Can't access Exchange ActiveSync server - SSL certificates not being used

When I try to set up my email via Exchange ActiveSync to a corporate server, I am unable to connect. I am using the same exact settings as on an iPhone, where I am able to successfully connect.
Reading the console log in the iPhone configuration utility, the problem appears to be that the iPad is not using the corporate certificates I have installed to enable SSL access to the Exchange server. These certificates are installed in the exact same way they are on my iPhone, where they work correctly.
Has anyone else had a similar problem accessing Exchange mail using SSL certificates? Any ideas on how to fix this? Or is this a bug in the iPad software?

IM having the same problem. iPhone works fine on exchange atvwork but iPad with same settings says cannot connect to exchange server. Have you figured anything out yet?
Tom

Similar Messages

How can I unverify an email once it is not being used?

I changed my iTunes account email once. Now, I need to get back to that email, but Apple says it is being used in another account. I am pretty sure that the first email is not being used for any other account.
Through Apple's site, I chose "iForgot" to resend the password , so I should be able to login to that email account (if it was linked to another account, like they claim). Apple can't send an email for verification. Actually, they say that the email was sent, but it was not.
How can I unverify this email once Apple says it is linked to another account, but it is not (if it was, the iForgot email would come)?

for either method to work the state dividing lines must go past the state borders, for example, the line that divides these two states needs to go north a little bit more, I exaggerated the space so you can see, for your map this gap must be really small. Zoom in where you have trouble making separate shapes and fix it before using either tool.

Godaddy SSL certificate installation problems - intermediate certificate not being recognized

domain = mail.gottfried.org
Installed both the certificate and the intermediate certificate from godaddy (used the 10.6 mac os x version)
Response from:
http://www.sslshopper.com/ssl-checker.html#hostname=mail.gottfried.org
The certificate is not trusted in all web browsers. You may need to install an Intermediate/chain certificate to link it to a trusted root certificate. Learn more about this error. You can fix this by following GoDaddy's Certificate Installation Instructions for your server platform. Pay attention to the parts about Intermediate certificates.
When I check in 0000_any_443_.conf
I see:
SSLCertificateFile "/etc/certificates/mail.gottfried.org.1E5F3C903B64E78E3241929B16F616D1DDD130FE. cert.pem
SSLCertificateKeyFile "/etc/certificates/mail.gottfried.org.1E5F3C903B64E78E3241929B16F616D1DDD130FE. key.pem
SSLCertificateChainFile "/etc/certificates/mail.gottfried.org.1E5F3C903B64E78E3241929B16F616D1DDD130FE. chain.pem
I am assuming that the intermediate certificate should be:
mail.gottfried.org.1E5F3C903B64E78E3241929B16F616D1DDD130FE.chain.pem
When I look at that certicate it is the same as
mail.gottfried.org.1E5F3C903B64E78E3241929B16F616D1DDD130FE.cert.pem
When I check keychain and exported both the mail.gottfried.org certificate and also the starfield secure certification authority they match what was installed initially (what I downloaded from Godaddy).
It looks like in the install process the intermediate certificate is not being linked to the ssl certificate and that the ssl certificate is being used for the chain.
Anyone have any suggestions?
I have talked to both Godaddy and Apple Enterprise support. Godaddy has nothing past 10.6 instruction wise (though the support person really tried to help). The Apple rep couldnt really help and if I really want help from them I need to talk to integration where costs start at $700....
Anyone have an SSL provider that worked properly with 10.8 or has really good support for mountain lion server?
Please let me know.
Thanks!

While you still can, get a refund for the certificate, and get a certificate from somebody else, and preferably one that doesn't need an intermediate? That'll be the easiest.
If you're not doing ecommerce or otherwise dealing with web browsers and remote clients that you don't have some control over or affiliation with, you can use a private certificate and get equivalent (or arguably better) security. Running your own certificate authority does mean you'll learn more about certificates, though.
Here and here are general descriptions of getting certificates and intermediate certificates loaded, and some troubleshooting here and particularly here (TN2232). I have found exiting Keychain Access to be a necessary step on various versions. It shouldn't be, but...
FWIW and depending on your particular DNS setup and whether you're serving multiple web sites, you'll need a multiple-domain certificate.
Full disclosure: I've chased a few of these cases around for customers, and it can take an hour or three to sort out what the particular vendor of math, err, certificates has implemented, to confirm the particular certificate formats and possibly convert the certificates where necessary, and to generally to sort out the various posted directions and confusions. (I'm not particularly fond of any of the major math, err, certificate vendors, either.)

