Microsoft Patch for OWA 2007 CRES Secure Mail Recipients

CRES Secure Envelope Recipients attempting to open the CRES Secure Envelope through Microsoft OWA 2007 will need to enable the server side administrative option to disable the HTML/XML filter. Though this HTML filter option will be officially released in the yet-to-be-released Microsoft Exchange 2007 SP1 Rollup 8, Microsoft customers can request an interim patch from Microsoft. How and when to contact Microsoft Customer Service and Support: http://support.microsoft.com/kb/295539

I had this same issue, except I have Symantec mail security not Forefront. It wound up being a line in the adult content filter. For whatever reason, they included "If you received this email" as one of the literal strings. This is probably part
of almost every corporate confidentiality clause I have ever seen!! go figure......
Thanks for the event log hint- since I have the adult content set to delete, I had no good tracking mechanism in Exhange or SMSME. I set email notifications for the future on these.
Brent
I had this same problem, but I have ESET Mail Security Server. in some one case the problem y solved if I attach the "user@domain" in the "white
List". But in many case the problem is continuous. I have Exchange 2007 in MS Windows Server 2003.
Thanks for yours help.

Similar Messages

Microsoft patches for Office 2007 applications . . . . .

How do I get the MS Office 2007 extensions (.docx, etc) to open and be readable without going to textedit? I have downloaded the Microsoft patches, but apparently they are not being placed in the correct file to automate the process. Can anyone help. Thanks. jn

This forum is for troubleshooting Apple Software Update for Windows, a software package for Windows designed to update Apple products that run on Windows, and not related to Microsoft Office. Please post Office related questions on Microsoft's own forums for their Mac products.
http://www.officeformac.com/productforums

Microsoft Patches for Call Manager

HELP !!
Where do I find the "approved" Microsoft patches for CCM4.x please ?
Regards
Scott

Hi Scott,
You will need a valid CCO account (which I guess you've already got). Then just go to the support section on the Cisco website, choose "download software", then just specify your CCM version etc. and you will see all the patches available.
Cisco guarantees that they will release any critical operating system patch within 24 hours of the Microsoft announcement. Noncritical patches are rolled up into a monthly update.
Please rate if useful....

New security patch for ios 6.1.3 on iphone

just read a new article on yahoo news, urging folks with iphones, ipads and the itouch, to update the latest patch for a newly discovered security vulnerability.
The article gave instructions on how to update ios 6.1.3 on the iphone but those instructions don't work for me because my iphone 4s only shows the update to upgrade to ios7 and I do not want to do that.
is there a way to get rid of the prompt to upgrade to 7? And is there a way to update ios 6.1.3 and get the security patch?
Thanks.
Susie

deggie wrote:
Because of the security bug that it patches.
So they should update to iOS 7.0.6.
It's the customer's choice to update or not update. If they want the security patch, they update. If they don't, then they don't.
Only the customer can decide what is more important to them; retaining iOS 6 on their device or improving the security of the device.
The only 'rock & hard place' are because of their personal choices.
Oldhippie, only YOU can decide that. IMHO, security is more important than aesthetics. But you need to be comofrtable with the decision, and no one here can help with that.

Security Update 2007-001 patch for Windows

Hi, I am having no luck in finding the Security Update 2007-001 for Quicktime security patch for Windows XP.
Can someone please direct me to either the link to directly download the Windows version of the 2007-001 security patch, or a link to the Software Update tool in order to download this patch.

http://docs.info.apple.com/article.html?artnum=304989
If Software Update was not installed during your QuickTime Player install you'll need to uninstall it, re-install and include Software Update software.
Is that enough install?

SPAM filter setting for CRES secure e-mail

I am using Ironport strictly as an outgoing e-mail encryption engine. We use a different incoming spam filter (Barracuda). I would like to be able to go to the CRES site and send an encrypted message to our internal domain so users can establish their CRES credentials. However, the anti-spoofing rules on the Barracuda block the incoming mail because the domain it was from is our internal domain. I have whitelisted the mx-res.cisco.com address, 216.206.186.134, but I am still receiving block messages like below (I removed the actual e-mail address):
Your message did not reach some or all of the intended recipients.
Subject: Test 1
Sent: 10/15/2009 7:36 AM
The following recipient(s) cannot be reached:
(removed) on 10/15/2009 7:36 AM
The e-mail system was unable to deliver the message, but did not report a specific reason. Check the address and try again. If it still fails, contact your system administrator.
mx1.res.cisco.com #5.0.0 smtp; 5.1.0 - Unknown address error 550-'Blocked\x00\x006' (delivery attempts: 0)
First of all, are there other IP addresses I should be whitelisting for Cisco RES outbound e-mail mail servers? What else do I need to do? I don't want to turn of the anti-spoofing, due to the spam we would receive.

