• State Not Answered
  • Replies 1 reply
  • Subscribers 18 subscribers
  • Views 1063 views
  • Users 0 members are here
Options
Related

error 401 accessing mailbox of admin for MNE during first configuration

benoit maillet

Hi all.

I am trying to configure Migrator for Notes to Exchange for the first time to migrate Domino to Exchange on premise.

I created a user in my exchange 2019 to act as an admin for the migraiton.

i give him the receive-as permissions on the database.

outlook 2013 pro plus and latests patchs applied, it is connecting well to his mailbox.

but when i configure the Exchange part on MNE, i got an error:

unable to open target mail store

and in console logs:

Microsoft.Identity.Client.MsalClientException: User realm discovery failed

...

System.Net.WebException: The remote server returned an error: (401) Unauthorized.

login for y admin user and password are correct as they works in outlook and even in owa.

So where can i check for more error report or do i need to change something in configuration ?

Parents
  • 0

    The MSAL client exception combined with the 401 is a tell that MNE is trying to authenticate through modern auth or Azure AD discovery rather than basic auth against your on-prem Exchange. With Exchange 2019 on-premise, worth checking whether the EWS virtual directory has Windows Authentication enabled and that Basic Auth is not being blocked at the IIS level. Also confirm the admin account you created has impersonation rights via ApplicationImpersonation RBAC role, since receive-as alone is sometimes not enough for MNE to open the mailbox store programmatically.

Reply
  • 0

    The MSAL client exception combined with the 401 is a tell that MNE is trying to authenticate through modern auth or Azure AD discovery rather than basic auth against your on-prem Exchange. With Exchange 2019 on-premise, worth checking whether the EWS virtual directory has Windows Authentication enabled and that Basic Auth is not being blocked at the IIS level. Also confirm the admin account you created has impersonation rights via ApplicationImpersonation RBAC role, since receive-as alone is sometimes not enough for MNE to open the mailbox store programmatically.

Children
No Data