Activesync on WebTop

alefattorini · February 17, 2016, 11:59am

I guess that @lucag should be interested in

loic · February 17, 2016, 12:17pm

Sorry for the delay. I’m quite full these days.
I am looking for a personal server for my family, with shared calendars and that can be accessed from different platforms: Android (Exchange at best, otherwise Dav) and Windows (Thunderbird, Outlook and Mail/Contact/Calendar of W10).
My remark was related to what I understood from Webtop, which is mainly designed to be used in a browser. I need to access my accounts from Thunderbird and Outlook (clients) and possibly Mail/Contact/Calendar of W10.
Did I understand well the capabilities of Webtop?
For the time being, I use Sogo, with is limited with the Exchange protocol.

kisaacs · August 17, 2016, 1:04pm

I am also evaluating Webtop for the similar reasons stated above.

To that end, I have created a brand new load (NS 7 Beta 1). Loaded email and weptop. Went into the weptop admin, enabled webtop access for two test accounts. Logged into to the test accounts to create one contact, calendar and task. Enabled sync on the test accounts.

The Problem:
ActiveSync is not responding to Outlook or BB10. When I use the web url https://[myserver]/Microsoft-Server-ActiveSync the response is 403 - Forbidden.

Ideas?

Since

filippo_carletti · August 17, 2016, 1:15pm

I’m not an expert, but access is authenticated, the forbidden response could be correct.

kisaacs · August 17, 2016, 1:22pm

Based on the preceding dialogue (see Feb 3 entries), the web browser test should at least prompt for user/password details and then fail with a “GET not supported”. I am getting a 403 immediately and it seems to me that it is because of a higher level setting that has not activated ActiveSync.

I am wondering whether there is a configuration setting that needs a tweak??

filippo_carletti · August 17, 2016, 1:35pm

You’re probably right, sorry.
WebTop has a switch on the Settings page, General tab, Sync tab at the bottom.
If you have sogo, I’d also try with:
config setprop sogod ActiveSync disabled
signal-event nethserver-sogo-update

kisaacs · August 17, 2016, 1:47pm

To clarify:

First there is no sogo. Wanted a totally clean / patched install.

Second, when you refer to Settings > General > Sync, I have signed on to both admin and the test account, gone into settings (first changed my language from Italian - the default - to English) and looked at the sync tab and ensured that sync is enabled.

I get the following entries in /var/log/httpd/ssl_error_log

[Wed Aug 17 09:20:45.814997 2016] [authz_core:error] [pid 18364] [client 142.55.232.246:60658] AH01630: client denied by server configuration: /usr/share/webtop/z-push/index.php

Not sure if that helps.

filippo_carletti · August 17, 2016, 2:37pm

Found! I replicated the problem, it’s an error in the httpd configuration.

--- /etc/httpd/nethserver.d/00default:443.vhost	2016-08-17 16:30:24.583107739 +0200
+++ 00default:443.vhost	2016-08-17 16:24:01.356257724 +0200
@@ -76,8 +76,7 @@
 <Directory "/usr/share/webtop/z-push/">
     AllowOverride None
     Options None
-    Order allow,deny
-    Allow from all
+    Require all granted
 </Directory>
 </VirtualHost>

kisaacs · August 17, 2016, 2:57pm

Thanks for the quick response.

I have found the nethserver file to edit. What is missing from my expertise is exactly how to use/read your cool code.

It appears to me to be output from a standard editing utility that I can likely feed it into — or — just make the changes directly to the file.

Do I remove “Order allow,deny” and “Allow from all” and insert “Require all granted”?

Do I then restart a particular service?

filippo_carletti · August 17, 2016, 3:04pm

Yes (the output it’s a unified diff).
Then restart httpd:

systemctl reload httpd

kisaacs · August 17, 2016, 3:15pm

We are making progress - not quite there yet.