With the recent CRES upgrade IP address range used for mail delivery has changed. Please refer the below posting.
https://www.ironportnation.com/forums/viewtopic.php?t=1482
Best,
Kishore

OWA 2007 Issue : Microsoft.Exchange.Data.Storage.VirusMessageDeletedException Could not get properties.

Hi I am facing an issue with Outlook web access on my production server Exchange Server 2007 with Sp1. When i try to reply or forward a message from OWA it displays The message has been deleted due to a virus threat . Kindly refer to the below error details. I have a box with all 3 roles installed I do not have an Edge Server . IO have installed Forefront on the same Box as my exchange Server.Below is the Detail of the error . Kindly Help
A virus was found in this message and it has been deleted. For further
information, please contact technical support for your organization.
Click here to continue working.
Copy error details to clipboard
Show details
Request
Url: https://192.168.7.12:443/owa/forms/basic/BasicEditMessage.aspx?ae=Item&t=IPM.Note&a=Reply&id=RgAAAACFMIZq8d7LTqcPs%2bRZA5g%2bBwBDDZWeCojSQZ1bZZ7Ga%2fkWAAAAeCc6AABDDZWeCojSQZ1bZZ7Ga%2fkWAA5iTbjpAAAJ
User host address: 192.168.7.11
User: Munendra Pal Gangwar
EX Address: /o=First Organization/ou=Exchange Administrative Group
(FYDIBOHF23SPDLT)/cn=Recipients/cn=mp_gangwar
SMTP Address: [email protected]
OWA version: 8.1.336.0
Mailbox server: PFCDELEXCH01.PFCDOMAIN
Exception
Exception type: Microsoft.Exchange.Data.Storage.VirusMessageDeletedException
Exception message: Could not get properties.
Call stack
Microsoft.Exchange.Data.Storage.MapiPropertyBag.GetProperties(IList`1
propertyDefinitions)
Microsoft.Exchange.Data.Storage.StoreObjectPropertyBag.InternalLoad(PropertyDefinition[]
properties, Boolean forceReload)
Microsoft.Exchange.Data.Storage.StoreObjectPropertyBag..ctor(StoreSession
session, MapiProp mapiProp, Origin origin, PropertyDefinition[]
autoloadProperties, Boolean canSaveOrDisposeMapiProp)
Microsoft.Exchange.Data.Storage.StoreObjectPropertyBag..ctor(StoreSession
session, MapiProp mapiProp, Origin origin, PropertyDefinition[]
autoloadProperties)
Microsoft.Exchange.Data.Storage.Item.InternalBindItem(StoreSession
session, StoreObjectId itemId, Byte[] changeKey, ItemBindOption
itemBindOption, PropertyDefinition[] allPropsToLoad)
Microsoft.Exchange.Data.Storage.Item.InternalBind[T](StoreSession
session, StoreId id, ItemBindOption itemBindOption,
PropertyDefinition[] allPropsToLoad)
Microsoft.Exchange.Data.Storage.Item.InternalBind[T](StoreSession
session, StoreId id, PropertyDefinition[] allPropsToLoad)
Microsoft.Exchange.Clients.Owa.Core.Utilities.GetItem[T](StoreSession
storeSession, StoreId storeId, Boolean forceAsMessageItem,
PropertyDefinition[] prefetchProperties)
Microsoft.Exchange.Clients.Owa.Core.Utilities.GetItem[T](UserContext
userContext, StoreId storeId, Boolean forceAsMessageItem,
PropertyDefinition[] prefetchProperties)
Microsoft.Exchange.Clients.Owa.Core.Utilities.GetItem[T](UserContext
userContext, StoreId storeId, PropertyDefinition[] prefetchProperties)
Microsoft.Exchange.Clients.Owa.Basic.EditMessage.LoadMessage()
Microsoft.Exchange.Clients.Owa.Basic.EditMessage.OnLoad(EventArgs e)
System.Web.UI.Control.LoadRecursive()
System.Web.UI.Page.ProcessRequestMain(Boolean
includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
Inner Exception
Exception type: Microsoft.Mapi.MapiExceptionVirusMessageDeleted
Exception message: MapiExceptionVirusMessageDeleted: Unable to get
properties on object. (hr=0x80004005, ec=1294) Diagnostic context:
Lid: 18969 EcDoRpcExt2 called [length=479] Lid: 27161 EcDoRpcExt2
returned [ec=0x0][length=422][latency=15] Lid: 23226 --- ROP Parse
Start --- Lid: 27962 ROP: ropOpenMessage [3] Lid: 17082 ROP Error:
0x50E Lid: 26977 Lid: 21921 StoreEc: 0x50E Lid: 27962 ROP:
ropExtendedError [250] Lid: 1494 ---- Remote Context Beg ---- Lid:
1238 Remote Context Overflow Lid: 14164 StoreEc: 0xFFFFFA1D PropTag:
0x672D0003 Lid: 8660 StoreEc: 0x8004010F PropTag: 0x672D0003 Lid:
21970 StoreEc: 0x8004010F PropTag: 0x672D0003 Lid: 23921 StoreEc:
0x3EC Lid: 21970 StoreEc: 0x8004010F PropTag: 0x672F0014 Lid: 23921
StoreEc: 0x3EC Lid: 21970 StoreEc: 0x8004010F PropTag: 0x6708000B Lid:
21970 StoreEc: 0x8004010F PropTag: 0xE960102 Lid: 21970 StoreEc:
0x8004010F PropTag: 0x6708000B Lid: 21970 StoreEc: 0x8004010F PropTag:
0xE960102 Lid: 21970 StoreEc: 0x8004010F PropTag: 0x67760102 Lid:
25394 Lid: 19506 Lid: 27698 Lid: 11285 StoreEc: 0x50E Lid: 21970
StoreEc: 0xFFFFFC07 PropTag: 0x30080040 Lid: 25818 Lid: 6153 StoreEc:
0x50E Lid: 25906 Lid: 5249 StoreEc: 0x50E Lid: 1750 ---- Remote
Context End ---- Lid: 27962 ROP: ropGetPropsSpecific [7] Lid: 17082
ROP Error: 0x4B9 Lid: 26465 Lid: 21921 StoreEc: 0x4B9 Lid: 27962 ROP:
ropExtendedError [250] Lid: 1494 ---- Remote Context Beg ---- Lid:
26426 ROP: ropGetPropsSpecific [7] Lid: 1750 ---- Remote Context End
---- Lid: 26849 Lid: 21817 ROP Failure: 0x4B9 Lid: 20385 Lid: 28577
StoreEc: 0x50E Lid: 32001 Lid: 29953 StoreEc: 0x50E
Call stack
Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32
hresult, Object objLastErrorInfo)
Microsoft.Mapi.MapiProp.GetProps(PropTag[] propTagsRequested)
Microsoft.Exchange.Data.Storage.MapiPropertyBag.GetProperties(IList`1
propertyDefinitions)

