Entourage and RPC-over-HTTP

“Does Entourage use RPC-over-HTTP?” I’ve run across this question several times in the public newsgroups, on mailing lists, and in direct conversation. Now Mike Wendland’s asking, so I figured I’d write a long answer and just refer to it in the future.

In the beginning, there was MAPI, the Mail Application Programming Interface. Microsoft Mail (remember that?) used MAPI, as did the long-forgotten Windows Messaging and Exchange Client applications. When the Outlook team began working on Outlook, it used MAPI also. MAPI communication between client and server are actually implemented using remote procedure calls (RPCs) that travel over the Windows RPC subsystem, which uses TCP ports 135 and 443 and UDP ports 137 and 139. Because early versions of Windows had a number of RPC-related security vulnerabilities, admins quickly learned to block these ports from the Internet, meaning that you had to dial in or establish a VPN session to get your mail with Outlook from outside the corporate network.

In the meantime, lots of other applications started tunneling their data over the standard HTTP port, TCP port 80. This has the advantage (for users) of letting these applications run without special permissions or changes to the firewall. With Outlook 2003, Microsoft implemented RPC-over-HTTP tunneling so that you can establish a native Outlook MAPI session from outside the firewall without using the default RPC ports. This is good from a security and convenience standpoint. Why security? Think about it: if you establish a VPN session, you’re trusting the remote machine to be clean, and you’re trusting the remote user not to do anything malicious on your network. With RPC-over-HTTP, all the remote user can do is get mail, so you don’t have to worry that they’re going to screw up anything else.

Entourage for Mac OS X doesn’t use RPC-over-HTTP. Instead, it uses WebDAV, an XML-based technology that travels over HTTP connections. It has nothing to do with MAPI or with RPCs, and it works with Exchange 2000 and Exchange Server 2003– RPC-over-HTTP requires Exchange Server 2003 running on Windows Server 2003.

Both technologies have the same effect: an outside user can establish a connection to the Exchange server using HTTP (which had better be protected with SSL) to talk to the server.

Now, on to Mike’s specific question: Apple Mail 2 supports Exchange accounts using WebDAV, so if your employer supports WebDAV and is running Exchange 2000 or later, you should be good to go. You’ll probably need to enter the same server name that you use for Outlook Web Access to get Mail to find the right server. Good luck!

2 Comments

Filed under General Stuff, Musings

Secure Messaging reviewed, at least partly

Michael Murphy, a TechNet presenter for Microsoft, has been reading Secure Messaging with Microsoft Exchange Server 2003. So far, I like his approach to reviewing the book; he’s posted an article that describes his reaction to the first two chapters, including an explanation of what’s in them. One of the best parts of writing a security-focused book was that I had the luxury of including background material to help Exchange admins get the right vocabulary and mindset to talk security with real security folks. This makes my book very different from other Exchange books, since they normally have to cover so many topics that they can’t provide much depth in any one area. In fact, the first five chapters are broad enough to be of interest to admins running any messaging or collaboration software on Windows– so all you Notes folks who secretly read my blog, go get a copy 🙂

Comments Off on Secure Messaging reviewed, at least partly

Filed under General Stuff, Reviews

Indexing SMB volumes with Spotlight, redux

Week before last, I posted about a problem I was having making Spotlight index SMB volumes. It turns out that Spotlight is indexing the volume just fine, as you can see by using the mdls command to check whether a given file has been indexed. Part of the problem was a misunderstanding on my part: the Spotlight database actually lives in /private/var/db/Spotlight-V100, although there’s a separate .Spotlight-V100 directory in each local volume. That directory wasn’t present on my SMB volumes, which confused me. It turns out that the real problem is that the Spotlight menu bar extension doesn’t search catalogs from network volumes, and neither does the mdfind utility! I might not have figured this out on my own, but this thread at Apple was very instructive.

To test, I created a text file at the root of my SMB directory with the string “Zarahemla” in it. Neither the menu bar nor mdfind would find that file, but the Finder’s Find utility did the trick once I told it explicitly to look at /Volumes/work. I can live with this limitation for the time being. A bonus limitation is that indexing is turned off when the volume’s unmounted, so I’ll have to remember to turn it on each time I remount the volume. C’mon, Apple, fix this in 10.4.2.

Comments Off on Indexing SMB volumes with Spotlight, redux

Filed under General Tech Stuff

Morgan Stanley fumbles e-disclosure, gets hammered

Ouch! This story from yesterday’s Wall Street Journal details how problems with Morgan Stanley’s e-discovery process are going to end up costing them a lot: perhaps $360 million, or even more. The judge in the case labeled their actions as bad faith, and that’s going to cost them.

Morgan Stanley is in serious trouble because of the way it mishandled an increasingly critical matter for companies: handing over email and other documents in legal battles. Lawsuits these days require companies to comb through electronic archives and are sometimes won or lost based on how the litigants perform these tasks. Morgan Stanley kept uncovering new backup tapes, couldn’t perform full searches because of technology glitches and gave material to the other side that was sometimes incomplete or late.

The Morgan Stanley folks made a number of poor decisions and mistakes– ones that you should be sure not to duplicate in your own environment.

