Microsoft Exchange Server

[Corentin Cras-Méneur]

I got it.

Excuse my ignorance but what is "X509ANchors" and where would I find
it?

Don't worry about it.
That's where this kind of certificate for a server go.
If you double-click the certificate on your Finder, it should launch the
Kaychain appp with a dialog asking you where you want to import it.
You should have a popup dialog offering either your keychain, the System
or the X509Anchors. Just select the X509Anchors and import it.
That should permanently add the certificate for your Exchange server to
the list of trusted servers.


Corentin

 

[PARVIZ_MAJD]

Don't worry about it.
That's where this kind of certificate for a server go.
If you double-click the certificate on your Finder, it should launch the
Kaychain appp with a dialog asking you where you want to import it.
You should have a popup dialog offering either your keychain, the System
or the X509Anchors. Just select the X509Anchors and import it.
That should permanently add the certificate for your Exchange server to
the list of trusted servers.

Corentin

--
--- Mac:MS MVP (Francophone) http://www.cortig.net/wordpress/---
http://www.mvps.org - http://mvp.support.microsoft.com
MVPs are not MS employees - Les MVP ne travaillent pas pour MS
Remove "NoSpam" to e-mail me - Retirez "NoSpam" pour m'écrire

Corentin,

I think I am finally there. It is all working fine now.

Again, thanks so much for your help.

Parviz

 

[PARVIZ_MAJD]

Corentin,

I think I am finally there. It is all working fine now.

Again, thanks so much for your help.

Parviz

Just when I thought everything was going fine!!???

Is that normal that my Entourage after being idle for a few minutes
asking for my pass word and I have to open Safari to be able to log
back on??

 

[Corentin Cras-Méneur]

Just when I thought everything was going fine!!???

Is that normal that my Entourage after being idle for a few minutes
asking for my pass word and I have to open Safari to be able to log
back on??

No it's not....
Do you now see the certificate in the X509Anchors in the Keychain app??
Try using the Keychain First Aid command in Keychain app to fix
potential errors.


Corentin

 

[PARVIZ_MAJD]

No it's not....
Do you now see the certificate in the X509Anchors in the Keychain app??
Try using the Keychain First Aid command in Keychain app to fix
potential errors.

Corentin

--
--- Mac:MS MVP (Francophone) http://www.cortig.net/wordpress/---
http://www.mvps.org - http://mvp.support.microsoft.com
MVPs are not MS employees - Les MVP ne travaillent pas pour MS
Remove "NoSpam" to e-mail me - Retirez "NoSpam" pour m'écrire

Yes, I do see the certificate in the X509Anchors in the keychain app.
I did also use the first aid command in Keychain, but my Enturage will
not connect unless Safari is active??

 

[Corentin Cras-Méneur]

Yes, I do see the certificate in the X509Anchors in the keychain app.
I did also use the first aid command in Keychain, but my Enturage will
not connect unless Safari is active??

Well this is really really weird.
WHat you describe is like a temporary acceptance of the Cert.

In the Keychain, select the Cert and press command-i to get the info.
Go all the way to the bottom and use the little tirangle to reveal the
Trust settings.
Make sure everything is fine (like "follow system policy" or Always
trust).


If it stilldoesn't work, delete the certificate from the Keychains and
re-import it. There s something really fishy with it.

Corentin

 

[PARVIZ_MAJD]

Well this is really really weird.
WHat you describe is like a temporary acceptance of the Cert.

In the Keychain, select the Cert and press command-i to get the info.
Go all the way to the bottom and use the little tirangle to reveal the
Trust settings.
Make sure everything is fine (like "follow system policy" or Always
trust).

If it stilldoesn't work, delete the certificate from the Keychains and
re-import it. There s something really fishy with it.

Corentin

--
--- Mac:MS MVP (Francophone) http://www.cortig.net/wordpress/---
http://www.mvps.org - http://mvp.support.microsoft.com
MVPs are not MS employees - Les MVP ne travaillent pas pour MS
Remove "NoSpam" to e-mail me - Retirez "NoSpam" pour m'écrire

It did not work. i.e same problem so I deleted the actual cert.

I also see a lot of "exchange" while trying to delete the existing
cert. Do I need to delete all these? If not I am trying to re-import
it and it says it already exists. This is now real weird since I do
not find the cert anywhere there?

Hope you are not running out of patience with my problem !!!

 

[Corentin Cras-Méneur]

It did not work. i.e same problem so I deleted the actual cert.

Did you re-import it after that?? (in the X509Anchors)

I also see a lot of "exchange" while trying to delete the existing
cert. Do I need to delete all these? If not I am trying to re-import
it and it says it already exists. This is now real weird since I do
not find the cert anywhere there?

If I'm not confusing, the Excahgne entries are the password for your
exchange account in Entourage (and shouldn't be in the X509Anchors, but
in the login keychain).

Some of them might be outdated. If you're worried about them, you could
delete them. All you'll have to do next time you launch Entourage will
be to re-enter the exchange password and ask Entourage to save it.
Make sure you don;t delete anything that might actually be useful
though. Each of these Exchange entries should indicate the address of
your Exchange server.
If it says anything else, you might want to avoid taking any chance and
leave them alone.

Hope you are not running out of patience with my problem !!!

Nah, don't worry about me ;-)


Corentin

 

[PARVIZ_MAJD]

Did you re-import it after that?? (in the X509Anchors)


If I'm not confusing, the Excahgne entries are the password for your
exchange account in Entourage (and shouldn't be in the X509Anchors, but
in the login keychain).

Some of them might be outdated. If you're worried about them, you could
delete them. All you'll have to do next time you launch Entourage will
be to re-enter the exchange password and ask Entourage to save it.
Make sure you don;t delete anything that might actually be useful
though. Each of these Exchange entries should indicate the address of
your Exchange server.
If it says anything else, you might want to avoid taking any chance and
leave them alone.




Nah, don't worry about me ;-)

Corentin

--
--- Mac:MS MVP (Francophone) http://www.cortig.net/wordpress/---
http://www.mvps.org - http://mvp.support.microsoft.com
MVPs are not MS employees - Les MVP ne travaillent pas pour MS
Remove "NoSpam" to e-mail me - Retirez "NoSpam" pour m'écrire

I do not believe then that I deleted the existing file to be able to
re-load it. I see the certificate sitting there but can't delete it ??

I only delted stuff in my "log-on" items..?? So how do I access my
X509Anchors to be able to delte the existing cert?

 

[Corentin Cras-Méneur]

I do not believe then that I deleted the existing file to be able to
re-load it. I see the certificate sitting there but can't delete it ??

You should be able to delete it.
I placed a capture of the Keychain app with my self-signed cert there:
http://www.cortig.net/images/cert.png


You can see the cert in the X509ANchors and you can see that it is
valid.
Does it look more or less the same for you??
Any chance you'd also have the certificate in your login keychains??
(and you'd then have a conflict). If it is the case, delete the
certificate in your login section and keep the X509Anchors one.

I only delted stuff in my "log-on" items..?? So how do I access my
X509Anchors to be able to delte the existing cert?

You should be able to select the X509ANchors to see what's in there with
the pane on the left (see the capture).
If you use the search box on the top right of the window, you should
also be able to find it and the "Keychain" colomn should show
"X509Anchors" (as on the capture).


Corentin

 

[PARVIZ_MAJD]

You should be able to delete it.
I placed a capture of the Keychain app with my self-signed cert there:http://www.cortig.net/images/cert.png

You can see the cert in the X509ANchors and you can see that it is
valid.
Does it look more or less the same for you??

Yes.. More or less except for the X509Anchors that I do not see on the
left hand side. Everything else is there..

Any chance you'd also have the certificate in your login keychains??

No. It is not there.

(and you'd then have a conflict). If it is the case, delete the
certificate in your login section and keep the X509Anchors one.


You should be able to select the X509ANchors to see what's in there with
the pane on the left (see the capture).

I tried that but for some reason X509Anchors does not show up
anywhere!!! i.e it does not seem to exist

If you use the search box on the top right of the window, you should
also be able to find it and the "Keychain" colomn should show
"X509Anchors" (as on the capture).

Again it does not seem to exist.