I had this same issue, except I have Symantec mail security not Forefront. It wound up being a line in the adult content filter. For whatever reason, they included "If you received this email" as one of the literal strings. This is probably part
of almost every corporate confidentiality clause I have ever seen!! go figure......
Thanks for the event log hint- since I have the adult content set to delete, I had no good tracking mechanism in Exhange or SMSME. I set email notifications for the future on these.
Brent
I had this same problem, but I have ESET Mail Security Server. in some one case the problem y solved if I attach the "user@domain" in the "white
List". But in many case the problem is continuous. I have Exchange 2007 in MS Windows Server 2003.
Thanks for yours help.

Troubleshooting and Introduction for Exchange 2007/2010 AutoDiscover - Details about "Test E-mail AutoConfiguration"

AutoDiscover is a new feature in Exchange 2007, to provide access to Microsoft Exchange features (OAB, Availability service, UM) for Outlook 2007
clients or later.
We can determine whether problems related to AutoDiscover via OWA.
For example:
OOF is not working in Outlook Client but it is working in OWA.
When we realized this issue is not related to Outlook Client side and network side after performing some troubleshooting steps, it should be something
abnormal on AutoDiscover.
There is a common tool to check AutoDiscover in Outlook, Test E-mail AutoConfiguration.
Today, we will introduce AutoDisocver and “Test E-mail AutoConfiguration” in details. Hope it is helpful for AutoDiscover troubleshooting and self-learning.
1. Differences between “Test E-mail AutoConfiguration” and other tools
The “Test-OutlookWebServices” cmdlet allows us to test the functionality of the following services:
Autodisocver
Exchange Web Services
Availability Service
Offline Address Book
When we run “Test-OutlookWebServices”, it returns all the web services’ states.
However, some information are useless for some scenarios.
For example:
We just want our Exchange 2010 Server working internally. So it is unnecessary to enable Outlook Anywhere.
However, when we run “Test-OutlookWebServices”, it returns Outlook Anywhere errors because the Outlook Anywhere does not need to been enabled.
In contrast, using “Test E-mail Autodiscover” is more intuitive.
If there is any problems, it will return error code from the test result, like 0x8004010F etc. We can do some research from TechNet articles or MS
KBs.
Although it is difficult to say where the specific problem is just via the error codes, we can combine with IIS logs to perform troubleshooting and
find the root of problem.
2. How to use “Test E-mail AutoConfiguration” Tool
a. Open Outlook, we can find there is an Outlook Icon at the right bottom of System tray. Holding down “Ctrl” button and right click the Outlook Icon, we will see “Test E-mail
AutoConfiguration” option. Please see Figure 01.
Figure 01
b. Click “Test E-mail AutoCofiguration” and input user name, uncheck the “Use Guessmart” and “Secure Guessmart Authentication” checkboxes, then click “Test”. Please see
Figure 02.
Figure 02
c. “Test E-mail AutoConfiguration” result panel and log panel. Please see Figure 03 and Figure 04.
Figure 03
Figure 04
3. How to understand “Test E-mail AutoConfiguration” result
According to the Figure 03, we found there are many URLs in the “Test E-mail AutoConfiguration” result panel. Let us understand the details of these
URLs.
If we these URLs are not the correct ones, we can re-setting or re-creating them via commands.
- Internal OWA URL:
https://vamwan310.vamwan.com/owa/
OWA internal access.
- External OWA URL:
https://mail.vamwan.com/owa/
OWA external access.
- Availability service URL:
https://vamwan310.vamwan.com/EWS/Exchange.asmx
Free/Busy, OOF and meeting suggestions.
- OOF URL:
https://vamwan310.vamwan.com/EWS/Exchange.asmx
Out of Office access.
- OAB URL:
https://vamwan310.vamwan.com/OAB/023ef307-b18a-4911-a52c-de26700f6173/
OAB access.
- Exchange Control Panel URL:
https://vamwan310.vamwan.com/ecp/
ECP access.
4. AutoDiscover Tips
- AutoDiscover Service itself is a web application running on the AutoDiscover virtual directory (not a server service) designed to provide connection information to various
clients.
- The AutoDiscover service is automatically installed and configured when CAS role is added to any Exchange Server.
