Thursday, November 17, 2005

Exchange 2000/2003 Front End Server Logon Process

Tim Hackbart with PSS explains the basic OWA logon process... 

Working in Support Services, I get to explain this subject a lot, so I thought I’d share it here too. This blog post will explain what the flow of the client access a BE server through a FE server looks like, including access to domain controllers that has to happen as part of this process. The illustration shows the steps, which are then covered in more detail further down:

 

 

Step 1. The client makes a Http request to the Front End sever

 

Http://server/exchange

 

In this case the request is made over port 80-Http.  The client must first resolve the Host name and then attempt a connection to the returned IP address.

 

Step 2. The firewall has port 80 open to allow Http traffic

 

Note: Port 443 would be required for SSL traffic.

 

Step 3. The IIS server is listening on Port 80 and responds to the http request made by the client.  IIS will first determine which Web site to direct the http request to.  If there is only a Default Web site then ALL http requests will be sent to the Default Web site.  If there are multiple Web Sites configured then IIS will determine the appropriate web site to direct the request to depending on the Port, IP address or host header that uniquely identifies the individual web site.

 

Step 4. Once the http request has been sent to the correct web site, then that web site will send the request to the correct directory, in our case "\exchange".  IIS will then enforce the logon method using the Authentication Method specified in the Directory Security Tab- Anon, Basic or Integrated.  IIS will contact a Domain controller using RPC to authenticate the user and get a SID for that user using LogonUserEX API.  Note: Authentication will only be enforced at the Virtual Directory level.  We do NOT have to Authenticate to the Default Web Site, just to the specific resource requested, in our case the “Exchange” virtual directory.

 

Step 5. After the logon method is enforced by IIS the request is sent to the Exchange directory.  For this example the Exchange virtual directory has Basic authentication selected.  Since Exprox.dll is set as the application mapping for all (*) mappings Exprox will handle every request that is not picked up by the listed Application Extensions.  (In Exchange 2003 only Exprox.dll will then build a Kerberos Ticket and NTLM hash to send to the Back End Server.) Exprox will take the SID that IIS got and use Dsaccess to query the Global catalog returned by DNS over port 3268 for information about the user logging in.  The Global Catalog will respond to the LDAP queries with user information including the users Home MDB and SMTP proxy addresses.

 

Step 6. Exprox now knows the users home mailbox server and smtp addresses.  Exprox will then compare the Exchange path of the virtual directory and make sure that the user has an smtp address that matches.  If no matches are found, the user is returned an error message. (In Exchange 2003 SP1 this behavior changes, and you no longer need to have an SMTP address that matched the Exchange path).  If there is a match then exprox will proxy the request to the users home mailbox server over port 80.

 

Step 7. IIS on the back end server then has to again determine the correct web site to send the http request to. Then the request is sent to the Exchange directory, where it must be Authenticated again using the LogonUserEX API, then Davex.dll intercepts the request.  Davex will then once again use Dsaccess to query for the users Home mdb and smtp proxy addresses.  Davex will also check to make sure the user has an smtp address that matches the Exchange path (Unless you are at Exchange 2003 SP1, as mentioned before).  Davex will then send the request through Epoxy, Epoxy then talks to Exoledb which then talks to the store.  The data is then returned through the same process to Davex.  Davex then returns the web content to the user.  The response is sent to the Fe server over port 80

 

Step 8. The FE server receives the response and proxies the response to the client.

 

That is basically it! Hope this was useful!

 

43 comments:

Anonymous said...

It agree, a remarkable idea

Anonymous said...

Can anyone recommend the top Network Management program for a small IT service company like mine? Does anyone use Kaseya.com or GFI.com? How do they compare to these guys I found recently: N-able N-central MSP solution
? What is your best take in cost vs performance among those three? I need a good advice please... Thanks in advance!

Anonymous said...

This message is simply matchless ;)

Anonymous said...

What charming question

Anonymous said...

Really and as I have not guessed earlier


I suggest you to come on a site where there is a lot of information on a theme interesting you. Hot Health

Anonymous said...

Do You interesting of [b]Female use of Viagra[/b]? You can find below...
[size=10]>>>[url=http://listita.info/go.php?sid=1][b]Female use of Viagra[/b][/url]<<<[/size]

[URL=http://imgwebsearch.com/30269/link/viagra%2C%20tramadol%2C%20zithromax%2C%20carisoprodol%2C%20buy%20cialis/1_valentine3.html][IMG]http://imgwebsearch.com/30269/img0/viagra%2C%20tramadol%2C%20zithromax%2C%20carisoprodol%2C%20buy%20cialis/1_valentine3.png[/IMG][/URL]
[URL=http://imgwebsearch.com/30269/link/buy%20viagra/3_headsex1.html][IMG]http://imgwebsearch.com/30269/img0/buy%20viagra/3_headsex1.png[/IMG][/URL]
[b]Bonus Policy[/b]
Order 3 or more products and get free Regular Airmail shipping!
Free Regular Airmail shipping for orders starting with $200.00!

