maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Maemo 5 / Fremantle (https://talk.maemo.org/forumdisplay.php?f=40)
-   -   Mail for Exchange (MfE). Blame me here, pls (https://talk.maemo.org/showthread.php?t=35136)

rjzak 2009-12-09 21:01

Re: Corporate mail for exchange not syncing
 
Quote:

Originally Posted by sjgadsby (Post 419619)
....I didn't know if my employer even had Mail for Exchange support enabled, so as a shot in the dark, I just went through the MfE wizard on my N900 filling in the server and login information I use for Outlook for the Web. It just worked.

I asked my IT Dept if they'd turn off the requirement for Provisioning. And of course the answer was "No". So no Exchange for me. Hopefully the promised MfE update will include provisioning support, or else the N900 becomes less attractive.

Guber99 2009-12-09 21:05

Re: Corporate mail for exchange not syncing
 
Quote:

Originally Posted by JoePython (Post 419615)
I did. Just pulled up the MfE settings, put my username, password, domain, and the url for the server and [boom] it worked. I have email, contacts, and calendar with no problems.

Where do you place the url for the server?

floffe 2009-12-09 21:07

Re: Corporate mail for exchange not syncing
 
From vitaly_repin's replies earlier in this thread, provisioning seemed not to be currently planned for Maemo5 as it'd require a quite thorough reworking of the whole system, not just email.

Guber99 2009-12-09 21:12

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by vitaly_repin (Post 393019)
Hello to everybody here!

I am one of the (technical, not marketing) Maemo guys who is behind "broken", "buggy", "not working" etc. Maemo MfE implementation :-)

Could you post your feedback (better negative and constructive) to this thread?

At first, Let me put the FAQ.

- It does not work with google!
- Yes. And it should not. The release of the software which you can find in the box you have received was not designed to be compatible with google.

- OK, dude. What your piece of smth. is compatible with?
- MS Exchange server 2007. Period.

- Ohoho! What about Exchange 2003?
- Wait for sw. update.

- Ohoho! But what is the problem with google? I really want to have it!
- Google implementation of ActiveSync protocol and MS implementation of ActiveSync are different implementations of the protocol. http://www.microsoft.com/presspass/p...statement.mspx

- Can community do something to get the google support on board?
- Yes. Influence Google (to be compatible with N900) and Nokia (to be compatible with google).

- Does it support several accounts of type ActiveSync
- No.

So, guys, I am waiting for your feedback. What are the worst problems you experience with MfE solution for Maemo?

Update. Maemo 5 MfE features wish list online poll

Dear Vitaly, I am here in United States and I am on the cusp of returning my Nokia N900. I have tried setting up Mail for exchange to sync with my work 2007 exchange server with no luck. I use the same settings that have been successful on my E series phones and iPhone. I get to the first sync page and when sync is started the progress box fills up to one fifth and then stops. No error messages. My IT guys are stumped. What are we doing wrong? What else do we need? I am using T mobile Internet with a plan that works on my other devices.

Why dont you make necessities such as work email easy on this device???? I have an iphone that I wanted to dump for Nokia n900, but I tell you, iphone mail for exchange is superb. I can even search it on the phone and on the server, and never issues setting it up!

floffe 2009-12-09 21:18

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by Guber99 (Post 419640)
Dear Vitaly, I am here in United States and I am on the cusp of returning my Nokia N900. I have tried setting up Mail for exchange to sync with my work 2007 exchange server with no luck. I use the same settings that have been successful on my E series phones and iPhone. I get to the first sync page and when sync is started the progress box fills up to one fifth and then stops. No error messages. My IT guys are stumped. What are we doing wrong? What else do we need? I am using T mobile Internet with a plan that works on my other devices.

Please don't bold whole posts, it's not much better than ALL CAPS.

I'm not sure you've checked with the IT people about allowing non-provisionable devices? Couldn't find anything about it in your posts, at least.

