Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Address Book and HLB RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I’ve an OCS 2007 Enterprise Pool with 2 front ends both running the web components for ABS, the FQDN for the pool points to a hardware load balancer and on to both FE servers. All works fine with IM but no address book download.

     

    After many tests I found that on my workstation, if I set a local host file for the pool FQDN and point that direct to either FE server the address book downloads fine. Removing the host file so the client looks at the hardware load balancer it fails.

     

    I get the same response using IE and browsing to the root of the servers web site (https://ocs-pool-domain.local), the certificate shows good in IE. When I browse to the hardware load balancer I get “The website you want to view requests identification. Please choose a certificate” message.

     

    It looks like a hardware load balancer issue but all other OCS services are OK via the HLB, any ideas?

     

     

     

    Many thanks
    Wednesday, June 4, 2008 4:41 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote
    Run the web components validation from the OCS admin console and look at that Internal URL in the WMI Class MSFT_SIPAddressBookSetting section.  Based on what you described about your environment it should be https://PoolFQDN/abs/int/handler.  Next check IIS on both OCS servers and ensure that you have a trusted cert that contains that FQDN in either the subject or subject alternative name assigned to your web site.  Lastly, ensure that your load balancer is not attempting to present it's own certificate.  Many load balancers will perform SSL offloading and this is probably not what you want in your particular configuration.
    Wednesday, June 4, 2008 5:59 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

     

    Sounds to me like you aren't load balancing port 443 to each server.
    Tuesday, June 17, 2008 4:04 AM