Can't connect to Zimbra with iPad/iPhone over Exchange protocol

[lumix1991]

Dear,

Since a few weeks we have a Zimbra server running, first we used the OpenSource Comunity version, yesterday we upgraded the server to the Network edition to have more sync functions.

On this moment we can't connect to the Zimbra server over the Exchange protocol with for example a iPad / iPhone. We used this tutorial to find out how it works:
Zimbra - iPhone

But we have the following problems when we try to connect with our iphone / ipad.

- The certificate from "autodiscover.domain.com" for account "username@domain.com" could not be verified. (we can accept this manually)
- Unable to verify account information

We can't connect to mailboxes on the Zimbra server!

Our Zimbra server is colocated in a Datacenter and we connect remotely from our office to the server.

Our firewall is configured well, the ports that are enabled are:
SMTP 25 tcp
HTTP 80 tcp
POP3 110 tcp
IMAP 143 tcp
LDAP 389 tcp
HTTPS 443 tcp
SMTPS 465 tcp
IMAPS 993 tcp
POP3S 995 tcp
(Admin Interface) 7071 tcp

What could be the problem?

[phoenix]

Originally Posted by lumix1991

But we have the following problems when we try to connect with our iphone / ipad.

- The certificate from "autodiscover.domain.com" for account "username@domain.com" could not be verified. (we can accept this manually)
- Unable to verify account information

Did you accept the Certificate manually?

Originally Posted by lumix1991

We can't connect to mailboxes on the Zimbra server!

You mean via Activesync or something else? Is the Mobile feature actually enabled (you can check in the Admin UI)?

[lumix1991]

Originally Posted by phoenix

Did you accept the Certificate manually?

You mean via Activesync or something else? Is the Mobile feature actually enabled (you can check in the Admin UI)?

Yes, i checked the option in the admin panel to allow the user to connect with mobile sync. Also we accepted the autodiscover certificate manually and after that we will see the "Unable to verify account information."

[ewilen]

I never use autodiscover. Some devices try to use it, but Zimbra doesn't have it as far as I can tell. (Would appreciate correction if I am wrong about this.)

I think this is covered in step 4 of the instructions you refer to. You also don't need to have anything in the Domain field.

Just ignore autodiscovery and use the "full" account info screen.

Email: your full email address
Server: your server's FQDN
Username: your full email address
Password: your password

[lumix1991]

Originally Posted by ewilen

I never use autodiscover. Some devices try to use it, but Zimbra doesn't have it as far as I can tell. (Would appreciate correction if I am wrong about this.)

I think this is covered in step 4 of the instructions you refer to. You also don't need to have anything in the Domain field.

Just ignore autodiscovery and use the "full" account info screen.

Email: your full email address
Server: your server's FQDN
Username: your full email address
Password: your password

Yes, that is what i did but it won't work. Is it something with firewall settings of the server? it looks like the cients can't have a connection to the server. When we connect with IMAP / POP it works perfect. But when we like to use the exchange protocol we will stuck there.

[ewilen]

Do you have a self-signed cert on ZCS? Not sure if it matters, but might as well find out.

I don't think it has anything to do with firewall settings--as long as you can reach ports 80 and 443 on the server, it should work. Of course you do want to make sure the server itself isn't blocking those ports with a firewall. Can you get to it via web interface?

I remain puzzled at your getting an autodiscover cert at all. I don't think you should be getting the message to accept the cert. Check DNS to see if autodiscover.domain.com exists, and if it does, ask yourself why it does and whether you can remove it.

[lumix1991]

Originally Posted by ewilen

Do you have a self-signed cert on ZCS? Not sure if it matters, but might as well find out.

I don't think it has anything to do with firewall settings--as long as you can reach ports 80 and 443 on the server, it should work. Of course you do want to make sure the server itself isn't blocking those ports with a firewall. Can you get to it via web interface?

I remain puzzled at your getting an autodiscover cert at all. I don't think you should be getting the message to accept the cert. Check DNS to see if autodiscover.domain.com exists, and if it does, ask yourself why it does and whether you can remove it.

Yes, currently we have a self sign certificate on our server. I just saw that my autodiscover.domain.com points to my domain root (where my website is running, there i have enabled a HTTPS certificate). I will create a autodiscover record at my domain, so that the client can't point to the SSL certificate that i use on my website. But this can't be doing something with the exchange verify problem i think?

[Meaulnes]

Is the mobile access allowed in the account settings for the users you are trying to enable this for?