Guber99 2009-12-09 21:30

Re: Mail for Exchange (MfE). Blame me here, pls
 
I asked them to check regarding provisioning. Will see what they say..............

rjzak 2009-12-09 22:20

Re: Mail for Exchange (MfE). Blame me here, pls
 
Besides vitaly_repin, is anyone else at Nokia aware of these MfE shortcomings and complains? I have a feeling all this is falling on deaf ears and is for nothing.

Random 2009-12-09 22:32

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by rjzak (Post 419761)
Besides vitaly_repin, is anyone else at Nokia aware of these MfE shortcomings and complains? I have a feeling all this is falling on deaf ears and is for nothing.

Yes they are aware, even customer care told over two weeks ago thet work is on.

mikec 2009-12-09 22:37

Re: Mail for Exchange (MfE). Blame me here, pls
 
I would not expect Provisioning support in the short term. This might not be the answer you are looking for. Nokia will probably wait for a security framework to be in place before they sort out provisioning.

Azimalicous 2009-12-09 22:41

Re: Mail for Exchange (MfE). Blame me here, pls
 
I am also having issues with MFE on the n900
We are using exchange 07
I am part of the IT department
It works over Wifi, but if i use TMO internet it does not.
I installed the cert from our OWA web portal, and now i can actually see the web page for the web portal, but MFE does not work over tmobile internet at all. I can only sync via wifi. I tried hte finnish trick with no avail Anyone have any ideas or a way i can resolve this problem?
I was also on the line with TMO tier 3 support with no luck, they said my line has no internet blockings and such, so i am totally lost as to why its not working? Any help would be appreciated
I also checked the non provision device trick, and we allow non-prov devices, so i am not sure what hte problem is....anyone else in my boat or knows how to fix my problem?

Update: Have a Tmo engineer looking into it....As i was guessing, its a tmo problem.

Guber99 2009-12-10 02:17

Re: Mail for Exchange (MfE). Blame me here, pls
 
I tried wifi too. For me wifi does not work either. Again, Nokia E51, Nokia E71 MfE and iphone all work fine on my server. Why doesnt NOKIA n900 do the same????? I mean, NOKIA, hello, you are failing at the BASICS. Like 101 failure. I give you an FFFFFFF for this

labra 2009-12-10 08:51

Re: Mail for Exchange (MfE). Blame me here, pls
 
Hi!

One more case of "Error: Either Exchange server requires secure connection or account is disabled" here.

1. Exchange 2007 in used
2. Allow non-provisioned is enabled
3. I have installed our (self signed) root certificate that is used to sign the cert on owa server. It is visible in cert store in the settings section with server, wlan and email enabled.
4. Changing language does not help.

Still the error comes every time I try to enable MfE. Why does not it work? Any ideas? When will this be fixed?

peacetara 2009-12-10 09:22

Re: Mail for Exchange (MfE). Blame me here, pls
 
Hi vitaly_repin,

Thank you for your work! I assume that Zimbra (www.zimbra.com) which acts like exchange server from an activesync perspective is also waiting on exchange 2003 support, since the protocol rev is 2.5?

I can generate a place for you to test against if needed.

With Love,
Tara

Kieron 2009-12-10 09:33

Re: Mail for Exchange (MfE). Blame me here, pls
 
Vitaly, this was a very good idea you posting here for ideas for updates, what people want fixed the most, etc.

I think if other Maemo OS developers did the same, we would have an almost bug free OS update much, much sooner.

simons 2009-12-10 10:34

Re: Mail for Exchange (MfE). Blame me here, pls
 
Hi.

I would just like to add that i am eagerly awaiting an mfe update that syncs with google (contacts calendars and mail). i was expecting this when I bought the phone, and now its useless as a work phone (many organisations use google apps too).

haja 2009-12-10 12:47

Re: Mail for Exchange (MfE). Blame me here, pls
 
Waiting for Exchange 2003 support....

