We have moved to a new Sailfish OS Forum. Please start new discussions there.
60

Microsoft Exchange not working with Company exchange server

asked 2014-01-09 11:20:46 +0200

this post is marked as community wiki

This post is a wiki. Anyone with karma >75 is welcome to improve it.

updated 2015-02-23 12:46:10 +0200

tvicol gravatar image

It is working in 1.1.2 / Yliaavanlampi :D

Sailfish has the same problem sa the N9 did before the last update. The exchange setup dos not work, properly due to security settings on the server.

The Jolla and Server is behaving the same way as the N9 did as described in her.

https://harmattan-bugs.nokia.com/show_bug.cgi?id=3

Please fix :-)

edit retag flag offensive close delete

Comments

Is your server still Exchange-Server 2007 ? Thanks for the details.

VDVsx ( 2014-01-09 20:57:32 +0200 )edit

Do not know all i can see is this: dos that answer your question ? Mailbox server Microsoft Exchange version: 8.3.83.0

ThomasF ( 2014-01-10 10:51:39 +0200 )edit
6

I believe the current iteration of MfE on the Jolla does not support Mobile Device Security Policies (which was also the case on the N9). So if your corporate Exchange server implements policies for security reasons then you won't be able to use your Jolla to talk to it.

strongm ( 2014-01-10 11:15:53 +0200 )edit

So the solution is that Jolla must add Mobile Device Security Policies in the app?

ThomasF ( 2014-01-10 11:31:16 +0200 )edit
2

Sure - if you want your Jolla to be (at least partially) controlled by your company. There are some significant repercussions in adding support for this on the phone.

On the other hand, if people need it, then I guess it would be nice have the option.

strongm ( 2014-01-10 11:57:38 +0200 )edit
3

@strongm Correct Jolla does not support yet any security policies, but N9 did support most of the common ones, Password, expire password, remote wipe, ... Jolla will get some soon.

VDVsx ( 2014-01-10 12:59:55 +0200 )edit

Looking forward to that, i miss my calender and mails.. :-)

ThomasF ( 2014-01-10 13:50:15 +0200 )edit

How can we detect we are facing this security policies issue? I set the same details for exchange account as I had with previous E72, but mailer still complains with enigmatic "Problem with sign-in"… Would be great to have full support of Microsoft Exchange. Currently Jolla is not recommended as company phone due to this issue. Is there a plan to fix this?

Pate ( 2014-02-16 01:00:38 +0200 )edit

I have no problems, MfE working properly. So I guess I should question our security policies...

rob_kouw ( 2014-02-16 01:29:10 +0200 )edit

just to add to the list of errors: my n9 was working fine on the same company setver where jolla isn't. I don't even get list of folders, just maybe 3-4, including "sent" and "outbox" but not "inbox"

Cary Grant ( 2014-02-16 09:45:18 +0200 )edit

Can't you log in to your Exchange workspace from a pc and allow access by setting the Options for Mobile Devices? At least on Small Business Server 2008 I can view my mobile devices and remove or wipe existing devices.

rob_kouw ( 2014-02-16 12:00:22 +0200 )edit

1) You need to be an Exchange admin to mess about with mobile device configuration, and most people will not be. 2) These are exactly the sort of things that require Policies to be working, which is the root cause of the problem being discussed.

strongm ( 2014-02-16 12:45:19 +0200 )edit

Just tried on a exchange 2007 and it worked by turning off the option "turn off provisionning" when configuring the account on the phone. On the server, the policy applied to your user must allow non-standard device to connect. You might want to ask your exchange admin if it's the case.

Dam ( 2014-02-16 13:00:06 +0200 )edit
1

have a look here for an explanation of exchange policies.

http://talk.maemo.org/showthread.php?p=1412337#post1412337

droll ( 2014-02-16 14:33:50 +0200 )edit
1

My phone access was blocked and my corporate account blocked. :-( Kindly give the option to enable Mobile Device Security Policies in next update. Exchange/activesync must be threaded as critical application if Jolla want to get some corporate business customers. I must note that on my N8 activesunc was working perfect till I tried to activate Jolla. Now I need to get my account unlocked ...

"Your mobile phone is temporarily blocked from accessing content via Exchange ActiveSync because the phone has been quarantined. No action is necessary on your part. Content will automatically be downloaded as soon as access is granted by your administrator.

Your mobile phone is temporarily in Quarantined mode. Please, refer to the documentation about Mobile Messaging for your entity to access your Exchange mailbox.

Votre terminal a été temporairement mis en mode Quarantaine. Réferez-vous à la documentation d'accès à Message Mobile pour votre entité afin d'accéder à votre messagerie Exchange.

Information about your mobile phone: Device model: SailfishOS Device type: SailfishOS Device ID: JP359745050147856 Device OS:
Device user agent: SailfishOS/1.0-EAS-0.7.51 Device IMEI:
Exchange ActiveSync version: 12.1 Device access state: Quarantined Device access state reason: Global"

tvicol ( 2014-02-17 10:15:01 +0200 )edit

@tvicol - That can happen if you spam the server with requests, for example if you try over and over connecting with a wrong password, you need to talk to your IT admin to fix that. Atm only one Mobile Device Security Policies(provisioning) is supported - device password.