Update: this WSJ story says that the jury hit Morgan Stanley for $604 million. As the story also points out, the jury was instructed by the judge to put the burden of proof on Morgan Stanley, not the other way around, so it’s reasonable to expect that this will be appealed, and that it might be overturned. Still, $604 million is a high price tag.

Update: the WSJ just reported that the jury awarded Perelman another $850 million in punitive damages. That brings Morgan Stanley’s total tab to $1.45 billion.

Comments Off on Morgan Stanley fumbles e-disclosure, gets hammered

Filed under FAIL, Oops!

Company Man (Finder)

Spellbinding. I couldn’t put it down. Stop reading my blog and go read this instead.
What, you’re still here? OK. Here’s the deal. Nick Conover is the CEO of a large office-furniture company. Someone’s stalking his family. He kills the stalker, more or less unintentionally, and suddenly finds himself pursued by a dogged homicide detective (who, in a welcome reversal, is a devout Christian and portrayed sympathetically as such), under attack by rivals at work, estranged from his teenage son, and involved with a, er, somewhat unstable woman– the daughter of the man he killed. Finder’s storytelling ability is amazing; his characters are richly drawn, and overall this was a terrific book. Highly recommended.

Comments Off on Company Man (Finder)

Filed under Reviews

One flight = Medallion status

Wow, those folks at Delta have gone crazy. They’re offering a promotion that grants Silver Medallion status in their frequent-flyer program for one round trip. The catch: you have to fly out of one of 14 specified cities. (Note to Julie and Paul: Burlington is one of them!) I signed Arlene and the boys up for it with no problem. There’s a similar offer for Gold Medallion status, but it seems to be limited to people that Delta invited. Now, off to hunt for cheap flights…

Comments Off on One flight = Medallion status

Filed under Travel

McCoy’s Marines (Koopman)

This book, subtitled Darkside to Baghdad, purports to be the story of Lt Col Bryan McCoy, USMC, and his troops: 3rd Bn, 4th Marines. Unfortunately, most of the book is about the author. That’s all right; he paints an engaging portrait of life as an embedded journalist with a Marine unit. However, there’s not much insight into the ostensible focus of the book, LtCol McCoyas other books. Compared to other similar books, like Atkinson’s In the Company of Soldiers, Koopman’s book comes off much more like an extended series of newspaper columns. One highlight: the interspersed emails from readers of his column who mailed him to talk or ask about their friends and family members in 3/4. Overall, this wasn’t a bad read, but it is essentially little more than a memoir; it lacks the depth of characterization found in Atkinson’s book or in Wright’s Generation Kill, and it’s no replacement for The March Up as a chronicle of 3/4’s campaign.

Comments Off on McCoy’s Marines (Koopman)

Filed under Reviews

Office Communicator released to manufacturing

Congratulations to the Microsoft Office Communicator team! They just RTM’d their product. If you haven’t already tried it, grab the evaluation version and give it a spin.

Comments Off on Office Communicator released to manufacturing

Filed under General Stuff, Musings

Isn’t technology wonderful?

How cool is this? Right now I’m sitting in a parking lot in Salt Lake City, from where I just filed my weekly UPDATE column. Arlene wanted to hit a couple of scrapbook stores, so I grabbed my laptop and my new Verizon aircard; now I’m online and working away, so she can take as much time shopping as she likes (well, until my battery runs out, anyway).
The aircard gives me 60-144Kbps speeds pretty much anywhere that my phone works, which is good– but it gives me up to 2Mbps in areas where Verizon has EVDO coverage. These areas include Seattle and Santa Monica (where I was last week), as well as the Cincinnati airport (my home away from home) and a bunch of other places.
The first aircard I had was the Sierra V620. It worked fairly well, but its speed in low-signal areas wasn’t that great. I grabbed the KPC-650 as soon as I could, but I haven’t had a chance to test it in an EVDO area yet. However, being able to turn dead time into productive time is outstanding– that means I won’t have to write my column later, when I’d rather be doing something else!

2 Comments

Filed under Musings

Audiovox/UTStarcom XV6600 review

Bottom line: this is the most impressive Windows Mobile device I’ve used, with great functionality and capability. Verizon’s BroadbandAccess works great, and the built-in QWERTY keyboard is a terrific feature, but battery life could sure use some improvement.

First, the gross physical attributes. The converged-device market has started to coalesce into two form factors: sticks (like the SMT5600 and palmtop devices, which range from the small Treo to the big ol’ HP 6315– and this device. The XV6600 looks like a conventional PocketPC device, but when you slide it open that’s when you really notice the difference. The screen is brilliant, large, and colorful; I think it’s equal to the 6315’s screen, although perhaps a little brighter in sunlight. Below the screen are the standard set of Pocket PC phone buttons: four hard buttons for Windows Mobile, plus red and green phone buttons.

The 6600’s QWERTY keyboard slides out from beneath the screen. Greg Hughes called it a “pimple-style chicklet bubble layout”, and sadly I have to agree– the keys are little recessed circles, and there’s very little tactile feedback when typing. The keyboard on the Treo is superior, although it’s a good bit easier to enter text on the 6600 thanks to Windows Mobile’s predictive-text engine. (There’s also the fact that you can enter text using only the stylus on the 6600, which of course you can’t do with the Treo).

