Difference between revisions of "EmailAutoDiscover"

From Leaky
Jump to: navigation, search
Line 11: Line 11:
 
http://www.emaildiscussions.com/showthread.php?t=62769
 
http://www.emaildiscussions.com/showthread.php?t=62769
  
It is unlikely that autodiscover can be configured without a valid SSL certificate for the domain in the email address. Implementing a mass-hosting version of autodiscover would be prohibitively expensive due to this. It would however be possible to configure it on a per-domain basis provided the SSL certificate is purchased (or a self-signed one is installed on all client machines - Would this work?)
+
[[Category:Email]]
 +
 
 +
== Hostnames required ==
 +
 
 +
In the following examples, $maildomain is the domain from the email address being configured. $securedomain is a host or domain that we have an SSL certificate for. Due to the way the autodiscover works, autodiscover.$hostdomain needs to have a different IP to $securedomain
 +
 
 +
autoconfig.$hostdomain should be an IP that has no HTTPS service.
 +
$securedomain doesn't have to contain $hostdomain or $maildomain
 +
 
 +
 
 +
autoconfig.$maildomain (CNAME to autoconfig.$hostdomain)
 +
 
 +
* Used by Thunderbird to configure email. You can configure custom mail server names using a script to query the email address.
 +
* SSL certificate not required for this hostname.
 +
 
 +
autodiscover.$maildomain (CNAME to autoconfig.$hostdomain)
 +
 
 +
* Use a CNAME in $maildomain for autoconfig.$customerdomain pointing to autodiscover.daily.co.uk
 +
* IP address must NOT allow access via HTTPS so that it uses http and follows redirect to $securedomain without giving an SSL warning.
 +
* SSL certificate not required for this hostname.
 +
 
 +
$securedomain is for after the redirect
  
[[Category:Email]]
+
* No CNAME required for this one, but SSL certificate is required.
 +
 
 +
 
 +
 
 +
== Windows Outlook 2007/2010/2013 ==
 +
 
 +
Outlook 2010
 +
 
 +
# Query https://autodiscover.$maildomain/autodiscover/autodiscover.xml (this needs to fail because https blocked)
 +
# Query http://autodiscover.$maildomain/autodiscover/autodiscover.xml
 +
# Get redirected to https://$securedomain/autodiscover/autodiscover.xml
 +
# Prompts for allowing that url to configure mail client
 +
 
 +
For example, if we have an SSL certificate for www.bocks.com, we can setup a redirect for https://www.bocks.com/autodiscover/autodiscover.xml and Outlook will ask user if they wish to allow www.bocks.com to configure their email settings.
 +
 
 +
== Thunderbird (Windows, Mac and Linux) ==
 +
 
 +
# Query http://autoconfig.$maildomain/mail/config-v1.1.xml
 +
# If not found, none of the other things in the list of checks that it performs apply so autoconfig fails.
 +
 
 +
== Apple Mail and iOS ==
 +
 
 +
Requires generation of a .mobileconfig file containing the settings. This has to be downloaded via web browser to the mobile device or Mac.
 +
 
 +
== Outlook for Mac ==
 +
 
 +
Unable to get this working.

Revision as of 20:31, 6 November 2014

http://www.andrewyager.com/blog/2008-09-13/outlook-2007-email-autodiscovery-php-server

http://www.winblogs.net/index.php/2012/08/07/autodiscover-with-smartermail-or-any-other-mail-server/

https://github.com/jamesiarmes/php-ews/wiki/Autodiscovery

http://technet.microsoft.com/en-us/library/cc511507%28v=office.14%29.aspx#AutodiscoverXMLSchema

https://bugzilla.mozilla.org/show_bug.cgi?id=521538

http://www.emaildiscussions.com/showthread.php?t=62769

Hostnames required

In the following examples, $maildomain is the domain from the email address being configured. $securedomain is a host or domain that we have an SSL certificate for. Due to the way the autodiscover works, autodiscover.$hostdomain needs to have a different IP to $securedomain

autoconfig.$hostdomain should be an IP that has no HTTPS service. $securedomain doesn't have to contain $hostdomain or $maildomain


autoconfig.$maildomain (CNAME to autoconfig.$hostdomain)

  • Used by Thunderbird to configure email. You can configure custom mail server names using a script to query the email address.
  • SSL certificate not required for this hostname.

autodiscover.$maildomain (CNAME to autoconfig.$hostdomain)

  • Use a CNAME in $maildomain for autoconfig.$customerdomain pointing to autodiscover.daily.co.uk
  • IP address must NOT allow access via HTTPS so that it uses http and follows redirect to $securedomain without giving an SSL warning.
  • SSL certificate not required for this hostname.

$securedomain is for after the redirect

  • No CNAME required for this one, but SSL certificate is required.


Windows Outlook 2007/2010/2013

Outlook 2010

  1. Query https://autodiscover.$maildomain/autodiscover/autodiscover.xml (this needs to fail because https blocked)
  2. Query http://autodiscover.$maildomain/autodiscover/autodiscover.xml
  3. Get redirected to https://$securedomain/autodiscover/autodiscover.xml
  4. Prompts for allowing that url to configure mail client

For example, if we have an SSL certificate for www.bocks.com, we can setup a redirect for https://www.bocks.com/autodiscover/autodiscover.xml and Outlook will ask user if they wish to allow www.bocks.com to configure their email settings.

Thunderbird (Windows, Mac and Linux)

  1. Query http://autoconfig.$maildomain/mail/config-v1.1.xml
  2. If not found, none of the other things in the list of checks that it performs apply so autoconfig fails.

Apple Mail and iOS

Requires generation of a .mobileconfig file containing the settings. This has to be downloaded via web browser to the mobile device or Mac.

Outlook for Mac

Unable to get this working.