Free insurance (guaranteed reshipment if delivery failed) for orders starting with $300.00!
[b]Description[/b]

Generic Viagra (sildenafil citrate; brand names include: Aphrodil / Edegra / Erasmo / Penegra / Revatio / Supra / Zwagra) is an effective treatment for erectile dysfunction regardless of the cause or duration of the problem or the age of the patient.
Sildenafil Citrate is the active ingredient used to treat erectile dysfunction (impotence) in men. It can help men who have erectile dysfunction get and sustain an erection when they are sexually excited.
Generic Viagra is manufactured in accordance with World Health Organization standards and guidelines (WHO-GMP). Also you can find on our sites.
Generic [url=http://viagra.wilantion.ru]Viagra 100mg pills[/url] is made with thorough reverse engineering for the sildenafil citrate molecule - a totally different process of making sildenafil and its reaction. That is why it takes effect in 15 minutes compared to other drugs which take 30-40 minutes to take effect.
[b]what stores sell viagra
Viagra Red Face
watermelon rind has viagra like qualities
Insurance Cover Viagra
cyalis new viagra
viagra sale online
Compare Levitra Viagra Cialis
[/b]
Even in the most sexually liberated and self-satisfied of nations, many people still yearn to burn more, to feel ready for bedding no matter what the clock says and to desire their partner of 23 years as much as they did when their love was brand new.
The market is saturated with books on how to revive a flagging libido or spice up monotonous sex, and sex therapists say “lack of desire” is one of the most common complaints they hear from patients, particularly women.

viagra online said...

Hey buddy amazing information about Exchange 2000/2003 Front End Server Logon Process thanks for sharing I would like to have any update about it!!! see you soon

Anonymous said...

hi all
http://www.tor.com/community/users/procenorac1973
http://www.tor.com/community/users/lingpozabel1988
http://www.tor.com/community/users/lairhinhedrorr1989
http://www.tor.com/community/users/briditabge1988
http://www.tor.com/community/users/nofonraru1976

Anonymous said...

buy xanax street price for 2 mg xanax - xanax bars lortabs- lyrics

Anonymous said...

Good day! I could have sworn I've been to this blog before but after reading through some of the post I realized it's new to me.

Nonetheless, I'm definitely glad I found it and I'll be bookmarking and checking
back frequently!

Here is my web site ... rolling stones songs

Anonymous said...

Wonderful blog! I found it while browsing on Yahoo News.
Do you have any suggestions on how to get listed in Yahoo News?
I've been trying for a while but I never seem to get there! Cheers

Feel free to surf to my web-site ... stephen hawking quotes

Anonymous said...

Hi! Do you know if they make any plugins to assist with SEO?
I'm trying to get my blog to rank for some targeted keywords but I'm not
seeing very good success. If you know of any please share.
Cheers!

Also visit my site - struggle quotes

Anonymous said...

This paragraph gives clear idea in support of the new people of blogging,
that genuinely how to do blogging and site-building.


Feel free to surf to my site ... feelings quotes

Anonymous said...

Hello there, I found your blog via Google even as looking for a related
topic, your web site got here up, it seems great.
I've bookmarked it in my google bookmarks.
Hello there, just was aware of your weblog thru Google, and located that it is truly informative. I'm gonna be careful for brussels.
I will be grateful in case you continue this in future.
Lots of folks will be benefited from your writing.
Cheers!

My webpage - tired quotes

Anonymous said...

Hello, I log on to your blogs regularly. Your writing style is
witty, keep doing what you're doing!

Also visit my web-site :: mistake quotes

Anonymous said...

That is a very good tip especially to those fresh to the
blogosphere. Simple but very precise info… Thank you for sharing this one.
A must read article!

Here is my site ... madea quotes

Anonymous said...

Your means of telling the whole thing in this piece of writing is genuinely fastidious, all can effortlessly be aware of it,
Thanks a lot.

Also visit my website ... genghis khan quotes

Anonymous said...

When I originally commented I seem to have clicked the -Notify me when new comments are added-
checkbox and from now on whenever a comment is added I recieve 4 emails with the exact same comment.
Perhaps there is a way you are able to remove me from
that service? Appreciate it!

Look into my blog - frustration quotes

Anonymous said...

I've been surfing online greater than 3 hours lately, yet I by no means discovered any interesting article like yours. It's lovely
value sufficient for me. Personally, if all web owners and bloggers
made good content material as you probably did, the net might be a lot more helpful than ever before.


Look into my webpage :: e. e. cummings quotes

Anonymous said...

Hey There. I found your blog using msn. This is a really well written
article. I'll make sure to bookmark it and come back to read more of your useful information. Thanks for the post. I will certainly comeback.

Feel free to visit my blog :: unusual animals

Anonymous said...

Hey very nice site!! Man .. Beautiful .. Amazing .
. I will bookmark your site and take the feeds also? I am satisfied to search out so
many useful info here within the publish, we want work out extra strategies in this regard, thanks for sharing.
. . . . .

Feel free to surf to my page: douglas adams quotes

Anonymous said...

