[sync] Littles questions about SyncML

Fri Jan 11 16:52:28 UTC 2013

Hi Gerard,

Zitat von Gerard Breiner <gerard.breiner at ias.u-psud.fr>:
> Le 11 janv. 2013 à 14:24, Jens-Uwe Mozdzen a écrit :
>
>> Hi Gerard,
>>
>> Zitat von Gerard Breiner <gerard.breiner at ias.u-psud.fr
>>> [...] So I corrected my mistake : Alias  
>>> /Microsoft-Server-ActiveSync /www/horde5/rpc.php  and not  
>>> /rpc.php?. Many thanks Mike.
>>> Then I tried again to create an account exchange activesync  from  
>>> my mobile (client RemoSync of Remoba) which is exchange activeSync.
>>> I face the error "Client does not support the protocol version".  
>>> Yet I tried all of each version available in  
>>> $conf[activesync][version]?.
>>
>> I don't recall having you mention a check of your web server logs.
>>
>> When the ActiveSync client registers with H5, you should see a  
>> couple of accesses to your web server (like "OPTIONS  
>> /Microsoft-Server-ActiveSync HTTP/1.1" 200 -" and ""POST  
>> /Microsoft-Server-ActiveSync?Cmd=FolderSync&User=... HTTP/1.1" 200  
>> 89352"). Do you see at least connection attempts by the client? If  
>> yes, are those responded to with errors? If error, then what's in  
>> the error log of your server? If no error, you ought to turn on  
>> ActiveSync logging in Horde's configuration to see what's going on.
>>
>> Judging from the the client UI alone is like checking a foggy  
>> crystal ball ;)
>> [...]
> Hi Jens,
>
> My apache server logged no error according ErrorLog  
> logs/webmail5-devel_error_log but I get the accesses to my web  
> server :
>
> visiteur178.domain - domain\\gbreiner [11/Jan/2013:16:59:29 +0100]  
> "OPTIONS  
> /Microsoft-Server-ActiveSync?Cmd=Version&User=gbreiner&DeviceId=androidc1885645527&DeviceType=Android HTTP/1.1" 302 - "-"  
> "Remoba-GT-S5839i-GINGERBREAD-GT-S5839i"

yes, this looks like the initial ActiveSync call

> visiteur178.domain - domain\\gbreiner [11/Jan/2013:16:59:29 +0100]  
> "GET  
> /login.php?url=http%3A%2F%2Fhorde5.domain.fr%2FMicrosoft-Server-ActiveSync%3FCmd%3DVersion%26User%3Dgbreiner%26DeviceId%3Dandroidc1885645527%26DeviceType%3DAndroid&horde_logout_token=QhOmV6Ulrd6ie9NGwqoBRw4&app=horde HTTP/1.1" 200 5864 "-"  
> "Remoba-GT-S5839i-GINGERBREAD-GT-S5839i"

That's a strange one - I don't see that in my logs. Looks like your  
client switched to http-based log-in.

> visiteur160.domain - - [11/Jan/2013:17:01:59 +0100] "POST  
> /services/ajax.php/horde/topbarUpdate HTTP/1.1" 200 1811  
> "http://horde5.domain/admin/config/index.php" "Mozilla/5.0  
> (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20100101 Firefox/17.0"
> visiteur160.domain - - [11/Jan/2013:17:02:00 +0100] "GET  
> /js/popup.js?v=656aaffb18e6a1aff5fbfe3cf106e125 HTTP/1.1" 304 -  
> "http://horde5.domain/admin/config/index.php" "Mozilla/5.0  
> (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20100101 Firefox/17.0"

These two don't belong here - probably your web client on another machine.

> I get too in line of command : Message from syslogd at inf-ext1 at Jan  
> 11 17:14:54 ...
>  HORDE5: User is not authorized for horde [pid 24797 on line 259 of  
> "/www/horde5/pear/php/Horde/Registry.php"]

judging by the time stamp, that's a different access to Horde - your  
server logs ought to show what was going on at that time.

> Authentication is ldap and I know I can logged myself in the horde  
> interface with the same username and password I use for activesync.
> Nevertheless the "domain\\gbreiner make me puzzle…

My client let's me set the user name to use - and hands it to the  
server as-is. I know there are means to do username mapping inside  
Horde, which could be used to work around a broken client, but I've  
never toyed with those, so others would have to jump in.

In general, it looks like the client is trying to do a Windows style  
domain login. If you cannot configure your client to log in as your  
server demands, my best bet is that you'll have to look into  
server-side user mapping...

Regards,
Jens

-- 
Jens-U. Mozdzen                         voice   : +49-40-559 51 75
NDE Netzdesign und -entwicklung AG      fax     : +49-40-559 51 77
Postfach 61 03 15                       mobile  : +49-179-4 98 21 98
D-22423 Hamburg                         e-mail  : jmozdzen at nde.ag

         Vorsitzende des Aufsichtsrates: Angelika Mozdzen
           Sitz und Registergericht: Hamburg, HRB 90934
                   Vorstand: Jens-U. Mozdzen
                    USt-IdNr. DE 814 013 983