- AutoDisocver virtual directory is created in IIS within the Default Web Site.
- A Sercive-Connection-Point (SCP) object is created in AD.
- The SCP contains a URL to the AutoDiscover service. This is for intranet clients so they do not have to use DNS to locate the AutoDiscover service.
- In AD this object is located at the following location:
DC=<domain>, CN=Configuration, CN=Services, CN=Microsoft Exchange, CN=First Organization, CN=Administrative Groups, CN=Exchange Administrative
Group, CN=Servers, CN=<CAS Name>, CN=Protocols, CN=AutoDiscover, CN=<CAS Name>
- Setup creates the AutoDiscover URL based on the following structure:
<CASNetbiosName>.domain.com/AutoDiscover/AutoDiscover.xml
If a PKI certificate is not already present, a self-signed certificate is installed on the Default Web Site.
To help allow this certificate pass the Issues to test it is set up with a Subject Alternative Name containing urls.
If a PKI certificate is present, that certificate is utilized and configured for use in IIS.
The Outlook Provider is used to configure separate settings for the Exchange PRC protocol (internal to network), Outlook Anywhere (Exchange HTTP protocol), and WEB:
EXCH, EXPR, WEB
The
EXCH and EXPR setting are vital for the proper configuration of Outlook.
5. AutoDiscover Workflow
General Process flow:
There are various components surrounding the AutoDiscover Service and all are necessary to complete a request. Including IIS, AutoDiscover service
itself, the provider, and AD.
a.
Client constructs service URL and submits Autodiscover Request. First attempt to locate the SCP object in AD. So, DNS is not needed.
b.
IIS Authenticates User.
c.
Is the Autodiscover service in the appropriate forest?
+ If YES.
    1)
Parse/Validate Request
    2)
Is there a provider that can service the Request?
++ If YES
      a)
Config provider processes request and returns config settings.
      b)
Return config setting to client
++ If NO
Inform client we cannot process request
+ If NO.
Redirect client to Autodiscover service in the appropriate forest.
Methods to find Autodiscover services: SCP and DNS
Domain-joined
a. Find SCP first.
The SCP contains the URL to the AutoDiscover service.
URL: https://CAS01.contoso.com(CAS’ FQDN)/AutoDiscover/AutoDiscover.xml
If more than one SCP object is found in AD (it means there are multiple CAS servers in the Exchange organization), Outlook client will choose one of the SCP entries that
are in the same site to obtain the AutoDisocover URL.
b. If we cannot find SCP object, then Outlook client will use DNS to locate AutoDiscover.
Outlook parses out the domain (SMTP suffix) via your EmaiAddress, then attempts to connect to the predetermined order of URLs via the suffix.
For example: If my email address is
[email protected]
Outlook tries POST commands to the following order of URLs:
https://contoso.com/autodiscover/autodiscover.xml
https://autodiscover.contoso.com/autodiscover/autodiscover.xml
NOTE: The URLs above is by design, hardcode
and cannot be changed.
c.
If those fail, Outlook tries a simple redirect to another URLs in IIS:
http://contoso.com/autodiscover/autodiscover.xml
http://autodiscover.contoso.com/autodiscover/autodiscover.xml
If none of these URLs work then DNS is most likely not set up correctly.
We can test that by pinging one of the above URLs.
If that is successful, we must ensure the URLs contoso.com or autodiscover.contoso.com are actually pointing to the CAS server.
If the ping fails then there is a chance that DNS is not set up correctly so be sure to check that the URLs are even registered.
NOTE: If contoso.com is a non-CAS server,
we should add a Host record with just AutoDiscover. And point that entry to your CAS server that is running AutoDiscover.
d.
If still failed, we can use DNS SRV lookup for _autodiscover._tcp.contoso.com, then “CAS01.contoso.com” returned. Outlook will ask permission from the user to continue
with AutoDiscover to post to https://CAS01.contoso.com/autodiscover/autodiscover.xml
Non-Domain-joined
It first tries to locate the Autodiscover service by looking up the SCP object in AD. However the client is unable to contact AD, it tries to locate
the Autodiscover service by using DNS.
Then, same as step b, c, d in
Domain-joined scenario.
6. How to change the AutoDiscover
service location order forcibly?
By default, Outlook client locates AutoDiscover service in that order above.
We can also change the order forcibly.
