[horde] Problem with Android Horde Activesync - Can't add account - Gmail's security settings are more secure than those set by your IT admin

[r.j.baart at prompt.nl]

I can confirm the problem. Several clients report the problem. It seems 
to start after an update of the gmail application on Android dated 5 Nov 
2019. My horde server worked correctly for these clients until that 
update. I use Debian stretch with backports, latest horde webmail (all 
modules up-to-date), LDAP backend and active sync with Http basic 
authentication.

There are lot of people who are complaining. However I did not find any 
solutions.

I tried to recreate the exchange account on an android device. Won't 
work, same error after creating the account. I tried to remove the 
device in Horde activeSync tab but that did not solve the problem.

I could solve the problem by downgrading the gmail application on the 
Android device. After the downgrade everything worked correctly (for 
now). Disable automatic update on Android and the problem is not solved 
but you can work again. Reinstalling the gmail update brings back the 
problem.


On 9-11-2019 18:20, Ronny Forberger wrote:
> Hi Michael,
>
> thanks for your information.
>
> I am not sure if I have a second GMail account on the phone, I have a 
> google account on it though.
>
> I think the Gmail application itself is now requiring certain security 
> policies to be in place, as you said.
>
> I tried to set the permissions of ActiveSync to all permissions for 
> authenticated users, creators and even my username, but no success.
>
> The error message on the phone is still appearing.
>
> It worked before the Android upgrade though without the Horde permissions.
>
> Any other ideas?
>
> Best regards,
>
> Ronny Forberger
>
>
> Quoting Michael J Rubinsky <mrubinsk at horde.org>:
>
>> Quoting Ronny Forberger <ronnyforberger at ronnyforberger.de>:
>>
>>> Hi Horde list,
>>>
>>> My brand new Android 9 phone has made an update to the OS and since 
>>> that I cannot access my Horde Active Sync interface anymore.
>>>
>>> I am getting the error message
>>>
>>> Can't add account - Gmail's security settings are more secure than 
>>> those set by your IT admin
>>>
>>> on Android.
>>>
>>> Any ideas what I have to set up on Horde / or the web server to make 
>>> this run again or where to look at least?
>>
>> This sounds like you either maybe have another account setup in the 
>> Gmail app on the Android device, whose provisioning policies are more 
>> secure than Horde's, or the Gmail application itself is now requiring 
>> certain security policies to be in place.  You can try looking at 
>> Horde -> Admin -> Permissions. Look at the permissions available 
>> under Horde -> ActiveSync (you might need to create them) and see if 
>> any of those look like a good candidate.
>>
>> For what it's worth, my Note has the same patchlevel, and I just 
>> successfully added my horde account to the device, after accepting 
>> the security policy.
>>
>>
>>>
>>> Android version: 9 PKQ1.181121.001
>>> Android security patchlevel: 2019-10-01
>>>
>>> Horde Version: 5.2.22
>>> Nginx Version: 1.16.1 (reverse proxy with mod_security)
>>> Apache httpd version: 2.4.41 (serving horde)
>>>
>>> Any help is appreciated.
>>>
>>> Best regards,
>>>
>>> Ronny Forberger
>>> -- ___________________________________
>>> Ronny Forberger
>>> ronnyforberger at ronnyforberger.de
>>> PGP: http://www.ronnyforberger.de/pgp/email-encryption.html
>>>
>>> -- Horde mailing list
>>> Frequently Asked Questions: http://horde.org/faq/
>>> To unsubscribe, mail: horde-unsubscribe at lists.horde.org
>>
>>
>>
>> -- mike
>> The Horde Project
>> http://www.horde.org
>> https://www.facebook.com/hordeproject
>> https://www.twitter.com/hordeproject
>
>
-- 

Cordialement,

R.J. Baart