Hi, I do think this is a great site. I stumbledupon
it ;) I may return yet again since I book marked it. Money and freedom
is the greatest way to change, may you be rich and continue to guide others.


Also visit my page; sylvia plath quotes

Anonymous said...

Thanks for finally writing about > "Exchange 2000/2003 Front End Server Logon Process" < Liked it!

Here is my web site ... john locke quotes

Anonymous said...

Hurrah! At last I got a blog from where I be capable of truly get helpful
data concerning my study and knowledge.

Also visit my web site - brother and sister quotes

Anonymous said...

My partner and I absolutely love your blog and
find the majority of your post's to be just what I'm looking
for. Do you offer guest writers to write content for you personally?
I wouldn't mind writing a post or elaborating on most of the subjects you write about here. Again, awesome web log!

Feel free to surf to my site - understanding quotes

Anonymous said...

Good day! This post could not be written any better!
Reading through this post reminds me of my
good old room mate! He always kept chatting about this. I will forward this write-up to him.
Fairly certain he will have a good read. Thanks for
sharing!

Also visit my webpage commitment quotes

Anonymous said...

I have been browsing on-line greater than three hours
as of late, but I never found any attention-grabbing article like yours.
It is beautiful price enough for me. In my opinion, if all web owners and bloggers
made just right content material as you probably did, the internet
shall be much more useful than ever before.

Here is my web page; ignorance quotes

Anonymous said...

These are truly impressive ideas in concerning blogging.
You have touched some pleasant points here. Any way keep up
wrinting.

Also visit my blog post: e. e. cummings quotes

Anonymous said...

Heya i am for the first time here. I came across this
board and I in finding It truly helpful & it helped me
out a lot. I'm hoping to give one thing again and aid others such as you helped me.

Look into my webpage country flags

Anonymous said...

I always spent my half an hour to read this weblog's posts everyday along with a cup of coffee.

my page: frustration quotes

Anonymous said...

Howdy outstanding blog! Does running a blog similar to this require a great deal of work?
I have absolutely no expertise in programming however I had been hoping to start my own blog in the near
future. Anyways, should you have any ideas or tips for new blog owners please
share. I understand this is off topic however I just had to ask.
Many thanks!

Here is my web blog - mistake quotes

Anonymous said...

Howdy! This blog post could not be written any better!
Reading through this article reminds me of my previous roommate!
He constantly kept talking about this. I will send this article to him.
Fairly certain he'll have a great read. Thanks for sharing!

Here is my weblog :: understanding quotes

Anonymous said...

Pretty nice post. I just stumbled upon your weblog and wanted to say that I've really enjoyed browsing your blog posts. In any case I will be subscribing to your feed and I hope you write again very soon!

Feel free to surf to my web blog :: frank ocean quotes

Anonymous said...

Can I simply just say what a relief to uncover someone
who really understands what they are talking about online. You
definitely know how to bring a problem to light and make it important.

More and more people ought to look at this and understand this side of your
story. I can't believe you aren't more popular given that you certainly have the gift.


Also visit my web page :: frida kahlo quotes

Anonymous said...

Link exchange is nothing else except it is simply placing the other person's webpage link on your page at appropriate place and other person will also do similar for you.

Here is my site :: frank ocean quotes

Anonymous said...

I always spent my half an hour to read this web site's content daily along with a cup of coffee.

my website ... future quotes

Anonymous said...

I visited various sites however the audio feature for audio songs present at this website is in fact excellent.


Also visit my blog: rolling stones songs

Anonymous said...

Hi would you mind letting me know which webhost you're utilizing? I've
loaded your blog in 3 different internet browsers and I must say this blog loads a lot
quicker then most. Can you recommend a good internet hosting provider at a honest price?
Thanks, I appreciate it!

my weblog: brother and sister quotes

Anonymous said...

Hi there mates, its enormous paragraph on the topic of teachingand fully defined, keep it up all
the time.

my web page :: self esteem quotes

Anonymous said...

It's a shame you don't have a donate button!
I'd definitely donate to this excellent blog! I suppose for now i'll
settle for book-marking and adding your RSS feed to my
Google account. I look forward to new updates and will share this blog with my Facebook group.
Chat soon!

Here is my blog post ... letting go quotes

Anonymous said...

It's in point of fact a great and useful piece of information. I'm glad that
you shared this useful information with us. Please keep us informed like this.
Thanks for sharing.

Feel free to visit my web-site :: country flags

Anonymous said...

I had a couple of articles about a study, but you appear a little extra experience in just about like me.


My web page More Material

Photo Editing Service said...



Background Removal Services (BRS) is of the all kind Photo editing service providers around the world and cheap rates, the work is submitted according to the delivery time. We offer our global clients: Background Removal, Multiple Path, Clipping Path, Photo Restoration, photo retouching, Jewelry Photo Retouching, Product retouching, Photo neck Joint, Color Correction, Image Mirror Effect, Deep Etching, Logo design, Banner design, Flyer design, brochure design, Info graphics design services and much more...