iPhone getting not able to sync up with Exchange 2003 SP2.

paige386
paige386 used Ask the Experts™
on
I have followed all of the suggestions from this website.

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_1798-Exchange-2003-Activesync-Connection-Problems-FAQ.html

using the testexchange site I get

Testing Exchange ActiveSync  
  Exchange ActiveSync test Failed
   Test Steps
   Attempting to resolve the host name site.domain.com in DNS.
  Host successfully resolved
   Additional Details
  IP(s) returned: 99.999.99.999  
 
 Testing TCP Port 443 on host site.domain.com to ensure it is listening and open.
  The port was opened successfully.
 Testing SSL Certificate for validity.
  The certificate passed all validation requirements.
   Test Steps
   Validating certificate name
  Successfully validated the certificate name
   Additional Details
  Found hostname site.domain.com in Certificate Subject Common name  
 
 Testing certificate date to ensure validity
  Date Validation passed. The certificate is not expired.
   Additional Details
  Certificate is valid: NotBefore = 1/29/2010 4:31:54 AM, NotAfter = 1/29/2015 4:31:54 AM"  
 
 
 
 Testing Http Authentication Methods for URL https://site.domain.com/Microsoft-Server-Activesync/ 
  Http Authentication Methods are correct
   Additional Details
  Found all expected authentication methods and no disallowed methods. Methods Found: Basic  
 
 Attempting an ActiveSync session with server
  Errors were encountered while testing the ActiveSync session
   Test Steps
   Attempting to send OPTIONS command to server
  OPTIONS response was successfully received and is valid
   Additional Details
  Headers received: Connection: close
MicrosoftOfficeWebServer: 5.0_Pub
Pragma: no-cache
Public: OPTIONS, POST
Allow: OPTIONS, POST
MS-Server-ActiveSync: 6.5.7638.1
MS-ASProtocolVersions: 1.0,2.0,2.1,2.5
MS-ASProtocolCommands: Sync,SendMail,SmartForward,SmartReply,GetAttachment,GetHierarchy,CreateCollection,DeleteCollection,MoveCollection,FolderSync,FolderCreate,FolderDelete,FolderUpdate,MoveItems,GetItemEstimate,MeetingResponse,ResolveRecipients,ValidateCert,Provision,Search,Notify,Ping
Content-Length: 0
Date: Sat, 30 Jan 2010 20:23:00 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET

 
 
 Attempting FolderSync command on ActiveSync session
  FolderSync command test failed
   Tell me more about this issue and how to resolve it
   Additional Details
  Exchange ActiveSync returned an HTTP 500 response.
 
Service pack 2 was reapplied as well as removed and recreated the /exchange-oma virtual directory.

Anybody have any further steps I can take?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Author

Commented:
Additional information from the IIS logfile

2010-01-30 20:22:59 W3SVC1 192.168.999.999 GET /Microsoft-Server-Activesync/ - 443 - 99.99.99.99 - 401 2 2148074254
2010-01-30 20:22:59 W3SVC1 192.168.999.999 OPTIONS /Microsoft-Server-Activesync/ &Log=VNATNASNC:0A0C0D0FS:0A0C0D0SP:0C0I0S0R0S0L0H 443 DOMAIN\USERID 99.99.99.99 TestActiveSyncConnectivity 200 0 0
2010-01-30 20:23:00 W3SVC1 192.168.999.999 POST /Microsoft-Server-Activesync/ Cmd=FolderSync&User=USERID&DeviceId=1557770393&DeviceType=TestActiveSyncConnectivity 443 - 99.99.99.99 TestActiveSyncConnectivity 401 2 2148074254
2010-01-30 20:23:00 W3SVC1 192.168.999.999 POST /Microsoft-Server-Activesync/ Cmd=FolderSync&User=USERID&DeviceId=1557770393&DeviceType=TestActiveSyncConnectivity&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C1I477S0R0S0L0H0P 443 DOMAIN\USERID 99.99.99.99 TestActiveSyncConnectivity 500 0 0
2010-01-30 20:23:00 W3SVC1 192.168.999.999 PROPFIND /exchange-oma/USERID@DOMAIN.COM/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/TestActiveSyncConnectivity/1557770393 - 80 - 192.168.999.999 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 64
Alan HardistyCo-Owner
Top Expert 2011

Commented:

Author

Commented:
I have reviewed and tried everything on that page.

