Forum Discussion

taj_bhatti_2983's avatar
taj_bhatti_2983
Icon for Nimbostratus rankNimbostratus
Nov 08, 2016

Hybrid Configuration - Exchange 2013 and Office 365

Hello All,

 

I'm setting up Hybrid Configuration between Exchange 2013 and Office 365, I've F5 (LTM-APM) -BIG IP V11.5.1 Hf7) doing necessary load balancing for my four CAS servers however when I run my hybrid wizard I'm getting following errors...

 

Is there any specific exclusion I need to put on F5 for below error ?

 

I've enabled mrsproxy on all CAS servers - and have necessary authentication on IIS setting for

 

InternalAuthenticationMethods : {Ntlm, WindowsIntegrated, WSSecurity, OAuth}

 

ExternalAuthenticationMethods : { Ntlm, WindowsIntegrated, WSSecurity, OAuth}

 

Any help will be appreciated ...

 

The Office 365 tenant is currently configured to use the following URL for Autodiscover queries from the Office 365 tenant to the on-premises organization - . 2016.11.07 06:31:38.418 WARNING [Functionality=RunWorkflow] HCW8078 Migration Endpoint could not be created.

 

Microsoft.Exchange.Migration.MigrationServerConnectionFailedException The connection to the server owa.xxx.xxx.xx could not be completed. Microsoft.Exchange.MailboxReplicationService.RemotePermanentException The Mailbox Replication Service was unable to connect to the remote server using the credentials provided. Please check the credentials and try again. The call to '' failed. Error details: The HTTP request is unauthorized with client authentication scheme 'Negotiate'. The authentication header received from the server was 'Basic realm="owa.xxx.xxx.xx",NTLM'. --> The remote server returned an error: (401) Unauthorized.. --> The HTTP request is unauthorized with client authentication scheme 'Negotiate'. The authentication header received from the server was 'Basic realm="owa.xxx.xxx.xx",NTLM'. --> The remote server returned an error: (401) Unauthorized. Microsoft.Exchange.MailboxReplicationService.RemotePermanentException The call to '' failed. Error details: The HTTP request is unauthorized with client authentication scheme 'Negotiate'. The authentication header received from the server was 'Basic realm="owa.xxx.xxx.xx",NTLM'. --> The remote server returned an error: (401) Unauthorized.. Microsoft.Exchange.MailboxReplicationService.RemotePermanentException The HTTP request is unauthorized with client authentication scheme 'Negotiate'. The authentication header received from the server was 'Basic realm="owa.xxx.xxx.xx",NTLM'. Microsoft.Exchange.MailboxReplicationService.RemotePermanentException The remote server returned an error: (401) Unauthorized.

 

4 Replies

  • do you see the request show up in APM logs? where does it fail on?

     

    did you configure it yourself from the ground or used an iApp.

     

  • This is pretty old, but maybe useful for others browsing to check this out: https://social.technet.microsoft.com/Forums/en-US/25b0b80f-7578-4a85-9e99-c51317ec390a/exchange-2016-hybird

     

    I had a VERY similar sort of error (don't think mine mentioned basic auth, else identical. Gist is, make sure your proxy's enabled and do an iisreset. Here's the forum's pith:

     

    get-webservicesvirtualdirectory | fl Server,MRS*, if not enabled use the cmdlet below to enable.

     

    get-webservicesvirtualdirectory |set-webservicesvirtualdirectory -mrsproxyenabled $true

     

    Run an IIS reset..