Index not being used in access path

Hi,
I have been trying to rewrite a query which currently is taking almost 1min and 25 secs to execute. The database version is 11.1.0.7.
The query is -
SELECT COUNT(1)
FROM TAB1 p
WHERE p.ACODE = 24377
AND NOT EXISTS (SELECT 1 FROM TAB2 ph where ph.PKey = p.AKey )
AND NOT EXISTS (SELECT 1 FROM TAB3 phs where phs.PKey = p.AKey )
AND p.rflag = 'Y';
The table originally didn't have an index on p.ACODE. So, I created this index and set it to visible and set the optimizer_use_invisible_indexes parameter also to TRUE. I set the monitoring on this index too. Even though I have created the index on the ACODE column, the access path doesn't use it. Can someone please tell me why this is not being used.
Below is the explain plan for the sql stmt and the usage of the index -
I have changed the actual table and column names -
SQL> SELECT COUNT(1)
2 FROM TAB1 p
3 WHERE p.ACODE = 24377
4 AND NOT EXISTS (SELECT 1 FROM TAB2 ph where ph.PKey = p.AKey )
5 AND NOT EXISTS (SELECT 1 FROM TAB3 phs where phs.PKey = p.AKey )
6 AND p.rflag = 'Y';
COUNT(1)
1
SQL> explain plan for
2 SELECT COUNT(1)
3 FROM TAB1 p
4 WHERE p.ACODE = 24377
5 AND NOT EXISTS (SELECT 1 FROM TAB2 ph where ph.PKey = p.AKey )
6 AND NOT EXISTS (SELECT 1 FROM TAB3 phs where phs.PKey = p.AKey )
7 AND p.rflag = 'Y';
Explained.
Elapsed: 00:00:00.02
SQL> @$ORACLE_HOME/rdbms/admin/utlxpls.sql
PLAN_TABLE_OUTPUT
Plan hash value: 3942424611
| Id | Operation | Name | Rows | Bytes | Cost (%CPU)| Time |
| 0 | SELECT STATEMENT | | 1 | 87 | 214K (2)| 00:42:57 |
| 1 | SORT AGGREGATE | | 1 | 87 | | |
|* 2 | HASH JOIN ANTI | | 1 | 87 | 214K (2)| 00:42:57 |
|* 3 | HASH JOIN ANTI | | 1 | 60 | 209K (2)| 00:41:56 |
|* 4 | TABLE ACCESS FULL | TAB1 | 1 | 32 | 209K (2)| 00:41:55 |
| 5 | INDEX FAST FULL SCAN| PK_TAB3 | 29918 | 818K| 53 (0)| 00:00:01 |
| 6 | INDEX FAST FULL SCAN | PK_TAB2 | 3199K| 82M| 5059 (1)| 00:01:01 |
Predicate Information (identified by operation id):
2 - access("PH"."PKey"="P"."AKey")
3 - access("PHS"."PKey"="P"."AKey")
4 - filter(TO_NUMBER("P"."ACODE")=24377 AND "P"."rflag"='Y')
20 rows selected.
Elapsed: 00:00:00.03
SQL> select index_name,VISIBILITY from user_indexes where index_name='IDX_TAB1_ACODE';
INDEX_NAME VISIBILIT
IDX_TAB1_ACODE VISIBLE
Elapsed: 00:00:00.01
SQL> show parameter visible
NAME TYPE VALUE
optimizer_use_invisible_indexes boolean TRUE
SQL>
SQL> SELECT v.index_name, v.table_name,
v.monitoring, v.used,
start_monitoring, end_monitoring
FROM v$object_usage v, dba_indexes u
WHERE v.index_name = u.index_name
AND v.index_name = 'IDX_TAB1_ACODE';
INDEX_NAME TABLE_NAME MON USE START_MONITORING END_MONITORING
IDX_TAB1_ACODE TAB1 YES NO 05/26/2010 14:13:41
Elapsed: 00:00:00.10
Edited by: user12158503 on May 26, 2010 1:24 PM

