[horde] ActiveSync Connection

[Michael J Rubinsky]

Quoting Johannes Mock <mockjs at idmt.fraunhofer.de>:

> On 03/31/15 18:16, Johannes Mock wrote:
>> On 03/04/15 02:32, Michael J Rubinsky wrote:
>>> Quoting Michael J Rubinsky <mrubinsk at horde.org>:
>>>
>>>> Quoting Johannes Mock <mockjs at idmt.fraunhofer.de>:
>>>>
>>>>> On 01/19/2015 08:56 PM, Michael J Rubinsky wrote:
>>>>>> Quoting Johannes Mock <mockjs at idmt.fraunhofer.de>:
>>>>>>
>>>>>>> Hello together
>>>>>>>
>>>>>>> I want to sync my Horde Server with different devices via
>>>>>>> ActiveSync. I
>>>>>>> set all configurations and tried to sync. The device finds the
>>>>>>> server,
>>>>>>> but said sync couln'd finish because username or password is
>>>>>>> incorrect.
>>>>>>>
>>>>>>> Problem: Username and Password are correct.
>>>>>>> The server syncs perfectly via CalDAV.
>>>>>>>
>>>>>>> The configuration for my ActiveSync is the following:
>>>>>>>
>>>>>>> $conf['activesync']['params']['driverconfig'] = 'horde';
>>>>>>> $conf['activesync']['storage'] = 'Sql';
>>>>>>> $conf['activesync']['emailsync'] = true;
>>>>>>> $conf['activesync']['version'] = '14.1';
>>>>>>> $conf['activesync']['auth']['params']['username_field'] =
>>>>>>> 'SSL_CLIENT_S_DN_CN';
>>>>>>> $conf['activesync']['auth']['params']['password_source'] = 'none';
>>>>>>> $conf['activesync']['auth']['type'] = 'basic_cert';
>>>>>>> $conf['activesync']['autodiscovery'] = 'user';
>>>>>>> $conf['activesync']['outlookdiscovery'] = false;
>>>>>>> $conf['activesync']['logging']['type'] = false;
>>>>>>> $conf['activesync']['ping']['heartbeatmin'] = 60;
>>>>>>> $conf['activesync']['ping']['heartbeatmax'] = 2700;
>>>>>>> $conf['activesync']['ping']['heartbeatdefault'] = 480;
>>>>>>> $conf['activesync']['ping']['deviceping'] = true;
>>>>>>> $conf['activesync']['ping']['waitinterval'] = 15;
>>>>>>> $conf['activesync']['enabled'] = true;
>>>>>>>
>>>>>>> and the ActiveSync specifications in the Virtual Host:
>>>>>>>
>>>>>>> Alias /Microsoft-Server-ActiveSync /var/www/html/horde/rpc.php
>>>>>>>
>>>>>>>  <Directory "/var/www/html/horde/">
>>>>>>>
>>>>>>>        RewriteEngine On
>>>>>>>        RewriteRule ^Microsoft-Server-ActiveSync /rpc.php
>>>>>>>        RewriteRule .* -
>>>>>>> [E=HTTP_MS_ASPROTOCOLVERSION:%{HTTP:Ms-Asprotocolversion}]
>>>>>>>        RewriteRule .* -
>>>>>>> [E=HTTP_X_MS_POLICYKEY:%{HTTP:X-Ms-Policykey}]
>>>>>>>        RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
>>>>>>>
>>>>>>>   </Directory>
>>>>>>>
>>>>>>> Did anyone have the same problem?! How can I connect to the server
>>>>>>> via
>>>>>>> ActiveSync or what configuration parameters do I have to change?
>>>>>>>
>>>>>>> Greetings
>>>>>>> Johannes
>>>>>> Since you are using client certificate validation, my first thought is
>>>>>> that the certificate is not valid or the username you are getting from
>>>>>> SSL_CLIENT_S_DN_CN is not the username used during authentication. Try
>>>>>> just plain authentication to rule out problems with the cert. Another
>>>>>> thing to check is full email vs username only etc...
>>>>>>
>>>>>>
>>>>>>
>>>>> The connecting problem must be on the server side. The certificate is
>>>>> valid and username and password are submitted correctly. I tested it
>>>>> via
>>>>> a Nexus 7 and also via Microsoft Outlook 2013 on Desktop, but both
>>>>> answered: "The username or password you entered isn't working."
>>>>>
>>>>> I didn't have any ideas. I hope someone can help.
>>>> Works fine here. You are going to need to find out exactly where this
>>>> is failing. Start by looking in the synclog. You should see the
>>>> reason for the failure. My guess is you will see a line either like:
>>> Spoke too soon. With certain configurations, this was failing. Does
>>> this fix it for you?
>>>
>>> https://github.com/horde/horde/commit/122bdec1989ecd0c26d19dd3d8d7d2a84004323b
>>>
>>>
>>>
>>>
>>>
>> Hi Mike
>>
>> this doesn't fix the problem, but it changes the comment on my android
>> phone.
>>
>> Without these settings I get: Couldn't finish - Username or password is
>> incorrect.
>> in the access.log this is promt: username [31/Mar/2015:18:08:11 +0200]
>> "OPTIONS /Microsoft-Server-ActiveSync HTTP/1.1" 401 - "-"
>> "Android/4.4.3-EAS-2.0"
>>
>> with these settings I get: Couldn't finish - Can't connect to server.
>> in the access.log than this is promt: username [31/Mar/2015:18:10:26
>> +0200] "OPTIONS /Microsoft-Server-ActiveSync HTTP/1.1" 500 - "-"
>> "Android/4.4.3-EAS-2.0"
>>
>> regards
> Sorry.
> mistake by myself
> it doesn't change anything.
> --
> Horde mailing list
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: horde-unsubscribe at lists.horde.org

I sill still need a sync log that shows the error. I cannot reproduce  
any other authentication related issue.

-- 
mike
The Horde Project
http://www.horde.org
https://www.facebook.com/hordeproject
https://www.twitter.com/hordeproject
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5869 bytes
Desc: S/MIME Signature
URL: <http://lists.horde.org/archives/horde/attachments/20150401/e16a35ac/attachment.bin>