lundi 6 décembre 2010

[UAG] Minor issue when publishing Outlook Web Access 2010 Service Pack 1


When I deploy Outlook Web Access 2010 Service Pack 1 trough a Forefront UAG portal I was surprised to saw pages as below:
After some research I found that Exchange 2010 SP1 modified a lot of stuff on OWA (for more information http://technet.microsoft.com/en-us/library/ff459257.aspx), and the new theme feature, which break down on Forefront UAG.


After analysing the events on the Forefront UAG Web monitor we could see that it tries to access to unauthorized resources.

In order to apply a workaround, after publishing OWA go to the Trunk Configuration of the trunk hosting OWA.

On the URL Set tab modify the following rules:

Rule to updateOld URL field valueNew URL field value
ExchangePub2010_Rule7/OWA(/[a-Z0-9._-]+@[a-Z0-9.-]+)? / [0-9].c++ / themes/(default|black|base|1|2|3) //OWA(/[a-Z0-9._-]+@[a-Z0-9.-]+)? / [0-9].c++ / themes/([a-z0-9_-]{1,20}) /
ExchangePub2010_Rule8/OWA(/[a-Z0-9._-]+@[a-Z0-9.-]+)? / [0-9].c++ / thèmes / (default|black|base|1|2|3) / [a - z0 - 9_-] + \.(gif|css|wav|wrng|png|ico)/OWA(/[a-Z0-9._-]+@[a-Z0-9.-]+)? / [0-9].c++ / thèmes / ([a - z0 - 9_-] {1,20}) / [a - z0 - 9_-] + \.(gif|css|wav|wrng|png|ico)
ExchangePub2010_Rule29/Forms/ [0-9].c++ / thèmes / (default|black|base) / [un - z0 - 9-] + \.(gif|png|ico)/Forms/ [0-9].c++ / thèmes / ([a - z0 - 9_-] {1,20}) / [un - z0 - 9-] + \.(gif|png|ico)

Normally you must have 40 rules, after the last one add these rules with Add Primary:

NameActionURLParametersMethods
ExchangePub2010_Rule41Accept/owa/csdc\.gifIgnoreGET,POST
ExchangePub2010_Rule42Accept/owa(/[a-z0-9._-]+@[a-z0-9.-]+)?/[0-9.]+/clientbin/owasi.xapIgnoreGET

After that Activate again the Forefront UAG configuration.


And after that, all working fine again.

This is a known problem with another workaround by modifying the AppWrap as described on the KB2444842. I will check if this KB will be included on Forefront UAG SP1.

Thanks' to schmarrap for this workaround on the TechNet.

Aucun commentaire:

Enregistrer un commentaire