Now I receive a “404 - Not Found”

Not Found
The requested URL /Mircosoft-Server-ActiveSync was not found on this server.

filippo_carletti · August 17, 2016, 3:18pm

This seems to be impossible, you should have seen that line when you edited 00default:443.vhost.
And I can’t reproduce this.

kisaacs · August 17, 2016, 3:20pm

Could you post your edited version of 00default:443.vhost? In entirety?

filippo_carletti · August 17, 2016, 3:29pm

# ================= DO NOT MODIFY THIS FILE =================
# 
# Manual changes will be lost when this file is regenerated.
#
# Please read the developer's guide, which is available
# at https://dev.nethesis.it/projects/nethserver/wiki/NethServer
# original work from http://www.contribs.org/development/
#
# Copyright (C) 2013 Nethesis S.r.l. 
# http://www.nethesis.it - support@nethesis.it
# 
#
# ns7b1.neth.net:443
# Default virtual host
#
<VirtualHost *:443>
#
# 10base
#
ServerName ns7b1.neth.net

ErrorLog logs/ssl_error_log
TransferLog logs/ssl_access_log
LogLevel warn

<Files ~ "\.(cgi|shtml|phtml|php3?) >
    SSLOptions +StdEnvVars
</Files>
<Directory "/var/www/cgi-bin">
    SSLOptions +StdEnvVars
</Directory>

BrowserMatch "MSIE [2-5]" \
   nokeepalive ssl-unclean-shutdown \
   downgrade-1.0 force-response-1.0

CustomLog logs/ssl_request_log \
   "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
SSLCipherSuite DEFAULT:!EXP:!SSLv2:!DES:!IDEA:!SEED:+3DES



AccessFileName .htaccess

#
# 10server-manager permanent redirect
#
RewriteEngine On
RewriteRule ^/server-manager(/.*)?$  https://%{HTTP_HOST}:980$1  [L,R=301]



#
# 20ibays_include -- Include ibay configurations specific to this virtual host
#

 #
 # 30letsencrypt
 #
 Alias "/.well-known/acme-challenge/" "/var/www/html/.well-known/acme-challenge/"
 <Directory "/var/www/html/.well-known/acme-challenge/">
    Order allow,deny
    Allow from all
    Options -Indexes -FollowSymLinks
    AllowOverride None
 </Directory>
 
Alias /Microsoft-Server-ActiveSync /usr/share/webtop/z-push/index.php
ProxyPass /webtop http://localhost:8080/webtop
ProxyPassReverse /webtop http://localhost:8080/webtop

<Directory "/usr/share/webtop/z-push/">
    AllowOverride None
    Options None
    Require all granted
</Directory>
</VirtualHost>

kisaacs · August 17, 2016, 3:39pm

I just did a diff and the only difference that I get is the server names:

13c13
< # ns7b1.neth.net:443
---
> # swimail.stelleur.com:443
20c20
< ServerName ns7b1.neth.net
---
> ServerName swimail.stelleur.com
81a82
>

I have installed the following packages:

Account provider: OpenLDAP
Backup
Basic firewall
Email
FTP server
MariaDB (MySQL) server
Roundcube web mail
SMTP proxy
Web filter
Web proxy
Web server
WebTop groupware

Everything is current NS 7 beta 1 - out of the box.

What am I missing?

kisaacs · August 17, 2016, 3:47pm

Eureka!

The problem on the 404 is that I do not know how to spell “Mircosoft” - look at the original message that I posted…

It should be Microsoft-… not Mircosoft-…

Oh well. After some brow beating I am now progressing to BB10 and Outlook testing.

Will post shortly their outcomes.

gabriele_bulfon · August 17, 2016, 3:48pm

Hi all, I’m reading the thread, though I see the issue has been identified as not being on the WebTop side but on NethServer configuration side, and you’re on your way to the soltion.
If you need any additional help, let me know.

Gabriele

GG_jr · August 17, 2016, 4:05pm

POP3 proxy, if you want to use POP3.

kisaacs · August 17, 2016, 4:08pm

Thanks for jumping in. Just so it is clear what I am looking at doing:

evaluate web access - (BTW love the clean interface) - with focus on email/calendars/tasks/contacts
evaluate mobile access - (currently using BB10 on Blackberry Classic) - with the same focus
evaluate Outlook 2013 access
evaluate Thunderbird access

Not sure at this point, whether it should be a new/separate thread. Now that ActiveSync is working on BB10. It may be worthwhile to make the rest under “Webtop and Nethserver”