Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Aplication Pool of OWA crashes after Installing the ISAPI -SSO22KerbMap.dll

Former Member
0 Kudos

Hello *,

we want to configure SSO22KerbMap ISAPI Modul. We have already done all the steps from the Step-by-Step Guide SSO22KerbMap ISAPI Modul. The SSO22KerbMap.dll is already loaded after round about 50 tries. Now the SSO22KerbMap.dll is loaded successfully, but the Outlook Web Access crashed down. We already have restarted the IIS and the WWW Services, but there where no changes. Anybody an idea?

Regards Ingo

Log File:

15:35:09 7276/6808 I SSO22KerbMap.dll 1.1.0.8 is initialized

                SSO22KerbMap configuration in C:SSO22KerbMap.ini:
                  PseFile: <Path to verify.pse>
                  ServicePrincipalName: HOST/Win2003.<domain>
                  FilterPriority: High
                  SSO2AccountAttribute: sAMAccountName
                  LogLevel: 3
                  Activated SSO logfile: C:SSO22KerbMap_SSO.log

15:35:09 7276/6808 I ADSI Configuration for delegation on host WIN2003:

                ServicePrincipalNames:
                  exchangeAB/WIN2003
                  exchangeAB/Win2003.<domain>
                  exchangeMDB/Win2003.<domain>
                  exchangeMDB/WIN2003
                  exchangeRFR/Win2003.<domain>
                  exchangeRFR/WIN2003
                  SMTPSVC/WIN2003
                  SMTPSVC/Win2003.<domain>
                  NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/Win2003.<domain>
                  ldap/Win2003.<domain>/ForestDnsZones.<domain>
                  GC/Win2003.<domain>/<domain>
                  HOST/Win2003.<domain>/<DOMAIN>
                  HOST/WIN2003
                  HOST/Win2003.<domain>
                  ldap/Win2003.<domain>/<domain>
                  E3514235-4B06-11D1-AB04-00C04FC2DCD2/8799a23d-c56f-48b3-8cfc-deae5099aa88/<domain>
                  ldap/8799a23d-c56f-48b3-8cfc-deae5099aa88._msdcs.<domain>
                  ldap/Win2003.<domain>/<DOMAIN>
                  ldap/WIN2003
                  ldap/Win2003.<domain>
                  ldap/Win2003.<domain>/DomainDnsZones.<domain>
                  ldap/Win2003.<domain>/<domain>
                  DNS/Win2003.<domain>

                Delegation allowed to following SPNs:

15:35:09 4948/6804 I SSO22KerbMap.dll 1.1.0.8 is initialized

                SSO22KerbMap configuration in C:SSO22KerbMap.ini:
                  PseFile: <Path to verify.pse>
                  ServicePrincipalName: HOST/Win2003.<domain>
                  FilterPriority: High
                  SSO2AccountAttribute: sAMAccountName
                  LogLevel: 3
                  Activated SSO logfile: C:SSO22KerbMap_SSO.log

15:35:09 4948/6804 I ADSI Configuration for delegation on host WIN2003:

                ServicePrincipalNames:
                  exchangeAB/WIN2003
                  exchangeAB/Win2003.<domain>
                  exchangeMDB/Win2003.<domain>
                  exchangeMDB/WIN2003
                  exchangeRFR/Win2003.<domain>
                  exchangeRFR/WIN2003
                  SMTPSVC/WIN2003
                  SMTPSVC/Win2003.<domain>
                  NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/Win2003.<domain>
                  ldap/Win2003.<domain>/ForestDnsZones.<domain>
                  GC/Win2003.<domain>/<domain>
                  HOST/Win2003.<domain>/<DOMAIN>
                  HOST/WIN2003
                  HOST/Win2003.<domain>
                  ldap/Win2003.<domain>/<domain>
                  E3514235-4B06-11D1-AB04-00C04FC2DCD2/8799a23d-c56f-48b3-8cfc-deae5099aa88/<domain>
                  ldap/8799a23d-c56f-48b3-8cfc-deae5099aa88._msdcs.<domain>
                  ldap/Win2003.<domain>/<DOMAIN>
                  ldap/WIN2003
                  ldap/Win2003.<domain>
                  ldap/Win2003.<domain>/DomainDnsZones.<domain>
                  ldap/Win2003.<domain>/<domain>
                  DNS/Win2003.<domain>

                Delegation allowed to following SPNs:

15:35:20 6248/6752 I SSO22KerbMap.dll 1.1.0.8 is initialized

                SSO22KerbMap configuration in C:SSO22KerbMap.ini:
                  PseFile: <Path to verify.pse>
                  ServicePrincipalName: HOST/Win2003.<domain>
                  FilterPriority: High
                  SSO2AccountAttribute: sAMAccountName
                  LogLevel: 3
                  Activated SSO logfile: C:SSO22KerbMap_SSO.log

15:35:20 6248/6752 I ADSI Configuration for delegation on host WIN2003:

                ServicePrincipalNames:
                  exchangeAB/WIN2003
                  exchangeAB/Win2003.<domain>
                  exchangeMDB/Win2003.<domain>
                  exchangeMDB/WIN2003
                  exchangeRFR/Win2003.<domain>
                  exchangeRFR/WIN2003
                  SMTPSVC/WIN2003
                  SMTPSVC/Win2003.<domain>
                  NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/Win2003.<domain>
                  ldap/Win2003.<domain>/ForestDnsZones.<domain>
                  GC/Win2003.<domain>/<domain>
                  HOST/Win2003.<domain>/<DOMAIN>
                  HOST/WIN2003
                  HOST/Win2003.<domain>
                  ldap/Win2003.<domain>/<domain>
                  E3514235-4B06-11D1-AB04-00C04FC2DCD2/8799a23d-c56f-48b3-8cfc-deae5099aa88/<domain>
                  ldap/8799a23d-c56f-48b3-8cfc-deae5099aa88._msdcs.<domain>
                  ldap/Win2003.<domain>/<DOMAIN>
                  ldap/WIN2003
                  ldap/Win2003.<domain>
                  ldap/Win2003.<domain>/DomainDnsZones.<domain>
                  ldap/Win2003.<domain>/<domain>
                  DNS/Win2003.<domain>

                Delegation allowed to following SPNs:

1 REPLY 1

claudia_baur
Employee
Employee
0 Kudos

hi Ingo,

I think SSO22KerbMap needs so much trials to be loaded, because the corresponding workprocess from IIS (w3wp.exe) crashes. You can see this, because always after the line 'Delegation allowed to following SPNs:' the filter is restarted. Normally all output as given by calling 'setspn -L <HOST>' should be wriiten into the log. Reason could be that your configuration looks quite strange or did you change the lines in the logfile?

You wrote:

SSO22KerbMap configuration in C:\SSO22KerbMap.ini:

PseFile: <Path to verify.pse>###<- must be defined

ServicePrincipalName: HOST/Win2003.<domain>###<- which domain?

FilterPriority: High

SSO2AccountAttribute: sAMAccountName

LogLevel: 3

Activated SSO logfile: C:\SSO22KerbMap_SSO.log

In SSO22KerbMap.ini, you should configure the path to the PSE-file fo the portal. Also the domain should be configured correctly. Which output do you get from setspn -L <hostname> (replace hostname by your own one)?

Regards,

Claudia