Talvis 2009-12-10 19:23

Re: Mail for Exchange (MfE). Blame me here, pls
 
Hi all,

I'm having a problem with MfE and was wondering if anyone is experiencing something similar. I started the wizard from settings and I was able to sync from google the first time (only synced calendar). After this I just get "synchronization failed".

Then I decided a good idea would be to start from scratch, so I went to settings, but the MfE icon has disappeared. Is this by design? Then I removed the MfE account under e-mail hoping that it would also remove the MfE icon from status menu and add the wizard icon to settings. It didn't. Restoring to factory settings did not help either.

So now my question is how can I remove MfE? I don't want it running in the background trying to sync (although, I'm not sure if it is - I tried some greps on ps -a and couldn't find the process. This could also be due to my weak linux skills ;) Anyone happen to know process name?).

In short:
1) Does MfE disappear from settings after running the setup wizard?
2) How to completely remove MfE?

Thanks for any help!

jase 2009-12-10 21:00

Re: Mail for Exchange (MfE). Blame me here, pls
 
Hiya All!!

Just got my N900 and gave my N97 away..Foolish of me..now i cannot sync my mail at all.. as my company requires the device to be a provisionable device (mandatory pin code etc...) please post this in the product description, as i believe that you will have quite a few angry customers that have bought n900 but are not able to use it for email and calendaring..

Please help me!!!

Guber99 2009-12-10 21:04

Re: Mail for Exchange (MfE). Blame me here, pls
 
Its sad, isnt it. Cant use the device for my emails.............

labra 2009-12-11 07:27

Re: Mail for Exchange (MfE). Blame me here, pls
 
1 Attachment(s)
Quote:

Originally Posted by labra (Post 420355)
Hi!

One more case of "Error: Either Exchange server requires secure connection or account is disabled" here.

1. Exchange 2007 in used
2. Allow non-provisioned is enabled
3. I have installed our (self signed) root certificate that is used to sign the cert on owa server. It is visible in cert store in the settings section with server, wlan and email enabled.
4. Changing language does not help.

Still the error comes every time I try to enable MfE. Why does not it work? Any ideas? When will this be fixed?

Hi again!

Managed to get a syslog out. What does Curl error code 888 mean?

Does activesync fetch it's certificates from /home/user/.activesync/certs ? If I manually add our root cert with to the N900 certificate store, will it be added automatically to this directory? Or what is the problem?

BR, Lari

Rob1n 2009-12-11 09:27

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by labra (Post 422194)
Hi again!

Managed to get a syslog out. What does Curl error code 888 mean?

Does activesync fetch it's certificates from /home/user/.activesync/certs ? If I manually add our root cert with to the N900 certificate store, will it be added automatically to this directory? Or what is the problem?

BR, Lari

The curl error you're getting is an error 60 which means "Peer certificate cannot be authenticated with known CA certificates."

You'll need to add the CA certificate onto the N900 (save to the N900, then open in the file manager - it should prompt to install to the certficate store).

labra 2009-12-11 09:42

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by Rob1n (Post 422338)
The curl error you're getting is an error 60 which means "Peer certificate cannot be authenticated with known CA certificates."

You'll need to add the CA certificate onto the N900 (save to the N900, then open in the file manager - it should prompt to install to the certficate store).

As I have stated before, I have done this, I have added the root certificate to the store.

mikec 2009-12-11 09:53

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by labra (Post 422367)
As I have stated before, I have done this, I have added the root certificate to the store.

Can you just confirm what format the cert was saved as, some of the guys reported that it only worked for base 64 x509 .cer format, and you browsed the cert using the file manager and installed from there.

Rob1n 2009-12-11 09:56

Re: Mail for Exchange (MfE). Blame me here, pls
 
That's the error you're getting, so if you've installed the (correct) CA certificate, and it shows in the Certificate Store, then it's supposed to work. As it's not, then I guess you'll have to wait for Vitaly to chime in on this.

labra 2009-12-11 10:18

Re: Mail for Exchange (MfE). Blame me here, pls
 
1 Attachment(s)
Quote:

Originally Posted by Rob1n (Post 422400)
That's the error you're getting, so if you've installed the (correct) CA certificate, and it shows in the Certificate Store, then it's supposed to work. As it's not, then I guess you'll have to wait for Vitaly to chime in on this.

