After an upgrade, O365 Mapi/Http collection tasks fail during AutoDiscovery

book

Article ID: 100043472

calendar_today

Updated On:

Description

Error Message

<< Job Status Log >>
An Error occurred while running ExchangeAutoDiscovery during ExchangeCollection. Status code 3.
Collection job info: TaskRunID: 0.34.6.### Task ID: 0.27.6.### Message: An Error occurred while running ExchangeAutoDiscovery during ExchangeCollection Type: EXCHANGECOLLECTION_Error


<< icp-remoteicpjob@470##.log >>
YYYY-MM-DD HH:MM:SS,MS INFO [common.security.SSLClientServiceImpl] (RPC-thread-1 - hostname:2595:2757103752670957555:) Created SSL Client socket.
YYYY-MM-DD HH:MM:SS,MS INFO [icp.collection.MailServerCollectionJob] (RPC-thread-1 - hostname:2595:2757103752670957555:) Established SSL Channel for communication.
YYYY-MM-DD HH:MM:SS,MS INFO [icp.collection.ExchangeCollectionJob] (RPC-thread-1 - hostname:2595:2757103752670957555:) Terminated SSL Channel.
YYYY-MM-DD HH:MM:SS,MS INFO [icp.collection.MailServerCollectionJob] (RPC-thread-1 - hostname:2595:2757103752670957555:) An Error occurred while running ExchangeAutoDiscovery during ExchangeCollection. Status code 3. , Process Id:0, Exit code:3
YYYY-MM-DD HH:MM:SS,MS WARN [common.database.MTBatchPersistanceManager] (RPC-thread-1 - hostname:2595:2757103752670957555:) [#81032] Rolling back the batch!
YYYY-MM-DD HH:MM:SS,MS Error [collection.event.TaskEventManagerImpl] (RPC-thread-1 - hostname:2595:2757103752670957555:) [#422222] Could not save collection event {0}
java.lang.IllegalStateException: CollectionJobUpdates for SCANDIR_Error events must contain a scandir Error property
at com.teneo.esa.icp.collection.event.ScandirErrorTaskEvent.initialize(ScandirErrorTaskEvent.java:64)
at com.teneo.esa.icp.collection.event.TaskEventType.createEvent(TaskEventType.java:199)


<< ExchangeAutoDiscovery_output.log >>
YYYY-MM-DD HH:MM:SS,MS [8164] INFO O365AutoDiscover - getExchangeProfileDetails : NTML Auth is enabled in Exchange Profile
YYYY-MM-DD HH:MM:SS,MS [8164] INFO O365AutoDiscover - Credentials for AutoDiscoveryService: Domain: [domain], UserID: [source_account]
YYYY-MM-DD HH:MM:SS,MS [8164] DEBUG O365AutoDiscover - Default credentials are used for creating webrequest with requestUrl : https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml request : source_account@domain.comhttp://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a
YYYY-MM-DD HH:MM:SS,MS [8164] INFO O365AutoDiscover - credentials passed explicitly used for creating webrequest
YYYY-MM-DD HH:MM:SS,MS [8164] INFO O365AutoDiscover - WebException in getExchangeProfileDetails(): Attempt: 1 Exception Type: System.Net.WebException, Exception Message: The remote server returned an Error: (401) Unauthorized., Status: ProtocolError
YYYY-MM-DD HH:MM:SS,MS [8164] Error ngeAutoDiscovery - Unexpected Error occured while performing Exchange AutoDiscovery
YYYY-MM-DD HH:MM:SS,MS [8164] Error ngeAutoDiscovery - at System.Net.HttpWebRequest.GetResponse()

Cause

Office 365's Exchange service uses Basic authentication only with the MAPI over HTTP protocol. NTLM authentication was supported with the RPC over HTTP (Outlook Anywhere) protocol used in eDiscovery versions prior to 8.2.7 or 8.3.2. NTLM authentication could be set in eDiscovery using a property setting that carried over during the upgrade to versions 8.2.7, 8.3.2 or 9.0.

Resolution

Log in to Veritas eDiscovery as a user with System Administrator privileges
• Click System > Support Features
• Select Property Browser from the Choose a Support Feature drop-down.
• Select System from the Select the case (or system)
• Name of property to change: esa.icp.exchange.online.isntlmauthreq
• New value (leave blank to remove) false
Check the Confirm change.
• Click Submit.

A services restart is not required for this value to take effect on the next O365 collection task.

 

Issue/Introduction

After upgrading eDiscovery, O365 mailbox collection tasks using the Mapi/Http method that succeeded in the previous version now fail during the AutoDiscovery phase.