a.
If we want to locate AutoDiscover service via one of the autodiscover URLs, please running following command in EMS:
Set-ClientAccessServer -identity <servername> -AutodiscoverServiceInternalUri https://autodiscover.contoso.com/autodiscover/autodiscover.xml(URL
that you want)
b. If we want to locate AutoDiscover service via
SRV record, please follows this KB to set up SRV:
http://support.microsoft.com/kb/940881
7. How to check AutoDiscover Healthy
a. We should make sure the AutoDiscover
is healthy before using AutoDiscover to perform troubleshooting.
b.
We can browse following URL in IE explorer:
https://autodiscover.vamwan.com/autodiscover/autodiscover.xml
If it returns “code 600”, that means AutoDiscover is healthy.
Screenshot as below:
c. AutoDiscover itself returns errors to the requesting client if the incoming request does not contain the appropriate information to complete a
request.
The following table explains the possible errors that could be returned.
Error Value
Description
600
Mailbox not found and a referral could not be generated.
601
Address supplied is not a mailbox. The provided email address is not something a client can connect to. It could
be a group or public folder.
602
Active Directory error.
603
Others.
The 600 “Invalid Request” error is returned because a user name was not passed to the service. That is OK for this test because this does confirm
the service is running and accepting requests.
d.
If AutoDiscover service is not working well, I suggest re-building the AutoDiscover Virtual Directory for testing.
Steps as below:
1) Running following command in EMS to remove the AutoDiscover VD (we cannot delete it via EMC):
Remove-AutodiscoverVirtualDirectory -Identity "CAS01\autodiscover(autodiscover.contoso.com)"
Please refer:
http://technet.microsoft.com/en-us/library/bb124113(v=exchg.141).aspx
2)
Running following command in EMS to verify whether we have removed the AutoDisocver VD successfully:
Get-AutodiscoverVirtualDirectory | FL
Please refer:
http://technet.microsoft.com/en-us/library/aa996819(v=exchg.141).aspx
3)
Running following command in EMS to re-creating a new AutoDiscover VD:
New-AutodiscoverVirtualDirectory -Websitename <websitename> -BasicAuthentication:$true -WindowsAuthentication:$true
Please refer:
http://technet.microsoft.com/en-us/library/aa996418(v=exchg.141).aspx
8. Common issues
a. Outlook Disconnection
Issue and Troubleshooting
Issue:
Sometimes the Outlook clients cannot connect to the Exchange server after migrating to a new Exchange server or changing to new CAS. The Outlook clients
always connect to the old CAS server.
Troubleshooting:
To solve this issue, we should change the SCP via following command:
Set-ClientAccessServer -Identity
<var>CAS_Server_Name</var> -AutodiscoverServiceInternalUri
https://mail.contoso.com(newCAS’FQDN)/autodiscover/autodiscover.xml
b. Autodiscover
Certificate issue
Tips on Certificate:
Exchange requires a certificate to run an SSL protocol such as HTTPS. We can use the certificate that supports subject alternate names (SAN) in Exchange.
This is to allow the certificate to support resources that have different names, such as Outlook Anywhere and the Autodisocver Web application.
Issue and Troubleshooting
Issue:
We receiver the Certificate Principal Mismatch error when we use a SAN certificate.
Troubleshooting:
1) Please determine the FQDN that the client
uses to access the resource. Steps as below:
OutlookàToolsàAccount
SettingsàE-mailàclick
the Exchange accountàChangeàMore
SettingsàConnectionàExchange
Proxy Settingsànote the FQND that list in the
Only connect to proxy servers that have this principal name in their certificate box.
2)
Please using EMS to determine the value for the CerPrincipalName attribute: Get-OutlookProvider
This command returns the result for the EXPR name.
3)
Please re-setting the CertPrincipalName attribute to match the FQDN via following command:
Set-OutlookProvider EXPR –CertPrincipalName: “msstd:<FQDN the certificate is issued to>”
9. Resource for reference:
Autodiscover and Exchange 2007
http://technet.microsoft.com/en-us/library/bb232838(v=exchg.80).aspx
White Paper: Understanding the Exchange 2010 Autodiscover Service
http://technet.microsoft.com/en-us/library/jj591328(v=exchg.141).aspx
Certificate Principal Mismatch
http://technet.microsoft.com/en-us/library/aa998424(v=exchg.80).aspx
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

