ProxyPass getting 401.2 Unauthorized from internal server which logs 401 1

Topics: User Forum
Mar 19, 2011 at 4:12 PM
Edited Mar 19, 2011 at 4:13 PM

I'm trying to access an exchange server internally and share an IP with a MS CRM to the outside world (WAN).

I can access the CRM just find and IIRF is running fine I think.

My exchange server does not have a certificate so I would like to ignore that using http (and https if possible).

It's an old server and the webroot is a dead page and you have to go to /exchange/ to login.

However, when passing through IIRF I get a login for the webroot and I should be getting the dead page without a popup login from my browser outside the LAN.

Here is my configuration:
----
# Iirf.ini
#
# ini file for routing by hostname
#

RewriteLog c:\temp\iirf_wwwroot.log
RewriteLogLevel 5
IterationLimit 10
MaxMatchCount 10
RewriteEngine ON
StatusInquiry OFF

# RewriteCond %{SERVER_PORT} ^443$
# RewriteCond %{HTTP_HOST} ^mail\.xxx\.com$
# RewriteHeader X-Remote-User ^$ %{REMOTE_USER}
# RedirectRule ^/([^.?]+[^.?/])$ /$1/
# ProxyPass ^/(.*)$ https://192.168.1.16/$1  [I]
# ProxyPassReverse / https://mail.xxx.com/

RewriteCond %{SERVER_PORT} ^80$
RewriteCond %{HTTP_HOST} ^mail\.xxx\.com$ [I]
# RewriteHeader X-Remote-User ^$ %{REMOTE_USER}
# RedirectRule ^/([^.?]+[^.?/])$ /$1/
# ProxyPass ^/(.*)$ https://192.168.1.16/$1  [I]
# ProxyPass ^/(.*)$ https://internal/$1  [I]
ProxyPass / http://internal/ [I]
ProxyPassReverse / http://internal/
----

I've tried several different combinmations with ProxyPass with no luck.

Is there an option to avoid the 401.2?
( I'm guessing something like the [CR] in Apache mod_proxy )

Thanks ahead of time,

Gene

Coordinator
Mar 19, 2011 at 10:29 PM

Hi Gene,

I don't understand this part of what you wrote:

> However, when passing through IIRF I get a login for the webroot and I should be getting the dead page without a popup login from my browser outside the LAN.

Can you explain that again please?  Maybe break it down, make it simpler for me.

Mar 21, 2011 at 3:58 PM

Exchange is setup in in a subfolder of the webroot (c:\inetpub\webroot\ ) so exchange normally loads a login prompt at http://xyz.com/exchange/ but http://xyz.com/ loads a page that says under construciton.

As far as the WAN / LAN, I'm just trying to basically say using IIRF and not using IIRF (LAN being direct access to the server and outside the LAN being over the WAN)

Hope that helps.. :)