Problem with Outlook Web Access OWA on WM5 with SSL

This one's got me stymied folks. :realmad:

When I attempt to use Outlook Web Axis (OWA) on my x51v, I am prompted for my logon credentials over and over. (The username and domain are filled in, but the password isn't).

OWA works on our XP systems, and on other Pocket PCs using Windows Mobile 2003. (I am the IT admin that setup our Exchange server with SSL, it's been working for a year without incident).

I successfully installed the certificate for my Exchange server on the Axim. I can use OMA with SSL, no problems. Exchange ActiveSync also works. But I can't figure out why OWA isn't working without the repeated password prompts.

HELP!

[netsyd]

I posted in the other thread...

.... I wish I knew. Mine doesn't do that... Are you running a single box or a front end server with the data on the backend server? Exch sp1 or sp2?

Have you tried other browsers? What about setting the ppc ie to act like ie6?

[TFJetfire]

You don't need to install the Exchange cert on the Axim.
I've been able to hit my OWA over SSL successfully without incident.

Can you confirm the behavior from your desktop to OWA?

OWA works flawlessly everywhere else, even on my WM2003 PDA (iPaw hx4700).
For some reason OWA continues to request credentials.
This morning I tapped the Favorite for OWA and it took me right into the main screen, no problem. Then I tapped a message, and that's when it asked for the credentials. Weird.

I've been doing some testing. We do NOT use Forms Based Authentication for Exchange. I enable FBE, and voila, OWA now works on the Axim. However, there are some drawbacks to FBA specifically, the domain\username needs to be entered everytime you start OWA, in addition to the password. This is a lot more hassle, especially on a PDA.

I experimented with FBAa bit, then disabled it. ( don't know if it's something we will use as an organization). Now that it's disabled again, OWA is back to repeatedly asking for credentials.

There's gotta be a way to make OWA work without FBE on WM5, as it does on WM2003. Anyone?

[netsyd]

You don't need to install the Exchange cert on the Axim.
I've been able to hit my OWA over SSL successfully without incident.

Can you confirm the behavior from your desktop to OWA?

You do however have to install the cert locally to be able to use OMA ... :) ... unless you use a cert vendor like Verisign for your OWA/SSL.

[netsyd]

There's gotta be a way to make OWA work without FBE on WM5, as it does on WM2003. Anyone?

Did you try setting up PocketIE to display itself as IE 6? *Tweaks2k2 or Pocket Plus from Spb can do this*

Also ... give opera and minimo a try. They might get you past the issue for now.

I don't use forms based on mine, I run OMA, OWA & SSL (required), I DO NOT use ISA server and mine runs just fine with PIE.

Tried setting PIE to act as v6, no change.

It seems to be some kind of authentication issue, but I can't get beyond that.

[netsyd]

Correction to my prior post .... I do have Forms based enabled. Don't know what the heck I was thinking of

OK, well that makes sense. It works for me if I turn on FBE also. Not sure why the traditional non-FBE setup works everywhere except on the x50v.

If I were a drinking man...I'd CRACK OPEN A BREW !! :cheers:
I just got it working. Ready for this?

In IIS 6.0 on the webserver where OWA is located, the Exchange and Public folders were set to require a secure channel (SSL) and 128-bit security - so far so good. They were also set to use either Basic or Windows Integrated authentication. I UNCHECKED Windows Int. Auth., stopped/restarted the website, and VOILA !!

I can now use OWA on WM5 on the x51v with certificates/SSL. I can also use OMA and Exchange ActiveSync.

I don't fully understand why it wasn't working with Windows Integrated Auth. checked. I also don't know what the repercussions will be of turning that off. As long as SSL is required, it will be secure, even is using Basic Auth.

I need to dig some more. I'm going to take a guess and say that WM2003 and XP try to use Basic Auth. first, then Windows Int. Auth., and that WH5 does the opposite. Just a guess.

FEELS GOOD to nail this on a Friday afternoon !!

Thanks for the help everyone. I GOOGLED today like crazy for this one!