HI,
I get following? when run the test? user is login to Domain A but accessing exchange in Domain B?

Mail Sender Adapter for Exchange 2007 IMAPS account

Hi everybody,
I have the following todo:
I configured a Mail Sender Adapter that is supposed to fetch mails from an IMAP account.
The mails contain text files with data to be processed by XI 3.0 SP 22.
The mail server is Exchange 2007 and requires IMAPS. IMAP is not enough. I read the notes
- 893590 - XI 3.0 Mail sender adapter with IMAP or POP with SSL problem
- 856599 - FAQ: XI 3.0 / PI 7.0 / PI 7.1 Mail Adapter
and configured the sender apapter as follows:
URL:                     imaps://<ip address>/owa
Authentication method:     Plain
User:                    <domain>\<user>
Password:                       topsecret
Poll Interval: 5
The first challenge is to setup the adapter with SSL. To do so, I added the Exchange server's
root SSL certificate in the default truststore service-ssl via the KeyStorage service.
This is necessary, as far as I know, to successfully validate the Exchange server's trusted
certifacate which is being transfered to XI during SSL handshake.
Since the communication channel in RWB is in status error with following message:
mail client job stopped completly
exception caught during processing mail message; java.io.IOException: invalid IMAP status response; not finding * STATUS, but 001I NO owa doesn't exist.
mail client job scheduled,
I do not know how to setup SSL for IMAPS. I successfully tested a PING to the Exchange server.
Are there already experiences with Exchange 2007?
What I have to do to fetch mails from an Exchange 2007 IMAPS folder/account with a Mail Sender Adapter?
Kind regards,
Andreas

Hi,
It should be imap and not imaps.
You can try imap://xxx.xxx.de:993/Inbox
Make sure that port 993 is correct. If you have doubt, then you may try 143 which is default port instead of 993 in the above url.
regards,
ganesh.

