Skip to Content
author's profile photo
Former Member

Aplication Pool of OWA crashes after Installing the ISAPI -SSO22KerbMap.dll

Hello *,

we want to configure SSO22KerbMap ISAPI Modul. We have already done all the steps from the Step-by-Step Guide SSO22KerbMap ISAPI Modul. The SSO22KerbMap.dll is already loaded after round about 50 tries. Now the SSO22KerbMap.dll is loaded successfully, but the Outlook Web Access crashed down. We already have restarted the IIS and the WWW Services, but there where no changes. Anybody an idea?

Regards Ingo

Log File:

15:35:09 7276/6808 I SSO22KerbMap.dll 1.1.0.8 is initialized

                SSO22KerbMap configuration in C:SSO22KerbMap.ini:
                  PseFile: <Path to verify.pse>
                  ServicePrincipalName: HOST/Win2003.<domain>
                  FilterPriority: High
                  SSO2AccountAttribute: sAMAccountName
                  LogLevel: 3
                  Activated SSO logfile: C:SSO22KerbMap_SSO.log

15:35:09 7276/6808 I ADSI Configuration for delegation on host WIN2003:

                ServicePrincipalNames:
                  exchangeAB/WIN2003
                  exchangeAB/Win2003.<domain>
                  exchangeMDB/Win2003.<domain>
                  exchangeMDB/WIN2003
                  exchangeRFR/Win2003.<domain>
                  exchangeRFR/WIN2003
                  SMTPSVC/WIN2003
                  SMTPSVC/Win2003.<domain>
                  NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/Win2003.<domain>
                  ldap/Win2003.<domain>/ForestDnsZones.<domain>
                  GC/Win2003.<domain>/<domain>
                  HOST/Win2003.<domain>/<DOMAIN>
                  HOST/WIN2003
                  HOST/Win2003.<domain>
                  ldap/Win2003.<domain>/<domain>
                  E3514235-4B06-11D1-AB04-00C04FC2DCD2/8799a23d-c56f-48b3-8cfc-deae5099aa88/<domain>
                  ldap/8799a23d-c56f-48b3-8cfc-deae5099aa88._msdcs.<domain>
                  ldap/Win2003.<domain>/<DOMAIN>
                  ldap/WIN2003
                  ldap/Win2003.<domain>
                  ldap/Win2003.<domain>/DomainDnsZones.<domain>
                  ldap/Win2003.<domain>/<domain>
                  DNS/Win2003.<domain>

                Delegation allowed to following SPNs:

15:35:09 4948/6804 I SSO22KerbMap.dll 1.1.0.8 is initialized

                SSO22KerbMap configuration in C:SSO22KerbMap.ini:
                  PseFile: <Path to verify.pse>
                  ServicePrincipalName: HOST/Win2003.<domain>
                  FilterPriority: High
                  SSO2AccountAttribute: sAMAccountName
                  LogLevel: 3
                  Activated SSO logfile: C:SSO22KerbMap_SSO.log

15:35:09 4948/6804 I ADSI Configuration for delegation on host WIN2003:

                ServicePrincipalNames:
                  exchangeAB/WIN2003
                  exchangeAB/Win2003.<domain>
                  exchangeMDB/Win2003.<domain>
                  exchangeMDB/WIN2003
                  exchangeRFR/Win2003.<domain>
                  exchangeRFR/WIN2003
                  SMTPSVC/WIN2003
                  SMTPSVC/Win2003.<domain>
                  NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/Win2003.<domain>
                  ldap/Win2003.<domain>/ForestDnsZones.<domain>
                  GC/Win2003.<domain>/<domain>
                  HOST/Win2003.<domain>/<DOMAIN>
                  HOST/WIN2003
                  HOST/Win2003.<domain>
                  ldap/Win2003.<domain>/<domain>
                  E3514235-4B06-11D1-AB04-00C04FC2DCD2/8799a23d-c56f-48b3-8cfc-deae5099aa88/<domain>
                  ldap/8799a23d-c56f-48b3-8cfc-deae5099aa88._msdcs.<domain>
                  ldap/Win2003.<domain>/<DOMAIN>
                  ldap/WIN2003
                  ldap/Win2003.<domain>
                  ldap/Win2003.<domain>/DomainDnsZones.<domain>
                  ldap/Win2003.<domain>/<domain>
                  DNS/Win2003.<domain>

                Delegation allowed to following SPNs:

15:35:20 6248/6752 I SSO22KerbMap.dll 1.1.0.8 is initialized

                SSO22KerbMap configuration in C:SSO22KerbMap.ini:
                  PseFile: <Path to verify.pse>
                  ServicePrincipalName: HOST/Win2003.<domain>
                  FilterPriority: High
                  SSO2AccountAttribute: sAMAccountName
                  LogLevel: 3
                  Activated SSO logfile: C:SSO22KerbMap_SSO.log

15:35:20 6248/6752 I ADSI Configuration for delegation on host WIN2003:

                ServicePrincipalNames:
                  exchangeAB/WIN2003
                  exchangeAB/Win2003.<domain>
                  exchangeMDB/Win2003.<domain>
                  exchangeMDB/WIN2003
                  exchangeRFR/Win2003.<domain>
                  exchangeRFR/WIN2003
                  SMTPSVC/WIN2003
                  SMTPSVC/Win2003.<domain>
                  NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232/Win2003.<domain>
                  ldap/Win2003.<domain>/ForestDnsZones.<domain>
                  GC/Win2003.<domain>/<domain>
                  HOST/Win2003.<domain>/<DOMAIN>
                  HOST/WIN2003
                  HOST/Win2003.<domain>
                  ldap/Win2003.<domain>/<domain>
                  E3514235-4B06-11D1-AB04-00C04FC2DCD2/8799a23d-c56f-48b3-8cfc-deae5099aa88/<domain>
                  ldap/8799a23d-c56f-48b3-8cfc-deae5099aa88._msdcs.<domain>
                  ldap/Win2003.<domain>/<DOMAIN>
                  ldap/WIN2003
                  ldap/Win2003.<domain>
                  ldap/Win2003.<domain>/DomainDnsZones.<domain>
                  ldap/Win2003.<domain>/<domain>
                  DNS/Win2003.<domain>

                Delegation allowed to following SPNs:

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

1 Answer

  • Posted on Aug 21, 2007 at 12:39 PM

    hi Ingo,

    I think SSO22KerbMap needs so much trials to be loaded, because the corresponding workprocess from IIS (w3wp.exe) crashes. You can see this, because always after the line 'Delegation allowed to following SPNs:' the filter is restarted. Normally all output as given by calling 'setspn -L <HOST>' should be wriiten into the log. Reason could be that your configuration looks quite strange or did you change the lines in the logfile?

    You wrote:

    SSO22KerbMap configuration in C:\SSO22KerbMap.ini:

    PseFile: <Path to verify.pse>###<- must be defined

    ServicePrincipalName: HOST/Win2003.<domain>###<- which domain?

    FilterPriority: High

    SSO2AccountAttribute: sAMAccountName

    LogLevel: 3

    Activated SSO logfile: C:\SSO22KerbMap_SSO.log

    In SSO22KerbMap.ini, you should configure the path to the PSE-file fo the portal. Also the domain should be configured correctly. Which output do you get from setspn -L <hostname> (replace hostname by your own one)?

    Regards,

    Claudia

    Add comment
    10|10000 characters needed characters exceeded