Exchange 2016 hybrid owa "Something went wrong"

Joe 26 Reputation points
2021-11-21T22:46:47.507+00:00

Hi

When signing into https://mail.domain.com/owa it returns:

:-(
Something went wrong
We can't get that information right now. Please try again later.
X-FEServer SERVERNAME
Date: DATE

When entering the incorrect auth details, OWA advises the wrong details were entered.

https://mail.domain.com/ecp works correctly.

We've tried:
Checked the certs are valid and bindings are correct
Deleted and recreated owa and ecp virtual directories
Recreated SharedWebConfig.config in ClientAccess and Frontend/httpproxy.
No owa errors in the event logs.
Doubt it's any of the above due to ECP working, suspect it's in the OWA redirect process.

All mailboxes are hosted in O365, OWA simply used to display a link to access the O356 mailbox.
The TargetOwaURL is correct in Get-OrganizationRelationship.

Same 'something went wrong' error when browsing owa in the Default Web Site in IIS to https://127.0.0.1:443 and https://localhost
When browsing owa in Exchange Back End on https://localhost:444 - "this page can't be displayed" https://localhost:444/owa/auth/errorFE.aspx?httpCode=404

This issue was noticed after the upgrade from CU21 to CU22 + the November SU, although it may have been an issue previously and not noticed.

Thanks

Exchange | Exchange Server | Management
{count} vote

Accepted answer
  1. Brandon-3548 81 Reputation points
    2021-11-22T05:04:59.71+00:00

    Looks like it's listed as a known issue on the Exchange blog which I didn't see first time
    https://techcommunity.microsoft.com/t5/exchange-team-blog/released-november-2021-exchange-server-security-updates/ba-p/2933169/highlight/true/page/3"
    "11/11: Added a known issue with OWA redirect for hybrid customers"

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. Amit Singh 5,306 Reputation points
    2021-11-22T11:50:30.33+00:00

    This issue occurs if the Exchange Server Auth Certificate used for OAuth signing is missing from the Exchange Server. You can run the following command to check whether the certificate is missing:

    Get-ExchangeCertificate (Get-AuthConfig).CurrentCertificateThumbprint
    

    For Exchange Server 2016, install Cumulative Update 9 or a later cumulative update for Exchange Server 2016.

    Also, you can check out How to Fix HTTP ERROR 500 in ECP/EAC after Login article for help.

    1 person found this answer helpful.
    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.