This document explains how to set up Outlook Web Access 2003 with Novell Access Manager 3.0 with Single Sign On and webdav access.


First you need to set up owa to use basic authentication.

1. In Internet Information Manager, go to Websites > Default website and find the folders exchweb, Exchange and public.

2. For the folders “Exchange” and “public” enable only Basic Authentication and enter your domain.

3. For the folder “exchweb” enable anonymous access.

If your external domain name is different than the internal domain name for owa you need to add a virtual host for owa. Because we’re also using owa internally, I added a secondary ip-address to the owa server and put the virtual host on it.

4. In the Advanced Web Site Identification of the default website, add the secondary IP address and enter your external domain name in the Host Header value.

Next you need to create a path-based reverse proxy for owa.

5. Add the paths /Exchange, /exchweb and /public to the path list.

6. Add the secondary ip-address created on the owa server to the web server list.

7. For the Exchange and public folder you need identity injection, so create a protected resource for these folders.

8. Create an Exchange policy.

9. In this policy create two rules.

10. In the first rule inject the user credentials into the authentication header.

11. In the second rule insert the custom header “Front-End-Https: on” so the owa web server knows the client is using a ssl connection.

For more information, see Microsoft Article 307347.

12. Outlook Web Access shouldn’t be cached except for the images, so add the exchange folders to the pin list.

Now you can access Outlook Web Access 2003 on, and your users are able to move and delete e-mail and don’t get any security warnings about displaying nonsecure items.

0 votes, average: 0.00 out of 50 votes, average: 0.00 out of 50 votes, average: 0.00 out of 50 votes, average: 0.00 out of 50 votes, average: 0.00 out of 5 (0 votes, average: 0.00 out of 5)
You need to be a registered member to rate this post.
Categories: Uncategorized

Disclaimer: As with everything else at NetIQ Cool Solutions, this content is definitely not supported by NetIQ, so Customer Support will not be able to help you if it has any adverse effect on your environment.  It just worked for at least one person, and perhaps it will be useful for you too.  Be sure to test in a non-production environment.

Leave a Reply

No Comments
By: aob
Mar 18, 2008
4:09 am
Active Directory Authentication Automation Cloud Computing Cloud Security Configuration Customizing Data Breach DirXML Drivers End User Management Identity Manager Importing-Exporting / ICE/ LDIF Intelligent Workload Management IT Security Knowledge Depot LDAP Monitoring Open Enterprise Server Passwords Reporting Secure Access Supported Troubleshooting Workflow