Phone: the 6600 worked quite well as a cellphone. However, I had trouble making calls since there’s no hard keyboard available for dialing– unless you pull out the QWERTY, in which case there’s no way to tell whether you’re hitting the number keys or not. Many of the heavy Pocket PC phone users I know have Microsoft’s Voice Command installed, and that’s probably the best solution, but I didn’t try it. Speaker and speakerphone volume were good.

Messaging: What can I say? It’s Pocket Outlook, which worked fine over the air and when syncing with my desktop.

Synchronization: As with the SMT5600, I had a few minor problems with ActiveSync on the desktop, but those were easy to resolve. Over-the-air sync with EAS worked well, although I didn’t use it much because of the phone’s terrible battery life.

Bluetooth: This device has great Bluetooth support if you install the available update from Audiovox. I switched from the Jabra FreeSpeak 250 headset to the GN6210, which is essentially the same hardware; after installing the update, I was able to pair the headset and make and receive calls. Range wasn’t that good; the manual suggests putting the phone on the same side of your body as the headset, and I found that if I didn’t do that, I’d get some crackles and static.

Other: it’s a darn good thing this unit has a replaceable battery, because the battery life is terrible. I got about a day per battery charge, and that’s without using the device much as a phone at all. The ringer volume was too low; I missed several calls in airports, taxicabs, and other noisy environments. I never got used to the keyboard, which has basically no “feel” to it.

The one killer feature I haven’t mentioned yet is Verizon’s EVDO network, which offers up to 2Mbps of wireless service. It worked flawlessly in my tests in DC and Cincinnati (well, until my battery died). I didn’t have the right cable to tether the 6600 and use it as a laptop data modem; if you’ve got Bluetooth in your laptop, the process is simpler– in which case you’ll find that Bluetooth is too slow to keep up with EVDO! (Instructions for tethering in USB and Bluetooth modes are here).

Bugs and annoyances: Verizon doesn’t offer this phone with WiFi or a camera, even though other carriers (notably T-Mobile and Cingular) offer versions that have both. The phone would sometimes spontaneously reboot, and it kept bringing up a data connection even though I wasn’t running any data applications (that I knew of, anyway).

Overall, I was impressed with the 6600. Even though it lacks WiFi, it’s much better as a phone than the 6315, and it’s more usable as a PDA than the 5600. However, the large size and poor battery life made it a poor fit for my use, and it’s expensive to boot. However, the EVDO connectivity is a killer feature for mobile users, and once VZW and UTStarcom solve the battery life problem this will really be a contender.

1 Comment

Filed under Reviews

Blair’s newest hot sauce

From the makers of Death Rain potato chips comes a new terror: Blair’s 16 Million Reserve, named after its score on the Scoville scale of hotness. The new extract (the maker is careful to say it’s not a sauce or an ingredient) is pure capsacin. To put things in perspective, 16 Million Reserve is approximately three times hotter than police pepper spray and approximately 177 times hotter than Dave’s Insanity Sauce. Ordinary Tabasco? It only hits around 5000 on the Scoville scale.

Comments Off on Blair’s newest hot sauce

Filed under Musings

RIP, Hack

US Army Colonel David H. Hackworth passed away this week. During his military career, he earned nine Silver Stars, four Legions of Merit, eight Bronze Stars, and eight Purple Hearts. He was an outspoken critic of anything that got in the way of the military’s mission: applying force as directed by the civilian leaders of the US government. Rest in peace, Hack.

Comments Off on RIP, Hack

Filed under Musings

Flag waving

This just in: the US Court of Appeals for the DC circuit just struck down the FCC’s broadcast flag requirement. w00t.

1 Comment

Filed under HDTV and Home Theater

Neat virtual SMTP server connection restriction trick

I was floored to hear about this, but maybe that just shows I need to get out more. Turns out that you can flip a metabase flag to get some additional control over SMTP relaying. By default, if you require authentication and list one or more allowed IP addresses, both of those restrictions apply. However, you can set the SMTPIPRestrictionFlag value to use the logical-OR of those two factors, so that you can relay if you authenticate or if you’re coming from an allowed IP address. Mad props to Konstantin Ryvkin for admitting to this and to Devin for blogging it.

Comments Off on Neat virtual SMTP server connection restriction trick

Filed under General Stuff, Musings

Indexing network volumes with Spotlight

Now that I have Tiger installed, I wanted to make Spotlight index the SMB volumes on my Windows Server 2003 file servers. Nope; there’s no way in the user interface to tell Tiger what you want it to index. You can exclude certain items (and it looks like you should, at a minimum, exclude the Microsoft User Data folder to keep Spotlight from hammering your Entourage database), but you can’t add items… unless you use the command line. Google was useless, but a quick Feedster query turned up these instructions, which I’m now testing (the key is to use the mdutil command to enable the volume for indexing).

Update: these instructions turn on indexing, but no results are ever returned. Ooops.

Comments Off on Indexing network volumes with Spotlight

Filed under General Tech Stuff