This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

GMS18 - Device State -- Never Connected --

HI All,

OK my new gms18 sever .... ALL LOOKS perfect, dsapp is happy with every little thing ... i have tried secure 443 and port 80 for the devices, nothing else on server is listening on port 443 or port 80 .. is the same for both . for internal testing (awaiting for firewall guys to open from public), i setup my local laptop (done this before aswell before i go production with the server) to test in the meantime.

1. I can setup the account ( with MS mail app (yes gms is set to allow ALL apps, including outlook and outlook mobile , it authenticates 100% , and says it is going to fetch my mail... but nothing ever reaches the account .. on the mobile server side .. it still says no devices ever connected yet i have autheticated with the device ..shouldn’t that already register as "device connected" ?..(only me and my other 2 admin added as users for now to test).

2. i have re-installed now about 3 of 4 times .. nothing?...

3. I did changed the name of the server but re-inslled about 3 x tmes after that .. and the name in hosts = lfsx14 lfsx14.nwpg.gov.za and in hostname = lfsx14.nwpg.gov.za anywhere else it need to be changed?..maybe this is the issue something on the name of the server?.

Kind Regards,

Thys
Parents
  • 0  
    In article <tdebeer.8jf8fb@no-mx.forums.microfocus.com>, Tdebeer wrote:
    > I did changed the name of the server


    as long as it is correct and remains the same as you proceed with the
    install should be good, but what is correct can hang us up.
    The full name needs to be how the devices see it and they have to
    resolve to it.
    So lfsx14.nwpg.gov.za needs to be
    A) directly resolvable by the device(s) (I see this isn't public yet)
    B) needs to match the certificates that are tied to a root CA known by
    the device. I.e. Can't be getting any cert errors when you point a
    browser to https://lfsx14.nwpg.gov.za but should get a 403 -
    Forbidden: Access is denied.
    In the early days we didn't need to be that specific, but now many
    modern devices do insist on flawless SSL/TLS without any 'errors' such
    as self minted certs.

    Check /var/log/datasync/mobility-agent.log for any activity.

    It might be worth doing a packet capture from either/both end points to
    see what is happening. To see such basics as is your 'device' actually
    getting to the GMS box and how is the SSL negotiation going.


    Andy of
    http://KonecnyConsulting.ca in Toronto
    Knowledge Partner
    http://forums.novell.com/member.php/75037-konecnya
    If you find a post helpful and are logged in the Web interface, please
    show your appreciation by clicking on the star below. Thanks!
    GMS troubleshooting tips at
    http://www.konecnyad.ca/andyk/gwmobility.htm


    ________________________

    Andy of KonecnyConsulting.ca in Toronto
    Please use the "Like" and/or "Verified Answers" as appropriate as that helps us all.

  • 0 in reply to   
    HI Andy,
    Thanx fo the reply.
    A. yes it can resolve fine, i do actually connect and authenticate (testing form internal laptop on the internal network for now)
    B. Yip i get only the 403 error, so cert looks good..
    c. even if i set it to port 80 and not 443 (certificate) it still the same result, when setup the device, my account authenticates, and says it going to "fetch my email" (MS mail app)

    lfsx14 is just the server name .. the actual dns name the users would use is nvmobile2.nwpg.gov.za .. but tried the nams as lfx14.nwpg.gov.za this morning as well..same result?
  • 0   in reply to 
    In article <tdebeer.8jgl1c@no-mx.forums.microfocus.com>, Tdebeer wrote:
    > lfsx14 is just the server name .. the actual dns name the users would
    > use is nvmobile2.nwpg.gov.za .. but tried the nams as
    > lfx14.nwpg.gov.za this morning as well..same result?


    Well there will be some of your problem. More and more devices such as
    that M$ device are getting very picky about that and just aren't
    graceful about it when the cert and names don't match 100% such as you
    likely have right now. Clearly Norman's(bahsig) system has all those
    t's crossed and i's dotted.
    I find it easiest to build GMS systems directly as if already connected
    to the Internet and only real testing once that pipe is opened.


    Andy of
    http://KonecnyConsulting.ca in Toronto
    Knowledge Partner
    http://forums.novell.com/member.php/75037-konecnya
    If you find a post helpful and are logged in the Web interface, please
    show your appreciation by clicking on the star below. Thanks!
    GMS troubleshooting tips at
    http://www.konecnyad.ca/andyk/gwmobility.htm


    ________________________

    Andy of KonecnyConsulting.ca in Toronto
    Please use the "Like" and/or "Verified Answers" as appropriate as that helps us all.

Reply
  • 0   in reply to 
    In article <tdebeer.8jgl1c@no-mx.forums.microfocus.com>, Tdebeer wrote:
    > lfsx14 is just the server name .. the actual dns name the users would
    > use is nvmobile2.nwpg.gov.za .. but tried the nams as
    > lfx14.nwpg.gov.za this morning as well..same result?


    Well there will be some of your problem. More and more devices such as
    that M$ device are getting very picky about that and just aren't
    graceful about it when the cert and names don't match 100% such as you
    likely have right now. Clearly Norman's(bahsig) system has all those
    t's crossed and i's dotted.
    I find it easiest to build GMS systems directly as if already connected
    to the Internet and only real testing once that pipe is opened.


    Andy of
    http://KonecnyConsulting.ca in Toronto
    Knowledge Partner
    http://forums.novell.com/member.php/75037-konecnya
    If you find a post helpful and are logged in the Web interface, please
    show your appreciation by clicking on the star below. Thanks!
    GMS troubleshooting tips at
    http://www.konecnyad.ca/andyk/gwmobility.htm


    ________________________

    Andy of KonecnyConsulting.ca in Toronto
    Please use the "Like" and/or "Verified Answers" as appropriate as that helps us all.

Children
No Data