Thanks Centinul.
I apologize for posting in both sections. I put it in the Database General too because I thought I originally posted it in the wrong section.
The index was not being used because it was doing the implicit type conversion. When I enclosed it in quotes, it returns the result within a second and it uses the index.(whereas without the index it takes around 1min 25 sec)
Here is the explain plan and execution time after enclosing it in quotes -
SQL> explain plan for
2 SELECT COUNT(1)
3 FROM TAB1 p
4 WHERE p.AKey = '24377'
5 AND NOT EXISTS (SELECT 1 FROM TAB2 ph where ph.PKey = p.AgilityKey )
6 AND NOT EXISTS (SELECT 1 FROM TAB3 phs where phs.PKey = p.AgilityKey )
7 AND p.rflag = 'Y';
Explained.
Elapsed: 00:00:00.02
SQL> @$ORACLE_HOME/rdbms/admin/utlxpls.sql
PLAN_TABLE_OUTPUT
Plan hash value: 2008452282
| Id | Operation | Name | Rows | Bytes | Cost (%CPU)| Time |
| 0 | SELECT STATEMENT | | 1 | 87 | 5134 (1)| 00:01:02 |
| 1 | SORT AGGREGATE | | 1 | 87 | | |
|* 2 | HASH JOIN ANTI | | 1 | 87 | 5134 (1)| 00:01:02 |
|* 3 | HASH JOIN ANTI | | 1 | 60 | 60 (2)| 00:00:01 |
|* 4 | TABLE ACCESS BY INDEX ROWID| TAB1 | 1 | 32 | 6 (0)| 00:00:01 |
|* 5 | INDEX RANGE SCAN | IDX_TAB1_AKey | 4 | | 1 (0)| 00:00:01 |
| 6 | INDEX FAST FULL SCAN | PK_TAB3 | 29918 | 818K| 53 (0)| 00:00:01 |
| 7 | INDEX FAST FULL SCAN | PK_TAB2 | 3199K| 82M| 5059 (1)| 00:01:01 |
Predicate Information (identified by operation id):
2 - access("PH"."PKey"="P"."AGILITYKEY")
3 - access("PHS"."PKey"="P"."AGILITYKEY")
4 - filter("P"."rflag"='Y')
5 - access("P"."AKey"='24377')
22 rows selected.
Elapsed: 00:00:00.02
SQL> SELECT COUNT(1)
2 FROM TAB1 p
3 WHERE p.AKey = '24377'
4 AND NOT EXISTS (SELECT 1 FROM TAB2 ph where ph.PKey = p.AgilityKey )
5 AND NOT EXISTS (SELECT 1 FROM TAB3 phs where phs.PKey = p.AgilityKey )
6 AND p.rflag = 'Y';
COUNT(1)
1
Elapsed: 00:00:00.52
Can you give me some tips on where I could read about learning to understand the explain plan. I did read a few articles which did help me, but not much. I am looking for something in detail.

How can the client know if the SSL certificate specified in the service-config.xml file is invalid/u

Hi,
How can the client know if the SSL certificate specified in the service-config.xml file is invalid/untrusted/expired? For example using iOS client, the trusted certificate will not work and the client has no way to know that the certificate is untrusted. Can the lcds server return any specific exceptions for SSL errors?
Thanks,
Swathi.

We use a standard Java keystore and certificate validation can be handled as per standard best practices. At present we do not provide a hook point to validate the server certificate. However, you can register a bootstrap service which validates the certificate on system startup: http://help.adobe.com/en_US/dataservicesjee/4.6/Developing/WSc3ff6d0ea77859461172e0811f00f 6fe7f-7ffeUpdate.html This would require you to pass another copy of the keystore configuration to you Bootstrap service and then you can inspect the certificate in the keystore and validate it.

Can't access my Directory Server using the Console installed on a machine

can't access my Directory Server using the Console installed on a remote server, lookied into knowledge base article 4693, but still same any idea ?

I too am having problems accessing Directory server from Netscape Console installed on Winxp.
If I try to open Directory server it doesn't give any error. No windows nothing.
If I try th same from the machine on which it is installed everything is fine. What is strange is that it did open a couple of times. But at the same time I can open the admin server, Netscape Messaging server from the xp box. Searching all over for a solution. Any help/pointers would be greatly appreciated.
Config details:
iDS4.13, iMS 5.0, running on Sol 8 box
Netscape Console 4.2 on WinXP.
Thanks

Can users access iPlanet Calendar Server 2.0 (iCS 2.0) from anywhere?

Can users access iPlanet Calendar Server 2.0 (iCS 2.x) from anywhere?
<P>
Regardless of whether you are a remote user, mobile user, or in the
office every day, you need access to your calendaring information anytime from
anywhere. iCS 2.x provides a personal calendar and event solution that can be
any device that includes a web browser. iCS 2.x works with other Alliance
solutions such as Sun Internet Mail Server and Netscape Messaging Server
software to ensure complete access to your calendar data regardless of location,
platform, or browser.

