Outlook Mobile ask each logon for password

goudduif

since a couple months the outlook mobile client, on Andraoid, and iPhone ask us each logon for the user credentials. In the past this works without any issue, but on this moment, I can’t find the solution for it.
We run Kopano on our UNC Server, so logon’s are don with Ldap.
Hopefully one of you can put me in the right direction, to resolve this issue.
Thanks!

alexthetiger68

Which kopano-core version are you using? What you describe sounds a lot like the LDAP issue we’re discussing in this thread: https://forum.kopano.io/topic/3316/can-t-contact-ldap-server/20

I experienced the ‘clients ask for user credentials’ as well, and it was resolved by upgrading to core-10.0.6.496 . I still see LDAP errors in the server.log, but the clients now work without constantly asking for (already locally stored) credentials.

fbartels

Crosspost: https://help.univention.com/t/outlook-mobile-ask-to-apply-the-pasword-each-logon-active-sync/16264

As @alexthetiger68 pointed out the current version of Kopano, Z-Push and potentially your os could help.

Mobile phones use Z-Push to synchronise, normally after the password was changed phones (re-)ask the password. Some logging would be helpful, you can check https://wiki.z-hub.io/display/ZP/Debugging for debugging instructions for Z-Push.

goudduif

Thanks for your replay, I’ve the following versions installed on my server.
Kopano core 8.7.1.0-1 installed
Z-push 2.4.5 installed
Theses are the latest one that are available on UNC.
on the push log I see the following.

10/10/2020 06:44:26 [22954] [ INFO] [user] cmd='Ping' memory='3.05 MiB/2.00 MiB' time='180.21s' devType='Outlook' devId='3f5534f8a3b9405e8e39c03c1499f3ec' getUser='user' from='52.96.0.181' idle='180s' version='2.4.5+0-0' method='POST' httpcode='200'
10/10/2020 06:44:28 [22954] [ INFO] [user] SyncCollections->CheckForChanges(): Waiting for store changes... (lifetime 180 seconds)
10/10/2020 06:45:08 [22892] [ INFO] [user] SyncCollections->CheckForChanges(): Waiting for store changes... (lifetime 1184 seconds)
10/10/2020 06:45:37 [22765] [ INFO] [user] StatusException: SyncCollections->CheckForChanges(): Timeout forced after 630s from 1184s due to other process - code: 3 - file: /usr/share/z-push/lib/core/synccollections.php:579
10/10/2020 06:45:37 [22765] [ INFO] [user] cmd='Ping' memory='3.04 MiB/2.00 MiB' time='630.06s' devType='iPhone' devId='uk5o1ec5gl3nv2l9ns0csbsfco' getUser='user' from='192.168.0.143' idle='630s' version='2.4.5+0-0' method='POST' httpcode='200'

And on the error log I see the following

10/10/2020 07:07:00 [22871] [FATAL] [wim] Exception: (AuthenticationRequiredException) - Access denied. Please send authorisation information

Manfred

Hi @goudduif,

Z-Push 2.4.5 is not the latest version. The current stable is 2.5.2 and 2.6.0 final will be released soon.

@goudduif said in Outlook Mobile ask each logon for password:

And on the error log I see the following

10/10/2020 07:07:00 [22871] [FATAL] [wim] Exception: (AuthenticationRequiredException) - Access denied. Please send authorisation information

It looks like the app doesn’t send the credentials to Z-Push. I suppose it has token based authentication now, so it would be helpful if you would provide the full request headers.

However I fully agree with the advice you got at the univention forum - do not use Outlook mobile client.

Manfred

goudduif

@Manfred
On Univention I still didn’t see a newer version off the Z-push application

Manfred

Hi @goudduif,

@goudduif said in Outlook Mobile ask each logon for password:

@Manfred
On Univention I still didn’t see a newer version off the Z-push application

There’s Kopano blog post regarding UCS updates: https://kopano.com/blog/staying-up-to-date-with-kopano-releases-on-ucs/

What about my other notes, especially regarding request headers?

Manfred