[horde] ActiveSync Connection

[Johannes Mock]

On 01/19/2015 08:56 PM, Michael J Rubinsky wrote:
>
> Quoting Johannes Mock <mockjs at idmt.fraunhofer.de>:
>
>> Hello together
>>
>> I want to sync my Horde Server with different devices via ActiveSync. I
>> set all configurations and tried to sync. The device finds the server,
>> but said sync couln'd finish because username or password is incorrect.
>>
>> Problem: Username and Password are correct.
>> The server syncs perfectly via CalDAV.
>>
>> The configuration for my ActiveSync is the following:
>>
>> $conf['activesync']['params']['driverconfig'] = 'horde';
>> $conf['activesync']['storage'] = 'Sql';
>> $conf['activesync']['emailsync'] = true;
>> $conf['activesync']['version'] = '14.1';
>> $conf['activesync']['auth']['params']['username_field'] =
>> 'SSL_CLIENT_S_DN_CN';
>> $conf['activesync']['auth']['params']['password_source'] = 'none';
>> $conf['activesync']['auth']['type'] = 'basic_cert';
>> $conf['activesync']['autodiscovery'] = 'user';
>> $conf['activesync']['outlookdiscovery'] = false;
>> $conf['activesync']['logging']['type'] = false;
>> $conf['activesync']['ping']['heartbeatmin'] = 60;
>> $conf['activesync']['ping']['heartbeatmax'] = 2700;
>> $conf['activesync']['ping']['heartbeatdefault'] = 480;
>> $conf['activesync']['ping']['deviceping'] = true;
>> $conf['activesync']['ping']['waitinterval'] = 15;
>> $conf['activesync']['enabled'] = true;
>>
>> and the ActiveSync specifications in the Virtual Host:
>>
>> Alias /Microsoft-Server-ActiveSync /var/www/html/horde/rpc.php
>>
>>   <Directory "/var/www/html/horde/">
>>
>>         RewriteEngine On
>>         RewriteRule ^Microsoft-Server-ActiveSync /rpc.php
>>         RewriteRule .* -
>> [E=HTTP_MS_ASPROTOCOLVERSION:%{HTTP:Ms-Asprotocolversion}]
>>         RewriteRule .* - [E=HTTP_X_MS_POLICYKEY:%{HTTP:X-Ms-Policykey}]
>>         RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
>>
>>    </Directory>
>>
>> Did anyone have the same problem?! How can I connect to the server via
>> ActiveSync or what configuration parameters do I have to change?
>>
>> Greetings
>> Johannes
>
> Since you are using client certificate validation, my first thought is
> that the certificate is not valid or the username you are getting from
> SSL_CLIENT_S_DN_CN is not the username used during authentication. Try
> just plain authentication to rule out problems with the cert. Another
> thing to check is full email vs username only etc...
>
>
>
The connecting problem must be on the server side. The certificate is
valid and username and password are submitted correctly. I tested it via
a Nexus 7 and also via Microsoft Outlook 2013 on Desktop, but both
answered: "The username or password you entered isn't working."

I didn't have any ideas. I hope someone can help.

Thanks
Johannes