Solved - ActiveSync Authentication

[kcsc]

AS keeps telling me my credentials are incorrect. I have tried every combination I can think of for them, and I know the password is correct, but it will not accept them. I am using kerberos for all other services (not sure if there is something special needed for this), but I have even put the om_auth above kerberos in the files modified (all before AS), but it still denies the credentials. Going to the https(s)://SERVER/Microsoft-Server-ActiveSync gives the same results; it just prompts me for a password, but doesn't except anything I give it. The only phones I have tried so far are Windows Mobile 6.

[sla]

If your running activesync on a separate server and the scalix-server is
firewalled from that server, try opening port 5768 (openmailpxy). Contrary to the
documentation I also had to open that port to get activesync to work.

--
sla

[kcsc]

It is on the same server. I have noticed something that seems to be wrong since the upgrade from 11.4.3 -> 11.4.4 in the httpd error_log, no other configurations have been changed other than the upgrade. I am getting this:

Code: Select all

[Sun Jun 14 21:38:14 2009] [error] (111)Connection refused: proxy: AJP: attempt to connect to 10.1.1.3:8009 (mail1.domain.com) failed
[Sun Jun 14 21:38:14 2009] [error] ap_proxy_connect_backend disabling worker for (mail1.domain.com)
[Sun Jun 14 21:38:14 2009] [error] proxy: AJP: failed to make connection to backend: mail1.domain.com
[Sun Jun 14 21:38:24 2009] [error] proxy: AJP: disabled connection for (mail1.domain.com)
[Sun Jun 14 21:38:34 2009] [error] proxy: AJP: disabled connection for (mail1.domain.com)
[Sun Jun 14 21:38:44 2009] [error] proxy: AJP: disabled connection for (mail1.domain.com)
[Sun Jun 14 21:38:54 2009] [error] proxy: AJP: disabled connection for (mail1.domain.com)
[Sun Jun 14 21:39:04 2009] [error] proxy: AJP: disabled connection for (mail1.domain.com)
[Sun Jun 14 21:39:14 2009] [error] (111)Connection refused: proxy: AJP: attempt to connect to 10.1.1.3:8009 (mail1.domain.com) failed
[Sun Jun 14 21:39:14 2009] [error] ap_proxy_connect_backend disabling worker for (mail1.domain.com)

I haven't traced the problem down yet, but it doesn't seem to be affecting anything other than AS. All services (AS not included) seem to be working fine, and there are several established connections to 8009. The errors seem to be tied with attempted AS sync tries. What would cause AS to not be able to connect to the backend, when all the other ajp services can, or is this error normal if Authentication fails.

I have this is the scalix-wireless.log

Code: Select all

2009-06-14 22:14:40,616 FATAL [PlatformClient.checkApiVersion:1057] CLIENT - Platform API version could not be validated due to a fatal error.  Check configuration/connections and restart the Tomcat server.
java.net.ConnectException: Connection refused
        at java.net.PlainSocketImpl.socketConnect(Native Method)
        at java.net.PlainSocketImpl.doConnect(Unknown Source)
        at java.net.PlainSocketImpl.connectToAddress(Unknown Source)
        at java.net.PlainSocketImpl.connect(Unknown Source)
        at java.net.SocksSocketImpl.connect(Unknown Source)
        at java.net.Socket.connect(Unknown Source)
        at java.net.Socket.connect(Unknown Source)
        at java.net.Socket.<init>(Unknown Source)
        at java.net.Socket.<init>(Unknown Source)
        at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:80)
        at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:122)
        at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707)
        at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361)
        at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:387)
        at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171)
        at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397)
        at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323)
        at com.scalix.wireless.api.service.Connection.execute(Connection.java:108)
        at com.scalix.wireless.api.service.PlatformClient.checkApiVersion(PlatformClient.java:1050)
        at com.scalix.wireless.controller.CheckAuthInterceptor.authenticateUser(CheckAuthInterceptor.java:152)
        at com.scalix.wireless.controller.CheckAuthInterceptor.preHandle(CheckAuthInterceptor.java:70)
        at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:865)
        at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:809)
        at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:571)
        at org.springframework.web.servlet.FrameworkServlet.doOptions(FrameworkServlet.java:542)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:656)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
        at org.springframework.web.filter.AbstractRequestLoggingFilter.doFilterInternal(AbstractRequestLoggingFilter.java:156)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:172)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
        at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:200)
        at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:283)
        at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
        at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
        at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
        at java.lang.Thread.run(Unknown Source)
2009-06-14 22:14:40,620  WARN [CheckAuthInterceptor.preHandle:96] AUTHENTICATION - Problem encountered during authentication, forcing re-authentication
com.scalix.wireless.api.service.AuthenticationException: Platform service with this version is not useable with the ActiveSync server software
        at com.scalix.wireless.api.service.PlatformClient.authenticate(PlatformClient.java:80)
        at com.scalix.wireless.controller.CheckAuthInterceptor.authenticateUser(CheckAuthInterceptor.java:155)
        at com.scalix.wireless.controller.CheckAuthInterceptor.preHandle(CheckAuthInterceptor.java:70)
        at org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:865)
        at org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:809)
        at org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:571)
        at org.springframework.web.servlet.FrameworkServlet.doOptions(FrameworkServlet.java:542)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:656)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:269)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
        at org.springframework.web.filter.AbstractRequestLoggingFilter.doFilterInternal(AbstractRequestLoggingFilter.java:156)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:188)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:172)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:117)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:108)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:174)
        at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:200)
        at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:283)
        at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:773)
        at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:703)
        at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:895)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:689)
        at java.lang.Thread.run(Unknown Source)

This seems to imply a version problem. Scalix-Platform version is 11.4.4.2575 release 1; scalix-tomcat is version 5.5.27 release 959; and scalix-tomcat-connector is version 11.4.4.949 release 1.rhel5

[tsanchez88]

Just curious if there was ever a solution to this problem? I'm posted a similar question in the ActiveSync forum. I too can not seem to authenticate and see many of the same error messages in my logs.

[kcsc]

I have not had that much time to look at it much further, but I have not yet solved it. I am planning on setting up a fresh box without some of the extras that I have on the main box and see if that sheds any light. I have determined that the error I was getting in the http_error log is only when connecting to the AJP for the Active-Sync. What I am still not sure is if it is failing the connection because of a configuration or because it is failing the authentication. I will try and keep this thread up to date, probably not till next week though.

[kcsc]

Solved

FYI I am running CentOS 5.2

Apparently one of the updates modified the "/var/opt/scalix/m1/tomcat/conf/server.xml", it commented out the connector port for 8080 and changed some of the variables. I modified the file back and everything seems to work fine.