Samba 3.2.6 patch for security issue

I know the security issue is hard to trigger, but I created a new PKGBUILD for samba 3.2.6 containing the patch.
Excerpt from the patch commentary:
commit 288fa94ac7cfdf7457b5098c33fc840bed3d5410
Author: Michael Adam <[email protected]>
AuthorDate: Thu Dec 18 18:01:55 2008 +0100
Commit: Karolin Seeger <[email protected]>
CommitDate: Fri Dec 19 08:30:23 2008 +0100
smbd: prevent access to root filesystem when connecting with empty service name
This only applies to a setup with "registry shares = yes"
Michael
And here's the PKGBUILD:
# $Id: PKGBUILD 22200 2008-12-22 22:24:26Z tpowa $
# Maintainer: judd <[email protected]>
pkgname=samba
pkgver=3.2.6
# We use the 'A' to fake out pacman's version comparators. Samba chooses
# to append 'a','b',etc to their subsequent releases, which pamcan
# misconstrues as alpha, beta, etc. Bad samba!
_realver=3.2.6
pkgrel=2.1
pkgdesc="Tools to access a server's filespace and printers via SMB"
arch=(i686 x86_64)
url="http://www.samba.org"
license=('GPL3')
backup=(etc/logrotate.d/samba etc/pam.d/samba etc/samba/smb.conf etc/xinetd.d/swat etc/conf.d/samba)
depends=('db>=4.7' 'popt' 'libcups' 'acl' 'libldap' 'smbclient=3.2.6' 'libcap' 'heimdal>=1.2-1' 'pam' 'fam' 'gnutls>=2.4.1' 'tdb=3.2.6')
options=(!makeflags)
source=(http://us1.samba.org/samba/ftp/stable/${pkgname}-${_realver}.tar.gz \
no-clients.patch samba samba.logrotate swat.xinetd samba.pam samba.conf.d \
ftp://us1.samba.org/pub/samba/patches/security/samba-3.2.6-CVE-2009-0022.patch)
build() {
cd ${srcdir}/${pkgname}-${_realver}/source
patch -Np2 -i ${srcdir}/no-clients.patch || return 1
patch -Np2 -i ${srcdir}/samba-3.2.6-CVE-2009-0022.patch || return 1
./configure --prefix=/usr --with-configdir=/etc/samba \
--with-lockdir=/var/cache/samba \
--with-piddir=/var/run/samba \
--with-fhs --with-pam --with-ads --with-acl-support \
--without-cifsmount --without-libsmbclient \
--with-syslog --with-pam_smbpass \
--localstatedir=/var --disable-dnssd --libdir=/usr/lib/samba
make || return 1
mkdir -p ${pkgdir}/var/log/samba
mkdir -p ${pkgdir}/etc/samba/private
chmod 700 ${pkgdir}/etc/samba/private
make DESTDIR=$startdir/pkg install
chmod 644 ${pkgdir}/usr/include/*.h
rm -rf ${pkgdir}/usr/var
(cd script; cp installbin.sh i; cat i | sed 's/\/sbin\///' > installbin.sh)
install -D -m755 ../../samba ${pkgdir}/etc/rc.d/samba
install -D -m644 ../../samba.conf.d ${pkgdir}/etc/conf.d/samba
mkdir -p ${pkgdir}/etc/samba
cat ../examples/smb.conf.default | \
sed 's|log file = .*$|log file = /var/log/samba/log.%m|g' >${pkgdir}/etc/samba/smb.conf.default
install -D -m644 ../../samba.logrotate ${pkgdir}/etc/logrotate.d/samba
install -D -m644 ../../swat.xinetd ${pkgdir}/etc/xinetd.d/swat
install -D -m644 ../../samba.pam ${pkgdir}/etc/pam.d/samba
# symlink libs
for i in ${pkgdir}/usr/lib/samba/libsmbshare*; do
ln -sf samba/$(basename $i) ${pkgdir}/usr/lib/$(basename $i)
done
# spool directory
install -d -m1777 ${pkgdir}/var/spool/samba
sed -i 's|/usr/spool/samba|/var/spool/samba|g' ${pkgdir}/etc/samba/smb.conf.default
# fix logrotate
sed -i -e 's|log.%m|%m.log|g' ${pkgdir}/etc/samba/smb.conf.default
# nsswitch libraries
install -D -m755 nsswitch/libnss_wins.so ${pkgdir}/lib/libnss_wins.so
ln -s libnss_wins.so ${pkgdir}/lib/libnss_wins.so.2
install -D -m755 nsswitch/libnss_winbind.so ${pkgdir}/lib/libnss_winbind.so
install -D -m755 bin/pam_winbind.so ${pkgdir}/lib/security/pam_winbind.so
# remove conflict files of smbclient and tdb
for man in libsmbclient smbspool \
umount.cifs mount.cifs net; do
rm -f ${pkgdir}/usr/share/man/man8/${man}.8
done
for i in libnetapi* libtdb* libtalloc* libwbclient*; do
rm -f ${pkgdir}/usr/lib/samba/$i
done
rm -f ${pkgdir}/usr/bin/tdbbackup
rm -f ${pkgdir}/usr/include/{tdb.h,talloc.h,netapi.h}
for man in rpcclient smbcacls smbclient smbcquotas \
smbtree smbtar nmblookup smbget; do
rm -f ${pkgdir}/usr/share/man/man1/${man}.1
done
rm -f ${pkgdir}/usr/share/man/man7/libsmbclient.7
rm -f ${pkgdir}/usr/include/libsmbclient.h
md5sums=('0cd27c7afbb8211616eea4010f32271c'
'a676f0dde2c434aeb5125376b8797a64'
'e93533fa2296c07c1f645dfdd373657f'
'5697da77590ec092cc8a883bae06093c'
'a4bbfa39fee95bba2e7ad6b535fae7e6'
'96f82c38f3f540b53f3e5144900acf17'
'f2f2e348acd1ccb566e95fa8a561b828'
'e15ab37115101cf3a8d110f0c1f8e29e')
I think a security task force should be initiated (I know discussions existed, but I don't know what were the consequences), so that important packages (like those providing services) could be updated in a timely manner. This is a minor issue as I stated earlier, but it could be worse. Those interested, let's initiate a discussion with the developers of important packages and try to get some things working. People (mostly trusted users) who can generate early packages are welcome, so that they can provide early versions of unvulnerable packages.

ckristi wrote:I don't know about other packages, but I believe when I checked the PKGBUILD for PHP, that the security fix was included in 5.2.7.
Check http://repos.archlinux.org/viewvc.cgi/p … iew=markup for more info.
And don't get me wrong, I am a little bit concerned about the way vulnerabilities are treated in Arch, 'cause my home server is running this distro.
And I really would think we should start some serious discussions about this security issues and the way they should be treated. I know the developers are doing their best and I'm not going to put fingers at all. They should be helped in maintaining packages for important services. We'll benefit from it and their tasks would be easier.
Why don't you start a wiki page tracking the latest vulnerabilities disclosed on various security mailing lists which are not fixed in arch. This will make it much easier for the devs.
This thing has been already discussed multiple times and already a wiki page exists for Arch Security Team but it seems nobody followed up with that.
http://wiki.archlinux.org/index.php/Security_Task_Force

Occasionally can't send mail after 2007-005 security update

Mail gets stuck in Outbox on occasion after installing 2007-005 security update. Need to quit Mail and restart for mail to be sent. I am using Google mail.

What are your smtp mail server settings?
Lots of trouble with people using smtp.mac.com on port 25 in the last week. If that is your setting, change to port 587.
If you don't use smtp.mac.com, disregard this advice.