 

[Corentin Cras-Méneur]

I tried that but for some reason X509Anchors does not show up
anywhere!!! i.e it does not seem to exist

Could you launch the Keychain app and press command-k?? That should make
the list of keychains appear.
Also, you don;t havea "location" column in the list of Keychain items??

At this point, I would trash the certificate you have for the Exchange
server (from Keychain app) and re-import it, making sure you select
X509Anchors in the dialog.

Corentin

 

[PARVIZ_MAJD]

Could you launch the Keychain app and press command-k?? That should make
the list of keychains appear.
Also, you don;t havea "location" column in the list of Keychain items??

At this point, I would trash the certificate you have for the Exchange
server (from Keychain app) and re-import it, making sure you select
X509Anchors in the dialog.

Corntin,

I try to re-import the certificate into the X509Anchors, but everytime
I try that it goes into my "log-in" eventhough I pick the
X509Anchors.

This is where I think the problem is?

 

[PARVIZ_MAJD]

Corntin,

I try to re-import the certificate into the X509Anchors, but everytime
I try that it goes into my "log-in" eventhough I pick the
X509Anchors.

This is where I think the problem is?

I finally was able to delete the file from my 509Anchor and reloaded a
new one one back in. am sorry to say that the problem persist.
Entourage kicks me out after almost 10 minutes i.e it asks for my
password and if Safari is not active it won't let me in..

 

[Corentin Cras-Méneur]

I finally was able to delete the file from my 509Anchor and reloaded a
new one one back in. am sorry to say that the problem persist.
Entourage kicks me out after almost 10 minutes i.e it asks for my
password and if Safari is not active it won't let me in..

If you double-click on the certificate in the Keychain application, does
it say right under the name "Self-signed root certificate"
If you go all the way down on this window to the "Trust settings", what
does it say??
Do you see "X509 basic policy: Always trust" ??

Corentin

 

[PARVIZ_MAJD]

If you double-click on the certificate in the Keychain application, does
it say right under the name "Self-signed root certificate"
If you go all the way down on this window to the "Trust settings", what
does it say??
Do you see "X509 basic policy: Always trust" ??

Yes. I see "Alway trust" in the X-509 basis policy..

 

[Corentin Cras-Méneur]

Yes. I see "Alway trust" in the X-509 basis policy..

Well I'm starting to run out of option :-\

Did you manage to delete this cert and re-import it properly?
I can see no reason why it wouldn't work.
Can you please also check that the certificate appears in the Microsoft
Cert Manager application (in the Apple Trusted Root Certificate
Authorities) and that everything looks OK there?

Corentin

 

[PARVIZ_MAJD]

Well I'm starting to run out of option :-\

I understand..

Did you manage to delete this cert and re-import it properly?

Yes. Several times.

I can see no reason why it wouldn't work.
Can you please also check that the certificate appears in the Microsoft
Cert Manager application (in the Apple Trusted Root Certificate
Authorities) and that everything looks OK there?

It was not there. I just added on AND I am crossing my fingers..

Eitherway thanks a lot for all your help. Even at this stage I am
happy to have a functional Entourage, sort of.

 

[PARVIZ_MAJD]

I understand..




Yes. Several times.


It was not there. I just added on AND I am crossing my fingers..

Eitherway thanks a lot for all your help. Even at this stage I am
happy to have a functional Entourage, sort of.

Corentin,

It is not working..Damn...

Strangely I quit Safari, shut it completely down, and Entourage is
working fine for several minutes. I do a manual "send&receive" and it
is all fine. Then when my Mac is sitting in-active for a few minutes
this is is where my problems start.

 

[Corentin Cras-Méneur]

<[email protected]>PARVIZ_MAJD@HOTM
AIL.COM wrote:

Corentin,

It is not working..Damn...

Strangely I quit Safari, shut it completely down, and Entourage is
working fine for several minutes. I do a manual "send&receive" and it
is all fine. Then when my Mac is sitting in-active for a few
minutesthis is is where my problems start.

:-|
Another thought.... Try repairing Permissions on your Mac (through
DiskUtility).You never know.... there could be something wrong there,


Corentin