Even turning the FBA off doesn't allow it to work.
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Alan HardistyCo-Owner
Top Expert 2011

Commented:
If that is the case - then I can't help further and would suggest calling Microsoft Directly.  I don't have a fix for that yet and so far, I seem to be the one who knows most about Activesync and the respective problems.
If you do call MS and do get a solution, I would be grateful to know what it is so that I can document it and to help others in your situation.
Sorry
Alan

Author

Commented:
maybe we can work together, I saw another thread that seems to have had the same situation that I am in without a resolution. It seems to be related to the Microsoft-Server-ActiveSync Virtual directory. Any thoughts on addtional logging or auditing that I can implement to try to track this down?

Author

Commented:
one thing I noticed is the local path for the Microsoft-Server-ActiveSync VD points to C:\Program Files\Exchsrvr\OMA\Sync  but when I look there no files exist in that directory

Author

Commented:
Do you know what entry in the meta base tells it to use forms based authentication?
Alan HardistyCo-Owner
Top Expert 2011

Commented:
I would dearly love to get to the bottom of the problem - I have had several cases where I cannot resolve the issue and would be happy to work with you to get a solution.
Having just checked a known working SBS 2003 server - the folder for Activesync is also empty!
This article seems to suggest that Windows Authentication may be missing from the Exchange virtual Directory:
http://support.microsoft.com/kb/330463
Can you also check the Token Size as per the article please.
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Also worth checking what versions of ASP.NET you can select on the virtual directories?  Should be v1.1 and 2.0.
May be worth removing ASP.NET 2.0 and 1.1, then reinstalling 1.1 to make sure.  Let me know and I'll send you the relevant commands (off to bed now though).
Alan

Author

Commented:
The user I am using is only a member of 5 groups  one being admin
Here is the token info doesn't look like it violates the max size
This was working for a couple of months then another user asked for external access to the mail so I enabled the Outlook Web Access and since that time I haven't been able to get the iPhone sync to work again.

Going to run out for dinner, hopefully we can figure it out.


Name: Kerberos Comment: Microsoft Kerberos V1.0
Current PackageInfo->MaxToken: 12000

QueryKeyInfo:
Signature algorithm =
Encrypt algorithm = RSADSI RC4-HMAC
KeySize = 128
Flags = 2081e
Signature Algorithm = -138
Encrypt Algorithm = 23
   Start:1/30/2010 14:30:36
  Expiry:1/31/2010 0:30:36
Current Time: 1/30/2010 14:30:36
MaxToken (complete context)  1305
What is the version of the massync.dll?

I am taking a guess that it would be 6.5.7638.1

You need to upgrade the version of massync.dll

There is a hot fix from MS http://support.microsoft.com/kb/967046 but it is not publicly available.

I suggest callup MS and request them to send the hotfix.

If the version of massync.dll is not 6.5.7638.1 then reset the MSAS vDir by following the steps in KB 883380 (method 2 is simple).

But I am sure that upgrading the massync.dll should fix the issue.

Let us know how it goes.

let us know how it goes.

Author

Commented:
The version of massync.dll is 6.5.7638.1  I will call MS on Monday and see about the hotfix.
I will let you know how it goes.

Alan the .net is ver 1.1, I did the R&R and no change
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Good luck with MS.  Please keep a good log of what steps you take to resolve the problem.  Would love to modify my FAQ accordingly.

Thanks

Alan

Author

Commented:
thanks,

will do on the log

Author

Commented:
I put in the request with MS waiting to hear back

Author

Commented:
I have recieved the hotfix from MS will try to install it tonight if not then it will be tomorrow night.
Alan HardistyCo-Owner
Top Expert 2011

Commented:
No problems - will wait for some feedback.

Author

Commented:
I tried the hot fix and it doesn't appear that it has fixed the issue, I am working with MS to troubleshoot further will report back with results
Alan HardistyCo-Owner
Top Expert 2011

Commented:
If you are able to - please keep a detailed record of what they do - I would be extremely grateful for the info for my FAQ.

Author

Commented:
I have gathered information and sent it to Microsoft waiting for their reply.

Author

Commented:
so after once again doing everything on your website alan I was left in the same position. Then today the MS rep came back with go to the properties of the default web site then under connections turn on Enable HTTP Keep-Alives, I kept the default number for the timeout. That resolved the problem.
Co-Owner
Top Expert 2011
Commented:
God - was it that simple?
That's unbelievable.  Duly noted and FAQ article to be amended.

Author

Commented:
I will award points for your help and excelent FAQ!
Alan HardistyCo-Owner
Top Expert 2011

Commented:
Thanks very much - not sure I deserve them, but I won't complain : )
Alan

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial