[sync] Littles questions about SyncML

[Michael J Rubinsky]

Quoting Jens-Uwe Mozdzen <jmozdzen at nde.ag>> Hi Gerard,
>
> Zitat von Gerard Breiner <gerard.breiner at ias.u-psud.fr>:
>> Le 11 janv. 2013 à 14:24, Jens-Uwe Mozdzen a écrit :
>>
>>> Hi Gerard,
>>>
>>> Zitat von Gerard Breiner <gerard.breiner at ias.u-psud.fr
>>>> [...] So I corrected my mistake : Alias  
>>>> /Microsoft-Server-ActiveSync /www/horde5/rpc.php  and not  
>>>> /rpc.php?. Many thanks Mike.
>>>> Then I tried again to create an account exchange activesync  from  
>>>> my mobile (client RemoSync of Remoba) which is exchange activeSync.
>>>> I face the error "Client does not support the protocol version".  
>>>> Yet I tried all of each version available in  
>>>> $conf[activesync][version]?.
>>>
>>> I don't recall having you mention a check of your web server logs.
>>>
>>> When the ActiveSync client registers with H5, you should see a  
>>> couple of accesses to your web server (like "OPTIONS  
>>> /Microsoft-Server-ActiveSync HTTP/1.1" 200 -" and ""POST  
>>> /Microsoft-Server-ActiveSync?Cmd=FolderSync&User=... HTTP/1.1" 200  
>>> 89352"). Do you see at least connection attempts by the client? If  
>>> yes, are those responded to with errors? If error, then what's in  
>>> the error log of your server? If no error, you ought to turn on  
>>> ActiveSync logging in Horde's configuration to see what's going on.
>>>
>>> Judging from the the client UI alone is like checking a foggy  
>>> crystal ball ;)
>>> [...]
>> Hi Jens,
>>
>> My apache server logged no error according ErrorLog  
>> logs/webmail5-devel_error_log but I get the accesses to my web  
>> server :
>>
>> visiteur178.domain - domain\\gbreiner [11/Jan/2013:16:59:29 +0100]  
>> "OPTIONS  
>> /Microsoft-Server-ActiveSync?Cmd=Version&User=gbreiner&DeviceId=androidc1885645527&DeviceType=Android HTTP/1.1" 302 - "-"  
>> "Remoba-GT-S5839i-GINGERBREAD-GT-S5839i"
>
> yes, this looks like the initial ActiveSync call
>
>> visiteur178.domain - domain\\gbreiner [11/Jan/2013:16:59:29 +0100]  
>> "GET  
>> /login.php?url=http%3A%2F%2Fhorde5.domain.fr%2FMicrosoft-Server-ActiveSync%3FCmd%3DVersion%26User%3Dgbreiner%26DeviceId%3Dandroidc1885645527%26DeviceType%3DAndroid&horde_logout_token=QhOmV6Ulrd6ie9NGwqoBRw4&app=horde HTTP/1.1" 200 5864 "-"  
>> "Remoba-GT-S5839i-GINGERBREAD-GT-S5839i"
>
> That's a strange one - I don't see that in my logs. Looks like your  
> client switched to http-based log-in.
>
>> visiteur160.domain - - [11/Jan/2013:17:01:59 +0100] "POST  
>> /services/ajax.php/horde/topbarUpdate HTTP/1.1" 200 1811  
>> "http://horde5.domain/admin/config/index.php" "Mozilla/5.0  
>> (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20100101  
>> Firefox/17.0"
>> visiteur160.domain - - [11/Jan/2013:17:02:00 +0100] "GET  
>> /js/popup.js?v=656aaffb18e6a1aff5fbfe3cf106e125 HTTP/1.1" 304 -  
>> "http://horde5.domain/admin/config/index.php" "Mozilla/5.0  
>> (Macintosh; Intel Mac OS X 10.7; rv:17.0) Gecko/20100101  
>> Firefox/17.0"
>
> These two don't belong here - probably your web client on another machine.
>
>> I get too in line of command : Message from syslogd at inf-ext1 at Jan  
>> 11 17:14:54 ...
>> HORDE5: User is not authorized for horde [pid 24797 on line 259 of  
>> "/www/horde5/pear/php/Horde/Registry.php"]
>
> judging by the time stamp, that's a different access to Horde - your  
> server logs ought to show what was going on at that time.
>
>> Authentication is ldap and I know I can logged myself in the horde  
>> interface with the same username and password I use for activesync.
>> Nevertheless the "domain\\gbreiner make me puzzle…
>
> My client let's me set the user name to use - and hands it to the  
> server as-is. I know there are means to do username mapping inside  
> Horde, which could be used to work around a broken client, but I've  
> never toyed with those, so others would have to jump in.
>
> In general, it looks like the client is trying to do a Windows style  
> domain login. If you cannot configure your client to log in as your  
> server demands, my best bet is that you'll have to look into  
> server-side user mapping...
>
> Regards,
> Jens
>
> -- 
> Jens-U. Mozdzen                         voice   : +49-40-559 51 75
> NDE Netzdesign und -entwicklung AG      fax     : +49-40-559 51 77
> Postfach 61 03 15                       mobile  : +49-179-4 98 21 98
> D-22423 Hamburg                         e-mail  : jmozdzen at nde.ag
>
>         Vorsitzende des Aufsichtsrates: Angelika Mozdzen
>           Sitz und Registergericht: Hamburg, HRB 90934
>                   Vorstand: Jens-U. Mozdzen
>                    USt-IdNr. DE 814 013 983
>
> -- 
> sync mailing list
> Frequently Asked Questions: http://wiki.horde.org/FAQ
> To unsubscribe, mail: sync-unsubscribe at lists.horde.org
The activesync code ignores any provided domain value and can use the  
username after the slash delimiter. As stated before,  this is either  
a very broken EAS client or the server is misconfigured.
--
Mike
Sent from mobile

Jens-Uwe Mozdzen <jmozdzen at nde.ag> wrote: