Outlook 365 - Connectivity Test Failed - email

I'm a new of Outlook setting. Therefore, I have problem with outlook setting or outlook synce because when I tried to verify via https://testconnectivity.microsoft.com/ then got failed result.
For result, let me put them below:
The Microsoft Connectivity Analyzer is attempting to test Autodiscover for bouasone.vongphachanh#roomtoread.org.
Testing Autodiscover failed.
Additional Details
Elapsed Time: 24751 ms.
Test Steps
Attempting each method of contacting the Autodiscover service.
The Autodiscover service couldn't be contacted successfully by any method.
Additional Details
Test Steps
Attempting to test potential Autodiscover URL https://roomtoread.org:443/Autodiscover/Autodiscover.xml
Testing of this potential Autodiscover URL failed.
Additional Details
Test Steps
Attempting to test potential Autodiscover URL https://autodiscover.roomtoread.org:443/Autodiscover/Autodiscover.xml
Testing of this potential Autodiscover URL failed.
Additional Details
Test Steps
Attempting to resolve the host name autodiscover.roomtoread.org in DNS.
The host name resolved successfully.
Additional Details
IP addresses returned: XXX.XXX.XXX.XXX
Elapsed Time: 7595 ms.
Testing TCP port 443 on host autodiscover.roomtoread.org to ensure it's listening and open.
The specified port is either blocked, not listening, or not producing the expected response.
Tell me more about this issue and how to resolve it
Additional Details
A network error occurred while communicating with the remote host.
Elapsed Time: 9860 ms.
Attempting to contact the Autodiscover service using the HTTP redirect method.
The attempt to contact Autodiscover using the HTTP Redirect method failed.
Additional Details
Test Steps
Attempting to resolve the host name autodiscover.roomtoread.org in DNS.
The host name resolved successfully.
Additional Details
Testing TCP port 80 on host autodiscover.roomtoread.org to ensure it's listening and open.
The port was opened successfully.
Additional Details
The Microsoft Connectivity Analyzer is checking the host autodiscover.roomtoread.org for an HTTP redirect to the Autodiscover service.
The redirect (HTTP 301/302) response was received successfully.
Additional Details
Attempting to test potential Autodiscover URL https://autodiscover-s.outlook.com/Autodiscover/Autodiscover.xml
Testing of this potential Autodiscover URL failed.
Additional Details
Test Steps
Attempting to resolve the host name autodiscover-s.outlook.com in DNS.
The host name resolved successfully.
Additional Details
Testing TCP port 443 on host autodiscover-s.outlook.com to ensure it's listening and open.
The port was opened successfully.
Additional Details
Testing the SSL certificate to make sure it's valid.
The certificate passed all validation requirements.
Additional Details
Test Steps
Checking the IIS configuration for client certificate authentication.
Client certificate authentication wasn't detected.
Additional Details
Attempting to send an Autodiscover POST request to potential Autodiscover URLs.
Autodiscover settings weren't obtained when the Autodiscover POST request was sent.
Additional Details
Test Steps
The Microsoft Connectivity Analyzer is attempting to retrieve an XML Autodiscover response from URL https://autodiscover-s.outlook.com/Autodiscover/Autodiscover.xml for user bouasone.vongphachanh#roomtoread.org.
The Microsoft Connectivity Analyzer failed to obtain an Autodiscover XML response.
Additional Details
An HTTP 401 Unauthorized response was received from the remote Unknown server. This is usually the result of an incorrect username or password. If you are attempting to log onto an Office 365 service, ensure you are using your full User Principal Name (UPN).
HTTP Response Headers:
request-id: 3d3f9acd-0b01-46c1-b63a-a0b0c31d01d4
X-CalculatedBETarget: dm5pr01mb2393.prod.exchangelabs.com
X-FEServer: DB6PR07CA0162
Content-Length: 0
Cache-Control: private
Date: Tue, 20 Feb 2018 03:09:37 GMT
Server: Microsoft-IIS/10.0
WWW-Authenticate: Basic Realm=""
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Elapsed Time: 936 ms.
Actually, in other email was worked well. just get stuck in this email only.
Should me configure any in Active Directory?
Are there any one that can break it out for me or even suggest the solution then would very appreciate.
Big thanks,
Best regards,
SmallCorner

Related

External login (via ADFS) from identity server3 responds with http status code 504

I received federation metadata endpoint from customer which I used to configure WsFederationAuthentication in identityserver3.
Everything works fine from developer machine like identity server login redirecting to adfs login page, but after deploying the solution into AWS elastic bean stalk (which is in private subnet) then I receive 504 HTTP status code when I try to login through External(ADFS) login.
I simulated this scenario in postman. I receive 302 response in developer machine but the request never ends (postman result pane shows 'Loading...') in AWS ec2 instance.
I am able to browse federation metadata URL and /adfs/ls endpoint from AWS ec2 instance.
In idnetity server log, I can see below logs,
External login requested for provider: adfs
Triggering challenge for external identity provider
HTTP Response
{
"StatusCode": 401,
"Headers": {
"Content-Type": [
"text/html"
],
"Server": [
"Microsoft-IIS/10.0"
],
"Content-Length": [
"0"
]
},
"Body": ""
}
After this, gateway timeout happens (by AWS load balancer).
As per code in Microsoft.Owin.Security.WsFederation.WsFederationAuthenticationHandler.cs, from ApplyResponseChallengeAsync() method, redirect response should generate with location header having adfs login page URL.
But, this is not happening.
I see below error in HTTPError.Log.
GET
/identity/external?provider=adfs&signin=699036641a8b2b6ddccea61bc8c1f715 --
1 Connection_Abandoned_By_ReqQueue DefaultAppPool
I do not see any event related to above HTTP error in event viewer log.
I searched for the above error but the solutions did not yield any good results for this issue.
I further investigated with process monitor tool, compared the tcp operations between local and aws ec2 instance for the identityserver external login endpoint request then I found that TCP disconnect operation happening immediately after TCP connect in AWS ec2 instance but in local this was not happening instead TCP communication established and tcp communication went well.
Further investigated with wireshark tool then I found the Handshake failure happening in AWS ec2 instance after Client Hello call. Then I compared TLS version and cipher suites used by local machine (from wireshark log), I found the difference like local machine uses TLS 1.2 and cipher suite : TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
and AWS ec2 instance uses TLS 1.0 which is not supproted by ADFS server. Hence the tcp connection could not be established resulting into handshake failure.
I followed this link https://learn.microsoft.com/en-us/officeonlineserver/enable-tls-1-1-and-tls-1-2-support-in-office-online-server#enable-strong-cryptography-in-net-framework-45-or-higher to make .net framewrok to use strong crypto.
After this registry update, successfully able to login from external idp (ADFS) via identity server3 login page.

SSL for mail server

I don't know if I am asking this in the right place.
I have an SSL cert for my website, and I am trying to setup a mail server (same domain) using the same cert.
I am using Postfix and Dovecot. When I try logging in from Evolution mail client, I get an error "Peer failed to perform TLS handshake". When I try an online service to verify I get "Recipient address rejected: User unknown in local recipient table."
I guess my actual question is, can I actually use the same SSL cert for my website and my email server?
What do I do to debug next?
You can use a certificate you have for the web server also for your mail server as long as it matches the hostname you use to access your mail server. Of course the certificate need to properly setup at the mail server, i.e. include the necessary intermediate certificates similar to how it is (hopefully) setup on the web server.
I am using Postfix and Dovecot.
This means you need to take care of multiple configurations, both for SMTP in Postfix and IMAP/POP3 (whatever you use) in Dovecot. And in all cases the certificates subject/SAN must match the hostname you use to connect to the server.
When I try logging in from Evolution mail client, I get an error "Peer failed to perform TLS handshake".
There are not enough information about this setup to find out what exactly is causing the TLS error. It is not even clear if the error is caused when retrieving mail (IMAP/POP3, i.e. Dovecot) or while sending (Postfix).
When I try an online service to verify I get "Recipient address rejected: User unknown in local recipient table."
This has nothing to do with TLS at all. The test server simply tried to use a recipient which your mail server (Postfix) will not accept.
What do I do to debug next?
The next steps would probably be to check if the certificate matches the names you use in the first place and to look into log files for error messages or warnings. Following steps depend on what the result of these steps is.

Configure sip account in FRITZ!Box

This question is very specific to FRITZ!Box 7360. I have the lest firmware installed.
I want to configure a sip account from a provider like Elvero. I tried to follow instructions provided at configuring internet telephone. After configuring I do not see any sip connection attempts reaching the sip server and FRITZ!Box complains that it did not get a response from the server.
This means, I cannot receive and make calls through Elvero. Anyone got successful in connecting FRITZ!Box to an external sip provider?

jmeter mail reader sampler connection issues

I am trying to check my gmail with a mail reader sampler in jmeter and enabled both imap and pop3 in my gmail account.
Everytime I try to connect to gmail, I keep getting this error:
Response message: javax.mail.MessagingException: Connect failed;
nested exception is: java.net.ConnectException: Connection refused: connect
This is my query:
Click me
I tried both SSL and TLS option at the bottom. I tried adding and leaving out the port. Also experimented with leaving out "#gmail.com" portion in my email address. And also wrote the protocol as pop3 and as pop3s. Not sure why it won't work.
I am on a corporate wifi, I don't know if that could be the thing causing the issue.
First of all, make sure JMeter can connect the Internet. To validate it add HTTP Request sampler and insert any Internet IP address or hostname in the relevant input, i.e. example.com
If the request succeeds - double check Mail Reader Sampler settings. If request is failing - most likely you're sitting behind corporate proxy and need to configure JMeter to use it.
In regards to the Mail Reader Sampler configuration for POP3 protocol should look as follows:
Protocol: pop3s
Host: pop.googlemail.com
Port: 995
Username: username#gmail.com
Password: your account password
Security Settings: Use SSL
You may also need to turn on access for less secure apps in your Google Account settings
See Load Testing Your Email Server: How to Send and Receive E-mails with JMeter
Thanks for your response! It was a wifi issue so I had to use the public wifi offerred by the company to make it work.
Also, note that I got it to work with imap instead. Here are the configs I used:
Protocol: imaps
Host: imap.gmail.com
Port: 993
Username: username (don't include #gmail.com)
Password: your account password
Security Settings: Use SSL

SSL Certificate - untrusted error

We procured standard ssl certificate to mydomain.net from godadday.
We shutdown live server mydomain.com, configured new server mydomain.net with ssl, everything works fine.
We have added redirect records in DNS for mydomain.com to mydomain.net
www.mydomain.com redirecting properly to www.mydomain.net
We are experiencing a issue, when any request to https //www.mydomain.com
redirection happening but with untrusted certificate error message.
www.mydomain.com uses an invalid certificate.
The certificate is valid for the following names:
www.mydomain.net , mydomain.net
(Error code: ssl_error_bad_cert_domain)
Godaddy india support not able to resolve the issue, escalated to US support no update from US support.
Please suggest me how to resolve this issue?
Thanks,
ItsR
Redirection inside a HTTPS connection from domain A to domain B needs a proper certificate for domain A too, which does not seem to be in your case. This is because the redirection happens inside the TLS connection, i.e. the TLS connection needs to be established first which needs the proper certificate.