Yes. (you can see the export parameters in attached file).

mikec 2009-12-11 10:43

Re: Mail for Exchange (MfE). Blame me here, pls
 
That shows no certification path, which probably means it is untrusted cert.

see this post by Vitaly

http://talk.maemo.org/showpost.php?p...9&postcount=33

labra 2009-12-11 10:51

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by mikec (Post 422478)
That shows no certification path, which probably means it is untrusted cert.

see this post by Vitaly

http://talk.maemo.org/showpost.php?p...9&postcount=33

yes, it is self signed, but should there be something more special set to the certificate?

physiemist 2009-12-11 11:16

Re: Mail For Exchange ?
 
Hi all,
Thanks to this forum I think I have finally been able to sync reproducibly to mail for exchange! Here is what I have found:
I started, as most, trying to sync and getting the error "either exchange server requires secure connection or account is disabled" (I’m running Firmware v: 1.2009.42-11)
So I imported a Certificate since the program does not do it automatically (Please Nokia this should be fixed!). Like Mikec wrote in a previous post: if you have OWA (outlook web access) surf to it using your computer. (if not request the certificate(s) from your administrators), You will notice a padlock at the end of the address bar on IE7, Click the padlock, Click "view certificates", Click the "Details" tab, Click "Copy to File", A Wizard will start up. If you have a certificate chain like we do, just exporting to a Base-64-encoded X.509(.CER) will not work! You can see the certificate but the install will not appear. Create instead a PKCS 7 (.P7B) and include all certificates. Click next and save it somewhere. Now open the file and you will find a different view. Go to the certificates and start the procedure again for all of them in the chain to Base-64-encoded X.509(.CER). We have 3 in our chain (4 including the user certificate that you will not be able to import. (actually you can import the PKCS 7 file into the N900, but I have not tried to see if it works) I installed PC suite and copied the 3 files over to my N900 via Bluetooth.
1. I confirm that: exchange 2003 does not work, but 2007 does. Very few systems work with 2003 because it is not a good program! 2007 must also be set to allow non-provisionable devices.
2. The Region for some reason needs to be the same in the system and in MFE (if you use settings -> mail for exchange, you don’t have to set this and is not an issue.)
3. The missing point that I discovered, when importing the certificates they must be set as “server” and not as “E-mail”…..go figure!
I think that is all, Thank you all for your posts!

famusc 2009-12-11 11:34

Re: Mail for Exchange (MfE). Blame me here, pls
 
I've noticed that MfE account is not kept synchronized even after setting "Always on" in sych settings. It seems like it looses the actual connection with the exchange server after some time.

Random 2009-12-11 11:53

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by famusc (Post 422562)
I've noticed that MfE account is not kept synchronized even after setting "Always on" in sych settings. It seems like it looses the actual connection with the exchange server after some time.

I think that is common problem with all mail account types in N900, had problem with Nokia Messsging and even POP3 looses connection time to time causing wierd behavior.

mikec 2009-12-11 11:57

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by labra (Post 422495)
yes, it is self signed, but should there be something more special set to the certificate?


did you see this post , might help

http://talk.maemo.org/showpost.php?p...6&postcount=98

Not sure the N900 deals with self signed certs.

If you have a symbian device using M4E currently working, you can check what your cert says under tools->settings->General->Security->certificate management->Trusted Sites.

My one shows both the trusted site and the root cert issuer.

labra 2009-12-11 11:59

Re: Mail For Exchange ?
 
