Grommunio Sync with Android GMail Client

emtie

Hello all,

first of all I wanna wish all of you a happy new year. And it is supposed to be a good year cause I have just migrated my Mailserver to a grommunio server :-) The software is awesome so thanks for that :-)))

Webmail, Outlook and so on works great. I can't get activesync to work with GMail. Gmail always tells me:

Konto kann nicht hinzugefügt werden Die Sicherheitseinstellungen von Gmail sind momentan strenger als die von Ihrem IT-Administrator festgelegten Einstellungen. Bitte wenden Sie sich an Ihren IT-Administrator.

After a short Discussion with my IT-Admin (myself) ;-) and looking at the logs I was clueless. ActiveSync Settings are as follows

So if anybody has a hint for me how to solve this issue that would be great. I can provide some more logs if needed, at the moment i don't know which...

cu and thanks em.tie

WalterH

Why you want to use Gmail? Try the native Mail app on Android.

emtie

WalterH

Isnt Gmail the native mail app? I am on vanilla android (google pixel 4a) and I am adding an Account in the Android settings menu where all other accounts are added as well (and that is way before I open any Mail app. And then I get this errormessage...

WalterH

I am an iOS user, only minimal Android knowledge.
Your server certificate is a Let's Encrypt certificate or a self signet certificate?

crpb

I'm on LineageOS 18.1 with my old as f* KLTE and GApps installed. Works.

emtie

Thanks for your feedback so far. I have tested a little further. On iOS I can add the Mail Account but cannot sync Mails either. I have letsencrypt certs for my reverse proxy.

I can Access the https://myserver.domain.tld/Microsoft-Server-ActiveSync URL with my browser and can authenticate against it.

I had the same Configuration with Kopano z-push and it worked. I have tried to adapt some settings according to a post i found in this forum.

<IfModule mod_ssl.c><VirtualHost *:443>
Protocols http/1.1ServerAdmin me@domain.tld
ServerName server.domain.tldHeader always set X-Frame-Options SAMEORIGIN Header set Server ApacheRequestHeader unset Expect early RequestHeader edit Transfer-Encoding Chunked chunked earlyRequestHeader unset Accept-Encoding TimeOut 1800DocumentRoot /var/www/html

SSLProxyEngine OnProxyPass /Microsoft-Server-ActiveSync https://server.domain.tld:443/Microsoft-Server-ActiveSync connectiontimeout=900
ProxyPassReverse /Microsoft-Server-ActiveSync https://internalserver.domain.tld:443/Microsoft-Server-ActiveSync
ErrorLog ${APACHE_LOG_DIR}/sync_error.logCustomLog ${APACHE_LOG_DIR}/sync_access.log combined
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/server.domain.tld/cert.pem SSLCertificateKeyFile /etc/letsencrypt/live/server.domain.tld/privkey.pemSSLCertificateChainFile /etc/letsencrypt/live/server.domain.tld/chain.pem
SSLCACertificatePath /etc/ssl/certs/SSLCACertificateFile /etc/ssl/certs/ca-certificates.crt
<IfModule mod_deflate.c> SetOutputFilter DEFLATESetEnvIfNoCase Request_URI .(?:gif|jpe?g|ico|png)$ \ no-gzip dont-vary SetEnvIfNoCase Request_URI \.(?:exe|t?gz|zip|bz2|sit|rar)$ \no-gzip dont-varySetEnvIfNoCase Request_URI .pdf$ no-gzip dont-vary BrowserMatch ^Mozilla/4 gzip-only-text/htmlBrowserMatch ^Mozilla/4.0[678] no-gzip BrowserMatch \bMSIE !no-gzip !gzip-only-text/html</IfModule> <FilesMatch "\.(cgi|shtml|phtml|php)$">SSLOptions +StdEnvVars
</FilesMatch><Directory /usr/lib/cgi-bin> SSLOptions +StdEnvVars</Directory>

emtie

okay, found the solution.

Thanks you all for all the good documentation in this forum :-)

WalterH

emtie Unfortunately I got a report, that devices did not open the mails. User see the list of mails but cant open.

emtie

BTW is there a way to see the actual IP of the remote active sync device in the "Mobilgeräte" entry of the Grommunio Admin Website?

emtie

WalterH maybe because it was a brandnew installation and the devices did never sync before. Again, thanks for your support :-)