Browzer for MS Exchange OWA

I'm very interested in combining BrowZer with our on-prem Exchange server. IMO Exchange has a questionable history of security issues and using BrowZer to decouple it from the internet is a compelling idea.

I've got my OpenZiti overlay working. I believe I've got BrowZer working too. The bootstrapper starts, I login to the auth provider, and eventually I'm shown the login page for OWA. But the login process just loops. Put in password, click login, back to login page again.

I compared the network activity from a good (no browzer) login vs a browzer login. There's supposed to be a POST that returns a bunch of cookies. Those cookies are present in the next request which eventually loads the mailbox. In the browzer session the cookies don't come through and are absent on the following request.

I confirmed that OWA doesn't seem to care which FQDN I use to reach it. I setup a hosts file entry and ran a test w/o browzer. Works fine. It doesn't seem to mind being behind a reverse proxy.

Any thoughts or suggestions on how to debug this further or tweak browzer?

Hi @ghibsch,

Thanks for trying out browZer with your private Exchange/OWA. I'm excited you're doing this because this use case is one on our list that we haven't gotten to yet.

Which version of browZer are you running right now?

If you are willing, here are some suggestions that will help me troubleshoot (via private msgs):

  • Set your client-side trace level to TRACE (set env var ZITI_BROWZER_RUNTIME_LOGLEVEL=trace in bootstrapper), then open dev tools, go through the failing flow, then save the Console log and send it to me, and save the Network har file and send that to me.

I'm happy to do what I can. I'll work up that trace and send your way.

BrowZer version appears to be 0.60.3. It's just the github zip file from main as of yesterday I think.

OK, you have the latest. I recently fixed a similar Cookie issue to what you described (in 0.60.2), so wanted to make sure you had that fix.
Also, see my "private Discourse chat" msg to you.

Hey Bobby, I have good news... OWA over browZer is a reality... see below:

I have a bit more testing to do tomorrow (Wed) but I'll release the fix for you soon.

2 Likes

That's VERY good news! Thank you!

I just updated to the latest browzer code from Github and OWA is working!

1 Like

Terrific. Thanks for the update, Bobby.