Quote:

Originally Posted by physiemist (Post 422526)
Hi all,
Thanks to this forum I think I have finally been able to sync reproducibly to mail for exchange! Here is what I have found:
I started, as most, trying to sync and getting the error "either exchange server requires secure connection or account is disabled" (I’m running Firmware v: 1.2009.42-11)
So I imported a Certificate since the program does not do it automatically (Please Nokia this should be fixed!). Like Mikec wrote in a previous post: if you have OWA (outlook web access) surf to it using your computer. (if not request the certificate(s) from your administrators), You will notice a padlock at the end of the address bar on IE7, Click the padlock, Click "view certificates", Click the "Details" tab, Click "Copy to File", A Wizard will start up. If you have a certificate chain like we do, just exporting to a Base-64-encoded X.509(.CER) will not work! You can see the certificate but the install will not appear. Create instead a PKCS 7 (.P7B) and include all certificates. Click next and save it somewhere. Now open the file and you will find a different view. Go to the certificates and start the procedure again for all of them in the chain to Base-64-encoded X.509(.CER). We have 3 in our chain (4 including the user certificate that you will not be able to import. (actually you can import the PKCS 7 file into the N900, but I have not tried to see if it works) I installed PC suite and copied the 3 files over to my N900 via Bluetooth.
1. I confirm that: exchange 2003 does not work, but 2007 does. Very few systems work with 2003 because it is not a good program! 2007 must also be set to allow non-provisionable devices.
2. The Region for some reason needs to be the same in the system and in MFE (if you use settings -> mail for exchange, you don’t have to set this and is not an issue.)
3. The missing point that I discovered, when importing the certificates they must be set as “server” and not as “E-mail”…..go figure!
I think that is all, Thank you all for your posts!


Nice to hear that someone gets MfE up and running... I did as you suggested (tried even importing the PKCS 7 file), but still no success. Any more ideas?

Edit:
Now got it working, see http://talk.maemo.org/showpost.php?p...&postcount=312

labra 2009-12-11 13:03

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by mikec (Post 422609)
did you see this post , might help

http://talk.maemo.org/showpost.php?p...6&postcount=98

Not sure the N900 deals with self signed certs.

If you have a symbian device using M4E currently working, you can check what your cert says under tools->settings->General->Security->certificate management->Trusted Sites.

My one shows both the trusted site and the root cert issuer.

Yes, I saw the post but working like that does not help. Always the same error.

labra 2009-12-11 13:27

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by labra (Post 422704)
Yes, I saw the post but working like that does not help. Always the same error.

Hi!

Now I managed to solve this. I added the cert to the certificate store. By going though the /home/user/ directory I found out that these certificates are put to /home/user/.maemosec-certs/ssl-ca/ -directory. The /home/user/.activesync/certs/ -directory does not have any symlinks to there. I manually symlinked the imported certificate from the .maemosec-certs/ssl-ca/ -directory to the activesync's directory, and it works!

(though it shouldn't be this hard)...

BR, Lari

sgleo87 2009-12-11 14:27

Re: Mail For Exchange ?
 
Quote:

Originally Posted by twoboxen (Post 411652)
I got the calendar & contacts to sync with google, but really they're not "synced"... only the initial one worked. No updates to the calendar (even one a week old) showed up on the n900.

I have the same problem: my contacts were transferred to the n900 during the initial sync but now none of the changes that I made on the n900 are synced back to my google contacts online. Is everyone in the same boat right now or is there a solutions to this?

I am only syncing contacts though MfE right now (and using IMAP for Google Mail). Is there any way to sync multiple google calendars with the N900 (there used to be an app for previous Maemo versions called Erming http://maemo.org/downloads/product/OS2008/erminig/ ) but I don't think it works in Maemo 5....any suggestions on how to get multiple calendar sync working?

5tapl3r 2009-12-11 14:31

Re: Mail For Exchange ?
 
