求助， Nginx 反向代理 Exchange（IIS）遇到的问题。

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

› NGINX

› NGINX Trac

› 3rd Party Modules

› Security Advisories

› CHANGES

› OpenResty

› ngx_lua

› Tengine

在线学习资源

› NGINX 开发从入门到精通

NGINX Modules

› ngx_echo

这是一个创建于 2190 天前的主题，其中的信息可能已经有所发展或是发生改变。

我想在两台 Exchange2016 前加入 nignx （ Tengine ）做反向代理和负载均衡。现在遇到的问题是：OWA 可以正常访问，但是 Outlook （ Mac 端）配置时一直弹窗提示输入用户名和密码，正确输入后说用户名和密码错误。Windows 端也是类似的错误。

配置如下： #mail.test.com.conf

upstream  test {
    server xx.xx.xx.xx;
    server xx.xx.xx.xx;
}
server {
    listen  443 ssl;
    server_name  mail.test.com autodiscover.test.com;
    include rules/ssl.conf; # 设置了服务器证书

    location / {
        index  index.php;
        proxy_pass  http://test/;
		proxy_http_version      1.1;
		proxy_set_header        Connection "";
		proxy_next_upstream         error timeout;
		proxy_set_header        Host $host;
		proxy_set_header        X-Real-IP $remote_addr;
		proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header        X-Forwarded-Proto $scheme;
		proxy_ignore_client_abort on;
    }
}

server {
    listen  80;
    server_name  mail.test.com autodiscover.test.com;
    return 301 https://$host$request_uri;
}

#nginx.conf

worker_processes auto;
worker_cpu_affinity auto;

events {
    worker_connections  65535;
    use epoll;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    server_names_hash_bucket_size 128;

    sendfile        on;
    tcp_nopush      on;
    tcp_nodelay     on;
    gatekeeper_module on;

    fastcgi_connect_timeout 5;
    fastcgi_send_timeout 10;
    fastcgi_read_timeout 10;
    fastcgi_buffer_size 64k;
    fastcgi_buffers 4 64k;
    fastcgi_busy_buffers_size 128k;
    fastcgi_temp_file_write_size 128k;

    keepalive_timeout  60;
    keepalive_requests 1024;
    client_header_buffer_size 4k;
    large_client_header_buffers 4 32k;
    client_max_body_size 10m;
    client_body_buffer_size 512k;
    client_body_timeout 30;
    client_header_timeout 10;
    send_timeout 240;
    proxy_connect_timeout   10s;
    proxy_send_timeout      50s;
    proxy_read_timeout      60s;
    proxy_buffers           64 8k;
    proxy_busy_buffers_size    128k;
    proxy_temp_file_write_size 64k;
    proxy_redirect off;

    gzip on;
    gzip_min_length 1k;
    gzip_buffers 4 16k;
    gzip_http_version 1.0;
    gzip_comp_level 2;
    gzip_types text/plain application/x-javascript text/css text/xml 	   application/xml+css application/json text/javascript;
    gzip_vary on;

    log_format main '$server_addr\t$host\t'
                 '$remote_addr\t$remote_user\t$http_x_forwarded_for\t'
                 '$time_local\t'
                 '$scheme\t$request\t'
                 '*#06#$status*#06#\t$upstream_status\t'
                 '$request_time\t$upstream_addr\t$upstream_response_time\t'
                 '$request_length\t$bytes_sent\t'
                 '$operationid\t$HTTP_DIDI_HEADER_SPANID\t'
                 '$http_referer\t$http_cookie\t$http_user_agent\t'
                 '$limit_rate';

    access_log logs/access.log  main;

    set_real_ip_from 10.0.0.0/8;
    set_real_ip_from 100.64.0.0/10;
    real_ip_header X-Real-IP;

    include conf.d/*.conf;
    include sites-enabled/*;

}

另：当 Exchange 中的认证方式从 Windows 认证改成 Basic 认证后，MAC 端 Outlook 配置成功了，但是 Win 端还不行。

11 条回复 • 2023-09-01 14:15:04 +08:00