[cisco-voip] Troubleshooting Unity Connection 8.5 - Exchange single inbox (Unified Messaging Services)

[Jason Aarons (AM)]

Turns out I didn't need to download SSL Cert to UC8.5. ASA8.2 needed a reboot as counters weren't incrementing and had others issues (the Exchange CAS is in the DMZ).  I also had the wrong ip address for the Exchange CAS.  Using RTMT to pull the Tomcat log was helpful, as well as just doing a https://exchangecasip/EWS/Exchange.ASMX and also using the MSDN ESW Editor tool and attempting to login to mailbox.

From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Jason Aarons (AM)
Sent: Thursday, May 26, 2011 2:58 PM
To: cisco-voip (cisco-voip at puck.nether.net)
Subject: [cisco-voip] Troubleshooting Unity Connection 8.5 - Exchange single inbox (Unified Messaging Services)


How do I download the SSL cert from the Exchange 2007 Client Access Server and install them in Unity Connection? I assume this is the same cert that Outlook Web Access uses. The Client Access Server is in the DMZ and the ASA has permit rules. The Exchange CAS is in production with OWA/ActiveSync, etc.

Clicking on Test under the Unified Messaging Services gives this

                The validation results for unified messaging service OBA-Exchange are the following:                     Service "OBA-Exchange": AuthenticationMode=[NTLM] [use HTTPS/no-validate] Server=[172.20.100.32] Type=[Exchange 2007/2010] Username=[service_account]
                Server 172.76.100.32 cannot be contacted by pinging.     Confirm that the systems service ports are functioning.                 This check uses a low level protocol, such as ICMP ECHO, and may not work through firewalls.
                The service port for calendaring is not functioning.
                The system failed to connect to 172.76.100.32:443 through SSL within 60 seconds.

On the Client Access Server, in IE should I be able to go to https://172.20.100.32/EWS/Exchange.ASMX   ? I don't get a response on that web page on the CAS server itself.


Testing from Subscriber;
                Failed accessing jaarons at acme.com<mailto:jaarons at acme.com> on 172.20.100.32    Some possible reasons for 503: Server busy. Service offline. Attempting access using HTTPS when HTTP is required.                 HTTP status=[503 Service Unavailable] Diagnostic=[Couldn't connect to server -- couldn't connect to host] Verb=[POST] url=[https://172.20.100.32/EWS/Exchange.ASMX] request=[<?xml version="1.0" encoding="utf-8"?> <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types"> <soap:Header> <t:RequestServerVersion Version="Exchange2007_SP1"/> <t:ExchangeImpersonation> <t:ConnectingSID> <t:PrimarySmtpAddress>jaarons at acme.com</t:PrimarySmtpAddress<mailto:jaarons at acme.com%3c/t:PrimarySmtpAddress>> </t:ConnectingSID> </t:ExchangeImpersonation> </soap:Header> <soap:Body> <GetFolder xmlns="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:t="http://schemas.microsoft.com/exchange/services/2006/types"> <FolderShape> <t:BaseShape>Default</t:BaseShape> </FolderShape> <FolderIds> <t:DistinguishedFolderId Id="deleteditems"> <t:Mailbox> <t:EmailAddress>jaarons at acme.com</t:EmailAddress<mailto:jaarons at acme.com%3c/t:EmailAddress>> </t:Mailbox> </t:DistinguishedFolderId> </FolderIds> </GetFolder> </soap:Body> </soap:Envelope> ] response=[]




http://www.cisco.com/en/US/docs/voice_ip_comm/connection/8x/unified_messaging/guide/85xcucumg020.html

Confirming Exchange 2007 Authentication and SSL Settings for Cisco Unity Connection 8.5 and Later
You must download SSL certificates from the Exchange server and install them on the Connection server.


itevomcid
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20110526/99c7108a/attachment.html>