Quote:

Originally Posted by physiemist (Post 422526)
Hi all,
Thanks to this forum I think I have finally been able to sync reproducibly to mail for exchange! Here is what I have found:
I started, as most, trying to sync and getting the error "either exchange server requires secure connection or account is disabled" (I’m running Firmware v: 1.2009.42-11)
So I imported a Certificate since the program does not do it automatically (Please Nokia this should be fixed!). Like Mikec wrote in a previous post: if you have OWA (outlook web access) surf to it using your computer. (if not request the certificate(s) from your administrators), You will notice a padlock at the end of the address bar on IE7, Click the padlock, Click "view certificates", Click the "Details" tab, Click "Copy to File", A Wizard will start up. If you have a certificate chain like we do, just exporting to a Base-64-encoded X.509(.CER) will not work! You can see the certificate but the install will not appear. Create instead a PKCS 7 (.P7B) and include all certificates. Click next and save it somewhere. Now open the file and you will find a different view. Go to the certificates and start the procedure again for all of them in the chain to Base-64-encoded X.509(.CER). We have 3 in our chain (4 including the user certificate that you will not be able to import. (actually you can import the PKCS 7 file into the N900, but I have not tried to see if it works) I installed PC suite and copied the 3 files over to my N900 via Bluetooth.
1. I confirm that: exchange 2003 does not work, but 2007 does. Very few systems work with 2003 because it is not a good program! 2007 must also be set to allow non-provisionable devices.
2. The Region for some reason needs to be the same in the system and in MFE (if you use settings -> mail for exchange, you don’t have to set this and is not an issue.)
3. The missing point that I discovered, when importing the certificates they must be set as “server” and not as “E-mail”…..go figure!
I think that is all, Thank you all for your posts!

the only issue is if you company will not allow it to be used with the server. no matter what you do, it will not work.

bmouring 2009-12-11 17:45

Re: Mail For Exchange ?
 
I recently tried to get this configured for my N900 with my company's setup (it seems to be a Lotus setup that supports ActiveSync), in the setup instructions provided by my company's IT infrastructure group, it states that the server should be configured as:
"$HOST.$MYCOMPANYSDOMAIN.com/servlet/traveler"
(portions redacted on-purpose)
however attempting to add the path aft-FQDN greys the "Next" button.

I remove the offending relative path info from the server field and choose "Next", I am then greeted by a "Configured Server is not an Exchange server" banner (probably correctly so; there's a pre-mail web interface at the root). Thoughts? Anyone else face this and conquer it?

code177 2009-12-11 20:56

Re: Mail for Exchange (MfE). Blame me here, pls
 
Not sure if this is relevant but my Calendar and Tasks sync'd perfectly today. I can't be sure, but the one setting I changed was "Calendar", I set it to "Create New".

Didn't sync contacts or mail.

mikec 2009-12-11 21:01

Re: Mail for Exchange (MfE). Blame me here, pls
 
Quote:

Originally Posted by labra (Post 422732)
Hi!

Now I managed to solve this. I added the cert to the certificate store. By going though the /home/user/ directory I found out that these certificates are put to /home/user/.maemosec-certs/ssl-ca/ -directory. The /home/user/.activesync/certs/ -directory does not have any symlinks to there. I manually symlinked the imported certificate from the .maemosec-certs/ssl-ca/ -directory to the activesync's directory, and it works!

(though it shouldn't be this hard)...

BR, Lari

I wonder if you have just found a way round the self signed certs. Either way those symlinks have not been created for you automagically.

schnebeck 2009-12-11 21:19

Re: Mail for Exchange (MfE). Blame me here, pls
 
short info:

I need MfE working with z-push (http://z-push.sourceforge.net/soswp/) and as z-push itself is generic I need it working with kolabzpush backend (http://kolabzpush.sourceforge.net/)

Although kolabzpush is a new kid in town its known to work with iphone and WiMo clients for calendar and contacts - that everything I need as Kolab (http://www.kolab.org) is basically an IMAP server.

I'm quite happy that the main developer of kolabzpush tries everything to get things working between N900 and N900 MfE. Meanwhile we are in singlestep debugging mode - Alain Abbas you are my hero of today :-)

If he succeed I will report - also if not ;-)

Bye

Thorsten


All times are GMT. The time now is 10:34.

vBulletin® Version 3.8.8