Tengo dos dominios que estoy tratando de compartir calendario de disponibilidad de información entre a través de la federación. SiteA es una premisa de implementación de Exchange 2010 SP2. Sitiob es un Office 365 implementación de la Empresa.
Ambas organizaciones están federados a través de la MSFT puerta de enlace.
Intercambio de obras de SiteA Sitiob, es decir, un usuario en el Sitiob puede solicitar el acceso a un usuario en el Sitioa y ver su calendario.
Compartir no es el trabajo de SiteB a SiteA.
Prueba de funcionamiento-OrganizationRelationship muestra lo siguiente:
[PS] C:\Windows\system32>Test-OrganizationRelationship -UserIdentity me@site.a -Identity siteB -verbose
VERBOSE: [20:24:06.006 GMT] Test-OrganizationRelationship : Active Directory session settings for
'Test-OrganizationRelationship' are: View Entire Forest: 'False', Default Scope: 'mydomain', Configuration
Domain Controller: 'mydc', Preferred Global Catalog: 'mygc', Preferred
Domain Controllers: '{ mydc1, mydc2 }'
VERBOSE: [20:24:06.006 GMT] Test-OrganizationRelationship : Runspace context: Executing user:
me@site.a, Executing user organization: , Current organization: , RBAC-enabled: Enabled.
VERBOSE: [20:24:06.006 GMT] Test-OrganizationRelationship : Beginning processing &
VERBOSE: [20:24:06.006 GMT] Test-OrganizationRelationship : Instantiating handler with index 0 for cmdlet extension
agent "Admin Audit Log Agent".
VERBOSE: [20:24:06.037 GMT] Test-OrganizationRelationship : Current ScopeSet is: { Recipient Read Scope: {{, }},
Recipient Write Scopes: {{, }}, Configuration Read Scope: {{, }}, Configuration Write Scope(s): {{, }, }, Exclusive
Recipient Scope(s): {}, Exclusive Configuration Scope(s): {} }
VERBOSE: [20:24:06.037 GMT] Test-OrganizationRelationship : Searching objects "me" of type "ADUser" under the root
"$null".
VERBOSE: [20:24:06.037 GMT] Test-OrganizationRelationship : Previous operation run on global catalog server
'mygc'.
VERBOSE: [20:24:06.037 GMT] Test-OrganizationRelationship : Searching objects "siteB" of type "OrganizationRelationship"
under the root "$null".
VERBOSE: [20:24:06.037 GMT] Test-OrganizationRelationship : Previous operation run on domain controller
'mydc'.
VERBOSE: Test that organization relationships are properly configured.
VERBOSE: [20:24:06.053 GMT] Test-OrganizationRelationship : Resolved current organization: .
VERBOSE: [20:24:06.053 GMT] Test-OrganizationRelationship : Calling the Microsoft Exchange Autodiscover service for the
remote federation information.
VERBOSE: [20:24:09.084 GMT] Test-OrganizationRelationship : The Autodiscover call succeeded for the following URL:
https://pod51041.outlook.com/autodiscover/autodiscover.svc.
VERBOSE: [20:24:09.084 GMT] Test-OrganizationRelationship : The Autodiscover call succeeded for the following URL:
https://pod51041.outlook.com/autodiscover/autodiscover.svc.
VERBOSE: [20:24:09.084 GMT] Test-OrganizationRelationship : The Autodiscover call succeeded for the following URL:
https://pod51041.outlook.com/autodiscover/autodiscover.svc.
VERBOSE: [20:24:09.084 GMT] Test-OrganizationRelationship : The Autodiscover call succeeded for the following URL:
https://pod51041.outlook.com/autodiscover/autodiscover.svc.
VERBOSE: [20:24:09.084 GMT] Test-OrganizationRelationship : Generating delegation token for user me@siteA for
application http://outlook.com/.
VERBOSE: [20:24:09.366 GMT] Test-OrganizationRelationship : The delegation token was successfully generated.
VERBOSE: [20:24:09.366 GMT] Test-OrganizationRelationship : The Microsoft Exchange Autodiscover service is being called
to determine the remote organization relationship settings.
VERBOSE: [20:24:09.366 GMT] Test-OrganizationRelationship : The Client will call the Microsoft Exchange Autodiscover
service using the following URL: https://pod51041.outlook.com/autodiscover/autodiscover.svc/WSSecurity.
VERBOSE: [20:24:10.553 GMT] Test-OrganizationRelationship : The Microsoft Exchange Autodiscover service failed to be
called at 'https://pod51041.outlook.com/autodiscover/autodiscover.svc/WSSecurity' because the following error occurred:
WebException.Response = <cannot read response stream>
Exception:
System.Net.WebException: The request failed with HTTP status 404: Not Found.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse
No puedo encontrar ninguna razón para estar fallando. Es al fallar en la detección automática de llamadas para wssecurity. Todos los mensajes en línea decir para habilitar wssecurity para el directorio virtual, pero que no es una opción para una completa implementación en línea de Office 365. Francamente, el uso compartido federado de O365 debe "Sólo el Trabajo"
Esta pieza siguiente es la Org relación a los datos de SiteB (O365) a SiteA (EX de 2010)
PS C:\Users\me> Get-OrganizationRelationship | fl
Creating a new session for implicit remoting of "Get-OrganizationRelationship" command...
