I want to join nignx (Tengine) in front of the two Exchange2016 to do reverse proxy and load balancing. The problem encountered now is that OWA can be accessed normally, but the Outlook (Mac side always pops up to prompt for a user name and password, and the user name and password are said to be incorrect after entering them correctly. There is a similar error on the Windows side.

configuration is as follows:

mail.test.com.conf

upstream  test {
    server xx.xx.xx.xx;
    server xx.xx.xx.xx;
}
server {
    listen  443 ssl;
    server_name  mail.test.com autodiscover.test.com;
    include rules/ssl.conf; -sharp 

    location / {
        index  index.php;
        proxy_pass  http://test/;
        proxy_http_version      1.1;
        proxy_set_header        Connection "";
        proxy_next_upstream         error timeout;
        proxy_set_header        Host $host;
        proxy_set_header        X-Real-IP $remote_addr;
        proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header        X-Forwarded-Proto $scheme;
        proxy_ignore_client_abort on;
    }
}

server {
    listen  80;
    server_name  mail.test.com autodiscover.test.com;
    return 301 https://$host$request_uri;
}

nginx.conf

worker_processes auto;
worker_cpu_affinity auto;

events {
    worker_connections  65535;
    use epoll;
}


http {
    include       mime.types;
    default_type  application/octet-stream;

    server_names_hash_bucket_size 128;

    sendfile        on;
    tcp_nopush      on;
    tcp_nodelay     on;
    gatekeeper_module on;

    fastcgi_connect_timeout 5;
    fastcgi_send_timeout 10;
    fastcgi_read_timeout 10;
    fastcgi_buffer_size 64k;
    fastcgi_buffers 4 64k;
    fastcgi_busy_buffers_size 128k;
    fastcgi_temp_file_write_size 128k;

    keepalive_timeout  60;
    keepalive_requests 1024;
    client_header_buffer_size 4k;
    large_client_header_buffers 4 32k;
    client_max_body_size 10m;
    client_body_buffer_size 512k;
    client_body_timeout 30;
    client_header_timeout 10;
    send_timeout 240;
    proxy_connect_timeout   10s;
    proxy_send_timeout      50s;
    proxy_read_timeout      60s;
    proxy_buffers           64 8k;
    proxy_busy_buffers_size    128k;
    proxy_temp_file_write_size 64k;
    proxy_redirect off;

    gzip on;
    gzip_min_length 1k;
    gzip_buffers 4 16k;
    gzip_http_version 1.0;
    gzip_comp_level 2;
    gzip_types text/plain application/x-javascript text/css text/xml        application/xml+css application/json text/javascript;
    gzip_vary on;

    log_format main "$server_addr\t$host\t"
                 "$remote_addr\t$remote_user\t$http_x_forwarded_for\t"
                 "$time_local\t"
                 "$scheme\t$request\t"
                 "*-sharp06-sharp$status*-sharp06-sharp\t$upstream_status\t"
                 "$request_time\t$upstream_addr\t$upstream_response_time\t"
                 "$request_length\t$bytes_sent\t"
                 "$operationid\t$HTTP_DIDI_HEADER_SPANID\t"
                 "$http_referer\t$http_cookie\t$http_user_agent\t"
                 "$limit_rate";

    access_log logs/access.log  main;

    set_real_ip_from 10.0.0.0/8;
    set_real_ip_from 100.64.0.0/10;
    real_ip_header X-Real-IP;

    include conf.d/*.conf;
    include sites-enabled/*;
}

* another: when the authentication method in Exchange is changed from Windows authentication to Basic authentication, Outlook on MAC is configured successfully, but not on Win.