Kolab Activesync: unable to configure Outlook 2016 using Exchange

[Mihai Badici]

On 9/28/18 4:20 PM, Aleksander Machniak wrote:
> On 09/28/2018 02:55 PM, Mihai Badici wrote:
>> The outlook 2016 autoconfiguration seems to start now with:
>>
>> "GET
>> /autodiscover/autodiscover.json?Email=mihai.badici%40mydomain&Protocol=ActiveSync&RedirectCount=1
>> HTTP/1.1" 404 228
> Thanks for bringing this. It gave me some new keywords for google search. It looks that it
> is a new protocol. And the request seems to come from Office365 servers not directly from
> Outlook.
>
> I didn't find an official protocol spec, but I've found
>
> https://www.msxfaq.de/exchange/autodiscover/autodiscover_v2.htm
> and
> https://github.com/mailcow/mailcow-dockerized/blob/master/data/web/autodiscover-json.php
>
> I don't know though if implementing this in our autodiscover service is enough.
>
Ok, some temporary conclusions:

1. The autodiscovery can be broken in outlook 2016 for Exchange servers.

I used the json from your link by simply adding the autodiscover url.

  if ($_GET['Protocol'] == 'ActiveSync') {
  echo '{"Protocol":"ActiveSync","Url":"' .
"https://mydomain/Microsoft-Server-ActiveSync/" . '"}';

Outlook try the next step:

[30/Sep/2018:23:45:22 +0300] "OPTIONS /Microsoft-Server-ActiveSync
HTTP/1.1" 401 -

But it not use the username and it not ask for credentials.

If I manually configure activesync i have this line in apache's log:

domain\\mihai.badici [30/Sep/2018:23:44:45 +0300] "OPTIONS
/Microsoft-Server-ActiveSync HTTP/1.1" 200 -

My guess is they intent to put all the parameters in this json in the
future and deprecate the "old" protocol because for activeSync the url
is in fact the only information we need to configure outlook.





IMHO we need to refuse the new protocol and goes to

elseif ($_GET['Protocol'] == 'Autodiscoverv1') {
  echo '{"Protocol":"AutodiscoverV1","Url":"https://' .
$_SERVER['HTTP_HOST'] . '/Autodiscover/Autodiscover.xml"}';

( in the original script there is an issue because outlook use
Autodiscoverv1 not AutodiscoverV1 but maybe that's version dependent,
the windows guy's don't respect the case in filenames..)

In the link in german you provided there are some indication about how
to refuse the ActiveSync protocol and make it use the old one but i
didn't tried yet.

The old protocol should be ok, I tested with their tool:

https://testconnectivity.microsoft.com/