VDVsx ( 2014-02-18 08:41:21 +0200 )edit

Hi, with the last update 1.0.4.20, I still can't create an Exchange account with my company server "Problem with checking credentials" (Yes I know my credentials and server details...). This is terribly annoying as it is working on many other phones of the company: WP7.8/8, Iphone, Symbian and Android. A fix is urgent, the business world is full of Exchange Servers!

damourti ( 2014-03-19 12:42:20 +0200 )edit
1

Hi, i can also confirm that the update has not fixed the problem with company Exchange server connection. I do not understand why this dos not have priority. Please fix this baseline feature...

ThomasF ( 2014-03-19 13:13:41 +0200 )edit

@ThomasF - i cannot access the harmattan bug anymore, don't know what policy your server is missing, we are only two policies behind the N9 and one of them requires a lot of work in the platform side, so will take time(device wipe). You can also ask your IT department to white-list your device, it has a unique identifier or the OS can also be white-listed if there are more users.

VDVsx ( 2014-03-19 16:07:04 +0200 )edit

Cant you just do a quick fix of some sort, if a simple android app can connect to the mail server when installed on the Jolla, why cant the phone do the same.. My IT department is a bit conservative when it comes to this, so they will not change the level of security. I have no way of knowing what policy is not supported, i get no info abut this when trying to connect.

ThomasF ( 2014-03-19 16:52:07 +0200 )edit

@damourti - Very hard to fix a problem that we don't see, at that stage we only try to connect to the server with the credentials you entered. no provisioning or anything else involved, so either your credentials are wrong(many times username is different from email address) or there's some problem with the connection, can you give details of your settings ? If you are using as username the email address, the port used, if secure connection is select and if you are using a domain name or not ? No need for the actual settings since they are private.

VDVsx ( 2014-03-19 16:53:21 +0200 )edit
1

@ThomasF - No quick fix for policies settings, we can't lie to the server, if Android apps sends fake information we are not liable for that, those apps are not distributed by us. Can you collect logs ?

enable logging, in:

/home/nemo/.config/Nokia/activesync.conf

Enable file log and add a path for the log, like for example:

[FileLog] 
Enabled=1 
Path=/home/nemo/Documents/as.log

Also turn provision logs on:

Provision=1

Reboot the device and then configure the account, examine the file to see if you want to remove some data, your email address, calendar entries names and folder names can be presented there, send me the logs to mail-logs at jolla dot com. After that turn file log off again by setting "enabled" to 0.Thanks a lot!

VDVsx ( 2014-03-19 17:17:30 +0200 )edit

Well @VDVsx, I use this on WP: blabla@company.com, username: blabla, pwd: password, Domain: company.info, ServerAdd: autodiscover.company.info, Server requires encrypted (SSL) connection, logging: off. And that is doing the job. On my Jolla, automatic setting doesn't work, therefore I use "manual", ServerAdd as above, port 443 or 80 depending if I tick "Secure connection" and I tick "Accept all SSL certificates". In all cases it doesn't work.

damourti ( 2014-03-19 17:19:33 +0200 )edit

@damourti - Are you sure the server address is correct ? looks suspicious if it starts with "autodiscovery", it normally works in two stages, that first one probably will do a redirect to the second one in case autodiscovery works(not working for you it seems if you have to do manual setup).

You can check if your settings are correct using this Microsoft tool: https://testconnectivity.microsoft.com/

VDVsx ( 2014-03-19 17:47:51 +0200 )edit

Hi @VDVsx, I checked the server settings, it is ok. Today with 3G connection, and not wifi of the company visitor's network, I could go a step further, yeah! I first had a confirmation that a device lock must be activated. I did activate the device lock but I still got the message: "Device does not support all server settings and policies required by this account", grrr...

damourti ( 2014-03-20 12:28:07 +0200 )edit

@damourti - Ok, nothing we can do before more settings are supported, if you can ask your IT which settings are enforced or collect logs like described 4 messages above. Thanks.

VDVsx ( 2014-03-20 13:15:41 +0200 )edit

11 Answers

Sort by » oldest newest most voted
0

answered 2015-01-18 09:15:20 +0200

Cary Grant gravatar image

I found a workaround : CloudMagic Android app

edit flag offensive delete publish link more

Comments

The android apps is not a workaround or answer when full working native apps are needed.

tikkari ( 2015-02-25 20:03:34 +0200 )edit

In the meantime i managed to make it work for my server. Provisioning: yes, limited nr (8) unlocks on lock screen

Cary Grant ( 2015-04-14 08:44:54 +0200 )edit
Login/Signup to Answer

Question tools

Follow
24 followers

Stats

Asked: 2014-01-09 11:20:46 +0200

Seen: 6,511 times

Last updated: Sep 11 '15