Can't access OWA, OA and ActiveSync

[Francis Daly]

On Mon, Oct 08, 2018 at 11:58:38PM -0400, alisampras wrote:

Hi there,

I have not tried putting anything to do with Exchange behind nginx, so I do not
have any tested-config for you.

However...

> Business Objective
> Outside users (users travelling) should be able to access their email
> through NGINX and it should redirect the connection to my Internal Exchange
> server for authentication and access:
> 1. OWA
> 2. Outlook Anyway
> 3. ActiveSync

When I do a Google search for "nginx owa", among the first few results I get are

https://docs.nginx.com/nginx/deployment-guides/microsoft-exchange-load-balancing-nginx-plus/

https://www.reddit.com/r/sysadmin/comments/6wq3rj/nginx_reverse_proxy_to_exchange/

https://gist.github.com/taddev/7275873

The general impression I get from reading those is that, for this to work,
it depends significantly on the versions of Exchange and friends, and
on the configuration of Exchange and friends.

Generally: RPC is bad; NTLM authentication is bad; many other things
are good.

It does appear that there are some versions and configurations of Exchange
and friends that stock-nginx will not successfully reverse-proxy; if you
must use some of those, then you may be much happier using a different
product to do the reverse-proxying.

Both "haproxy" and "nginx plus" appear to have some reports of being
made to work.

Good luck with it,

	f
-- 
Francis Daly        francis at daoine.org