Hi,
Thank you for your suggestion. I have tried with your option also. Still I am getting the second time userid/password dialogue box.
Is there any other solution to avoid the second time user authentication dialogue box?
Do you want to see the ACL file?
Thanks & Regards,
Murthy

How can I specify SMTP Email Server userID and password when using Email VIs?

How can I specify SMTP Email Server userID and password when using Email VIs included in Internet Toolkit?

Hi,
A similar question was posted on Discussion Forums soem time back. Please see the link below.
http://exchange.ni.com/servlet/ProcessRequest?RHIVEID=101&RPAGEID=135&HOID=506500000008000000C7B00000&UCATEGORY_0=_49_%24_6_&UCATEGORY_S=0
You would find the last post in the above thread quite useful where it has a link to OpenG code. I am also copying that link for your reference.
http://www.openg.org/tiki/tiki-index.php?page=OpenG+Internet+Connectivity+Tools
Please feel free to respond to this post with any questions/comments you may have.
Regards,
Ankita A.
National Instruments

Can I access English movies and TV, living in Germany using the Apple TV

Can I access English movies and TV, living in Germany using the Apple TV or maybe something else?
I live since short in Germany and would like to have access to English TV and English movies using my internet connection. Looking at for example the Apple Store your store connection is based on your IP {address and this lands me in the German store where movies are not available in original language (or so it seems, if you do not know this the Germans change the soundtracks of all foreign movies to German by dubbing).
Does anybody know how I would be able to watch either UK or USA TV over the internet (preferable on my TV)?
I say thank you and yes in case you did not guess, I am new to the topic of TV over internet.

thanks Jolly Giant
however, there are somewhat limited options such as [_*Kabel Digital*_|http://www.kabeldeutschland.de/fernsehen/kabel-digital-international/englisch.ht ml].
I looked in to that and they are non of the channels I want to see. Most of it is stuff you catch free to air.
additionally, many movies, tv shows and sport broadcasts on [_*Sky Deutschland*_|http://www.sky.de/web/cms/de/abonnieren-senderinfos.jsp] come in [Zweikanalton|http://en.wikipedia.org/wiki/Zweikanalton].
I talked to the Sky folk in Germany a while ago, and sorry to say they are as knowledgeable as the Sky UK people. In other words nobody could guarantee me anything or commit to it beingavailable in English. The most committed answer I got was that it depends on many things and one would have to look at each broadcast to see if it is also available in English.
Hence my search continues.

How do you fix this error? Can't access photos Your photo library is either in use by another application or has become unreadable

How do you fix this error? Can't access photos----" Your photo library is either in use by another application or has become unreadable"

Try this: launch iPhoto with the Option key held down and create a new, test library. Import some photos and check to see if the same problem persists. If you can create and use a new library then your current library is damaged.
If that's the case make a temporary, backup copy (if you don't already have a backup copy) of the library and apply the two fixes below in order as needed:
Fix #1
Launch iPhoto with the Command+Option keys held down and rebuild the library.
Select the options identified in the screenshot.
Fix #2
Using iPhoto Library Manager to Rebuild Your iPhoto Library
Download iPhoto Library Manager and launch.
Click on the Add Library button, navigate to your Home/Pictures folder and select your iPhoto Library folder.
Now that the library is listed in the left hand pane of iPLM, click on your library and go to the File ➙ Rebuild Library menu option
In the next window name the new library and select the location you want it to be placed.
Click on the Create button.
Note: This creates a new library based on the LIbraryData.xml file in the library and will recover Events, Albums, keywords, titles and comments but not books, calendars or slideshows. The original library will be left untouched for further attempts at fixing the problem or in case the rebuilt library is not satisfactory.
OT

Support for Global SSL certificates - not

Hello,
Just found out the hard way that 10g does not support Verisign Global Certificates (Secure Site Pro).
BEA, IBM, and MICROSOFT support global certificates.
Oracle is the only one that does not!
If customer requirements dictate global certificates Oracle AS is not the product to use.
Hernando

See my reply in the other thread:
Re: SSL certificates not visible while RFC destination creation
Cheers, Wolfgang

Please tell me you can get access to the messages through the sdk? Using the protocol Bluetooth (MAP)

please tell me you can get access to the messages through the sdk? Using the protocol Bluetooth (MAP)

If you're referring to iMessage, you can't.
That data is off limits.