RunspaceId : b56a8f0b-7e7e-4e8c-bf5c-c33209e59b13
DomainNames : {SiteA}
FreeBusyAccessEnabled : True
FreeBusyAccessLevel : LimitedDetails
FreeBusyAccessScope :
MailboxMoveEnabled : False
DeliveryReportEnabled : False
MailTipsAccessEnabled : False
MailTipsAccessLevel : None
MailTipsAccessScope :
PhotosEnabled : False
TargetApplicationUri : FYDIBOHF25SPDLT.SiteA.us
TargetSharingEpr :
TargetOwaURL :
TargetAutodiscoverEpr : https://autodiscover.SiteA.us/autodiscover/autodiscover.svc/WSSecurity
OrganizationContact :
Enabled : True
ArchiveAccessEnabled : False
UseOAuth : False
AdminDisplayName :
ExchangeVersion : 0.10 (14.0.100.0)
Name : SiteA
DistinguishedName : CN=SiteA,CN=Federation,CN=Configuration,CN=appriver3651001356.onmicrosoft.com,CN=ConfigurationUni
ts,DC=NAMPR04A001,DC=prod,DC=outlook,DC=com
Identity : SiteA
Guid : d01ce3d5-6b47-41c6-b597-9f5ed5aca4a8
ObjectCategory : NAMPR04A001.prod.outlook.com/Configuration/Schema/ms-Exch-Fed-Sharing-Relationship
ObjectClass : {top, msExchFedSharingRelationship}
WhenChanged : 7/19/2013 3:36:22 AM
WhenCreated : 7/19/2013 3:36:13 AM
WhenChangedUTC : 7/19/2013 10:36:22 AM
WhenCreatedUTC : 7/19/2013 10:36:13 AM
OrganizationId : NAMPR04A001.prod.outlook.com/Microsoft Exchange Hosted
Organizations/appriver3651001356.onmicrosoft.com - NAMPR04A001.prod.outlook.com/ConfigurationUn
its/appriver3651001356.onmicrosoft.com/Configuration
OriginatingServer : BL2PR04A001DC06.NAMPR04A001.prod.outlook.com
IsValid : True
ObjectState : Unchanged
Y esta es de SiteA (EX 2010) Sitiob (O365)
[PS] C:\Windows\system32>Get-OrganizationRelationship | fl
RunspaceId : a9029d90-cdf0-494a-85ea-a960bc04f023
DomainNames : {SiteB domains, 4 total}
FreeBusyAccessEnabled : True
FreeBusyAccessLevel : LimitedDetails
FreeBusyAccessScope :
MailboxMoveEnabled : False
DeliveryReportEnabled : False
MailTipsAccessEnabled : False
MailTipsAccessLevel : None
MailTipsAccessScope :
TargetApplicationUri : http://outlook.com/
TargetSharingEpr :
TargetOwaURL :
TargetAutodiscoverEpr : https://pod51041.outlook.com/autodiscover/autodiscover.svc/WSSecurity
OrganizationContact :
Enabled : True
ArchiveAccessEnabled : False
AdminDisplayName :
ExchangeVersion : 0.10 (14.0.100.0)
Name : SiteB
DistinguishedName : CN=SiteB,CN=Federation,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=my,DC=site
Identity : SiteB
Guid : 458f9921-f2f8-4286-92e2-a3f0b8c444f1
ObjectCategory : Mysite/Configuration/Schema/ms-Exch-Fed-Sharing-Relationship
ObjectClass : {top, msExchFedSharingRelationship}
WhenChanged : 7/19/2013 10:37:58 PM
WhenCreated : 7/19/2013 3:16:18 PM
WhenChangedUTC : 7/20/2013 5:37:58 AM
WhenCreatedUTC : 7/19/2013 10:16:18 PM
OrganizationId :
OriginatingServer : MyDC
IsValid : True
Cabe señalar que cuando entro en el TargetAutodiscoverEPR (https://pod51041.outlook.com/autodiscover/autodiscover.svc/WSSecurity) se me pide las credenciales, lo que significa que el error 404 que tengo es una tontería.
La otra cosa rara que he notado es que cuando me la instalación de la Relación de la Organización de Sitioa a SiteB. La ejecución de Get-FederationInformation produce el siguiente para Sitiob
PS C:\Users\me> Get-FederationInformation -DomainName SiteB
Creating a new session for implicit remoting of "Get-FederationInformation" command...
RunspaceId : d6086380-948f-43db-9d0c-4ba7325b5a20
TargetApplicationUri : outlook.com
DomainNames : {SiteB domains, 4 total}
TargetAutodiscoverEpr : https://pod51041.outlook.com/autodiscover/autodiscover.svc/WSSecurity
TokenIssuerUris : {urn:federation:MicrosoftOnline}
IsValid : True
ObjectState : Unchanged
El TargetApplicationUri de estados unidos "outlook.com" y eso es lo que tengo que entró cuando yo instalación de la Org Relación en el SiteA EMC. Sin embargo, el intercambio no lo trabajo y a las pruebas me dieron los siguientes
PS C:\Users\me> Test-OrganizationRelationship -UserIdentity me@SiteB -Identity SiteA
RunspaceId : d6086380-948f-43db-9d0c-4ba7325b5a20
Identity :
Id : ApplicationUrisDiffer
Status : Error
Description : The TargetApplicationUri of the remote organization doesn't match the local ApplicationUri of the
Federation Trust object. The remote URI value is http://outlook.com/. The local URI value is
outlook.com/.
IsValid : True
ObjectState : New
RunspaceId : d6086380-948f-43db-9d0c-4ba7325b5a20
Identity :
Id : VerificationOfRemoteOrganizationRelationshipFailed
Status : Error
Description : There were errors while verifying the remote organization relationship SiteB.
IsValid : True
ObjectState : New
Yo había manualmente ir a la Org de la Relación de objeto (SiteA confianza de Sitiob) y el cambio en la URI de "outlook.com" a "http://outlook.com" para el intercambio de trabajar en esa dirección. Esta es otra peculiaridad de la configuración de todo esto que me está haciendo algo que este es un MSFT problema en el O365 lado...