Security Patch for server 2003

Hi Friends,
Can anyone confirm if Microsoft releasing new security/critical patches for server 2003 STD/ENT versions or not !!

Hi Mr. Rohit,
You can refer the Microsoft Update Catalog the Microsoft Update Catalog provides updates, including drivers, that are for distribution across a corporate network. For non-corporate
scenarios, we recommend you use automatic updating or the Microsoft Update website.
Microsoft®Update Catalog
http://catalog.update.microsoft.com/v7/site/home.aspx
I’m glad to be of help to you!
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

I'm using my iPad with iOS v 6.1.3- is there a security patch for the SSL/TLS vulnerability for this, or do I have to go to 7.0.6?

I'm using my iPad with iOS 6.1.3. Is there a security patch for this version, or do I have to update to iOS 7.0.6?

There is an update for iOS 6... v6.1.6. But it is only available to iPhone 3GS and iPod touch 4th gen users. http://support.apple.com/kb/HT6146?viewlocale=en_US&locale=en_US
For iPad, the highest supported os for iOS 6 is v6.1.3. If you want to get the security patch, you'll have to go to iOS 7.0.6.
Hope this answers your question.
~Joe

I'm a Microsoft Outlook for Mac user, I need information of how to know when e-mail was readed and confirm receipt of e-mails sent. thank you! regards Mauricio

I'm a Microsoft Outlook for Mac user, I need information of how to know when e-mail was readed and confirm receipt of e-mails sent. thank you! regards Mauricio

Mail and Address book

A problem with Client Security Solution patch for Mozilla Firefox3

After I updated Client Security Solution to 8.20, the password manager cannot work in FF3 again.When I tried to reinstall the patch, it asked me whether to overwrite the files or cancel. Then it indicates 'This patch has already been installed on this computer', but the problem exsits.

Borntofly, I am glad that you brought this up as I have not been able to successfully use FF3 with CSS 8.1 or 8.2 and have provided feedback in this thread:
http://forums.lenovo.com/lnv/board/message?board.id=Special_Interest_Utilities&thread.id=937&view=by...
As much as I would like to upgrade to FF3, I have not had any success in either using the manual configuration changes noted in the above thread or by using the CSS Patch for FF3 provided by Lenovo on 8/6/08 found here:
http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-70132
This patch appears to duplicate the manual efforts provided by member KTP in message 12 in the above provided link from what I can see.
I have never had an issue using the TV password manager and IE7. It is a very reliable combination.
I have no issues at all using FF 2.0.0.16, CSS 8.1 or 8.2 (now on 8.2), and Thinkvantage (TV) Password Manager 3.00.0106.00 (came with CSS 8.2). I have never had Lenovo Password Manager on my T60. Everything works reliably well with this combination.
In 3 hours of work yesterday, I was able to get TV Password Manager to show up in the FF3 add-ons as TV Password Manager 3.01 and this is the only way I was able to make it work, but only for a single browser session:
1. Tools --> Add-Ons
2. Disable TV Password Manager, then restart FF3
3. Tools --> Add-Ons
4. Enable TV Password Manager, then restart FF3
5. TV Password Manager will work for the duration that I am using the browser session
Once I close FF3 and reopen it, TV Password Manager no longer works. The only method I have found to "reset" everything is to perform the above sequence, but again it only works for the single browser session. It is very consistent. Although in does not show this in the Add-Ons page, it almost appears that the TV Password Manager add-on is disabled after I close the browser and needs to be manually disabled then enabled as noted above. If this is due to a conflict with other software on my laptop, I have not been able to determine this.
In my efforts yesterday, I spent time uninstalling CSS 8.1 or 8.2, FF, and even removed registry entries related to these packages in order to start with a fresh install, all without any success. I tried fresh installations and added the manual changes promoted by KTP and also tried fresh installations using the Lenovo patches, all without success. I made attempts to troubleshoot to root cause by removing all add-ons except TV Password Manager, and also tried preventing certain software from installing at startup via msconfig, as well as multiple settings changes within FF3, all to no avail. Again FF 2.0.0.16 continues to work very well with little effort on my part. I simply install the software and ensure that TV Password Manager 2.0 in installed in the add-ons and that's it.
In the above FF3 thread, it appears that others have had success with KTP's changes so I am a little frustrated that I cannot make FF3 and TV Password Manager work reliably. I have FF2 and IE7 working so I have plenty of good alternatives at this time. I will post this at the FF3 above as well to see if anyone has any feedback.
Moderator(s), do you wish for this thread to be integrated in the original thread for this issue?
T60, 8744-5BU: 2.0 GHz T7200, 4 GB RAM, 15.4" WSXGA+, 1680x1050 ATI Mobility Radeon X1400, Win 7 Ultimate w/SP1 - 64-bit

Microsoft Patch for OWA 2007 CRES Secure Mail Recipients

Similar Messages

Maybe you are looking for