Tip for Mail certificates not being honored for parked domains

I was having trouble with certificates not being honored, such that when my imap mail was being checked I constantly had the warning box come up to tell me the certificate was not valid. I would show the certificate, tell it to be trusted always, and yet I'd still see the triangle warning next to my inbox, and have trouble connecting. Then I saw a post about having multiple domains pointed to the same server, so I forwarded from one domain to the other and now the certificate is honored.
The other domain I had was parked at the same domain by my host, so the underlying imap server domain was the same for both. That must have caused a conflict in having both certificates be honored, and indeed only one of them at a time would work. Deleting one of the accounts solved the problem, though I had to set up forwarding to bring all my mail from one to the other.
While the problem is solved, it seems like there ought to be a way that I can have mail to my main domain and parked domain using the same underlying domain imap server not cause this conflict, but in the meantime I'll just have to forward from the parked to the main domain.
Just wanted to share the solution here.

Alex Thanks for the reply
my entry in amavisd.conf reads as follows:
@localdomainsmaps = ( [".$mydomain"] ); # list of all local domains
I thought this was supposed to pick up all the local aliases?
What does changing to ( 1 ); do differently to above??
TIA
Tony

I have I-phone 5 with 15GB. I currently have used 12.8 GB. I get error message that storage is almost full, go to setting and mymail is 5.7 GB. Can that be how alot of my storage is being used? If so or not any advise?

I have I-phone 5 with 15 GB. I currently have used 12.8 GB. I get error message that storage is almost full, I go to setting and my mail is using 5.7 GB. Can that be how alot of my storage is being used? If so or not any advise?

caek1 wrote:
Hi,
I'm trying to change email address on my Apple ID since the email registered for the account has been hacked and I can't access it anymore. The email I want to change to is connected to another Apple ID I created about 4 years ago, though I successfully changed the email on that account as well. So the email I would like to use for my main Apple ID shouldn't be "locked" anymore.
Though, when trying to change the email on my Apple ID I get an error message (in Swedish, so this is a direct translate from google): "This e-mail address is your email address for notification. It can not be used as the Apple ID or primary email. Choose a different address."
I'm not really sure what this means or how I can fix this.
It means exactly what it says... The email Address is in Use. You cannot re-use it.
Apple ID Support > http://www.apple.com/support/appleid/

How can I tell if direct-path insert is really being used?

I have a number of INSERT statements with /*+ APPEND */ hints, that I suspect are not using direct-path insert processing. How can I tell (via the plan, via Enterprise Manager, whatever) if direct-path is being used?
If it is not being used, then I can research why that might be, and try to resolve the obstacles there. But if it is being used, then I want to know that so I can focus elsewhere.
Thanks,
Mike

mtefft wrote:
The question of whether direct-path is possible with multi-table inserts has been on my mind...
Moreover, in another forum post, we have eyewitnesses that it has happened at least once:
APPEND Hint in Multi-table insert
So I think that post (giving examples of Explain plans with multi-table inserts successfully using direct-path) answers my question.
Mike,
Thanks for that link. When I checked my example again I realised that it had a foreign key constraint between the two tables I was inserting into. (It was a demonstration of how to normalise an incoming denormalised address table, so converted a flat table into address/address lines). When I removed the constraint I got the multi-table insert.
However, I followed this up with a check on the execution plans and for the 10.2.0.3 I was running noted the following:
Plan reported after running the insert and select from dbms_xplan.display_cursor()
| Id | Operation           | Name | Rows | Bytes | Cost |
|   0 | INSERT STATEMENT    |      |       |       |    30 |
|   1 | MULTI-TABLE INSERT |      |       |       |       |
|   2 |   TABLE ACCESS FULL | T3   | 10000 | 1240K|    30 |
------------------------------------------------------------Plan reported after explain plan / select from dbms_xplan.display()
| Id | Operation           | Name | Rows | Bytes | Cost |
|   0 | INSERT STATEMENT    |      | 10000 | 1240K|    30 |
|   1 | MULTI-TABLE INSERT |      |       |       |       |
|   2 |   DIRECT LOAD INTO | T1   |       |       |       |
|   3 |   DIRECT LOAD INTO | T2   |       |       |       |
|   4 |    TABLE ACCESS FULL| T3   | 10000 | 1240K|    30 |
------------------------------------------------------------If you try to check for direct path inserts by looking at the in-memory plans, you might not see the direct load that is really happening. (Perhaps the a check that both / all the target tables are locked with TM mode 6 may give you a clue.)
Regards
Jonathan Lewis

Can't access Exchange ActiveSync server - SSL certificates not being used

Similar Messages

Maybe you are looking for