfect with kerberos constrained delegation in
the publishing rule.

For Outlook Anywhere I use the same weblistener (just one official ip). The
publishing rule is configured to ask client for authentication. The problem
is that there comes no dialogue for certificate authtication at the client.
Just the dialogue for user and password...  Don't know whats going wrong...
The client tries to connect but it doesn't work.

In advance thanks.

Kind reagrds,
B. Wolf

06-Oct-08 02:24 AM

Ok....

How to configure this with one official IP? For ActiveSync I need the client
certificate authentication.

Thanks.
Regards,
B. Wolf

06-Oct-08 09:27 AM

You can't have certificate authentication and simultaneously serve Outlook
Anywhere clients.
You must either:
1. add an IP and build a separate listener
2. drop certificate authentication

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



Ok....

How to configure this with one official IP? For ActiveSync I need the client
certificate authentication.

Thanks.
Regards,
B. Wolf