@alu64 you are welcome. Good luck ;-)

It appears the problem is with Outlook (go figure). The first time I open Outlook after creating a new profile I can see the Device ID in my Apache logs:

x.x.x.x - xxxxx@xxxxxxxxxx [30/Dec/2021:01:23:43 +0000] "POST /Microsoft-Server-ActiveSync?Cmd=FolderSync&User=xxxxx@xxxxxxxxxx&DeviceId=EFB9B5DDB53843B5AA865100AA459178&DeviceType=WindowsOutlook15 HTTP/1.1" 200 498

However, if I close Outlook and re-open it, I see a different Device ID in my Apache logs:

x.x.x.x - xxxxx@xxxxxxxxxx [30/Dec/2021:01:30:18 +0000] "POST /Microsoft-Server-ActiveSync?Cmd=FolderSync&User=xxxxx@xxxxxxxxxx&DeviceId=E429C4ACF36A4108AFF029F8D3C503EF&DeviceType=WindowsOutlook15 HTTP/1.1" 200 13

I found that the Device ID is stored in the Windows registry at:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Profiles\{profile_name}\9375CFF0413111d3B88A00104B2A6676\00000002\EAS DeviceId

If I change the Device ID in the registry back to the original one, everything works. Has anyone else run into this?? Outlook does not save the Device ID in the registry after the initial sync. The next time I open Outlook, it creates a new Device ID and stores it in the above key. I am using Outlook Version 2111 Build 16.0.14701.20254

Hey Can you show the complete modified files?
I want to use z-Push with DSM 7 and contacts and calendar.

Ok this is weird now. I thought I give it another try with Z-Push debugging on. Didn’t try Z-Push debugging since I saw no error message in the backends (Dovecot/Z-Push).

I cannot reproduce the issue anymore. Even after disabling debugging again it is still working with IPv6 AND IPv4 on.

So strange, I didn’t change anything since my last try several days ago. Even my external public IPs are the same. It must be an error in the iOS Mail app.

I will monitor it for a couple of days.

@bob4os Does not change a thing. What is really frustrating is that it is working for some entries like sarahs but not for Petras. I am not sure if this is related to some of these error messages above.
The problem is that i have way to many of these error messages and need to get rid of some of them to point problems to specific error messages. I started by tracking down some of these but it really takes a lot of time to link a problem to a specific mail or calendar entry.

Just in case someone has the same issue.

I changed the imap settings to SSL and suddenly IOS was able to send mails.

Now i just need to find out why z-push is disconnecting once outlook is connected:

[WARN] [michael.klein] /usr/share/z-push/backend/imap/imap.php:127 imap_open(): Couldn't open stream {mailserver:993/imap/ssl} (2) [ERROR] [michael.klein] BackendIMAP->Logon(): can't connect as user 'michael.klein' on '{mailserver:993/imap/ssl}': Can not authenticate to IMAP server: [CLOSED] IMAP connection broken (authenticate) [FATAL] [michael.klein] Exception: (AuthenticationRequiredException) - Access denied. Username or password incorrect [michael.klein] IP: 10.20.0.4 failed to authenticate user 'michael.klein' [WARN] [michael.klein] Unknown:0 Unknown: Can not authenticate to IMAP server: [CLOSED] IMAP connection broken (authenticate) (errflg=2) (8)

I’m having the same issue … the policies file seems fine, and I inspected the code and made sure it’s referring to the correct file … any suggestions please :(

I’m use the latest final stable code from git

This thread is also crucial: https://forum.kopano.io/topic/1634/centos7-no-matter-what-i-get-access-denied-please-send-authorisation-information/5?_=1631478031707

@fbartels Thanks for the quick reply. In case it helps anyone else, I discovered that the autodiscover POST request coming from Outlook contains the following data:

<AcceptableResponseSchema> http://schemas.microsoft.com/exchange/autodiscover/outlook/responseschema/2006a </AcceptableResponseSchema>

So you are right, it only accepts an outlook response and not a mobilesync response. That is very unfortunate.

I have some open tickets there on a variety of issues I want to improve Z-Push.
But I am no professional developer and I am doing this mostly in my free time.

@bob4os

no error message, just the info that the connection was closed…

Jun 13 13:31:22 imap(maedball)<1392295><MuoAEaTE3r0AAAAAAAAAAAAAAAAAAAAB>: Info: Connection closed (No commands sent) in=0 out=400 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Jun 13 13:31:24 imap-login: Info: Login: user=<maedball>, method=PLAIN, rip=::1, lip=::1, mpid=1392755, TLS, session=<nkutFKTEuL4AAAAAAAAAAAAAAAAAAAAB>

Did you enable GAL via SEARCH_PROVIDER in the main config.php?
This will limit search to contacts only, serverside mail search will not work properly anymore.

I’m using the combined backend with CardDAV and added some lines there to include the SearchLDAP backend, but it is a hack I’m not happy with…

Are you interested in using both? Maybe I can work out a proper solution to this.

@manfred
I finally got a few hours to debug through this. Bottom line is

ContentParameters class has a deletesasmoves property with a default “unset” value of true. This is never used anywhere in the z-push-develop source tree as far as I can see. So passing that property in the ContentParameters object to the backend functions is of zero value.

SyncParameters class has a deletesasmoves property with a default “unset” value of false. This is updated based on the presence of the DeletesAsMoves flag in the incoming sync collection. It is subsequently used to decide between calling ImportMessageMove or ImportMessageDeletion - so if backend->DeleteMessage gets called it is because the SyncCollection dictated that. So, the basic code logic is correct - and the ticket ZP-1604 should be closed on that basis.

However, there is one remaining issue - the default “unset” value of deletesasmoves in SyncParameters is set to false. This is incorrect according to the specification which states

“If the client wants to permanently delete items, the request MUST include the DeletesAsMoves element with a value of 0 (FALSE). A value of 1 (TRUE), which is the default, indicates that any deleted items are moved to the Deleted Items folder. The default is assumed when the DeletesAsMoves element is either empty or not present.”

I will open a separate ticket for that.

@manfred yes. Unfortunately that didn’t work. I decided to turn all safety and security options off and have unencrypted traffic for now until I can make it work in general but so far I am running in more issues in the backends, this time caldav. see here: Cal Dav Sync error