LDAP - Why does it work with iPhone and not with Entourage?

T

trump288

Version: 2008
Operating System: Mac OS X 10.5 (Leopard)
Email Client: Exchange

Hi all,

I purchased an iPhone and within 10 minutes of taking it out of the box my corporate email, contacts, and calendar were syncing with my company's Outlook Exchange Server, including the corporate directory. This success in part motivated me to buy an iMac, because I assumed that it would be just as easy to set up Entourage to do the same thing. Unfortunately that has not been my experience. While I am successfully syncing calendar, contact and email information with Entourage, I can't access my corporate directory. My company's tech guys told me that they can't give me the LDAP server because it has sensitive information about employees.

Why can the iPhone access the "normal" company directory and Entourage can't? (Not to mention that the iPhone did so automatically!). I would LOVE to be able to see my company directory through Entourage.

Any help would be appreciated, and my apologies if I have posted this question in the wrong forum. Some advice on where to post it, if I am mistaken, would be appreciated!
 
C

Corentin Cras-Méneur

Hi all,
Hi,

I purchased an iPhone and within 10 minutes of taking it out of the box
my corporate email, contacts, and calendar were syncing with my
company's Outlook Exchange Server, including the corporate directory.
This success in part motivated me to buy an iMac, because I assumed that
it would be just as easy to set up Entourage to do the same thing.


You have to realize one thing. For the iPhone, everything goes through
ActiveSync.
For Entourage, e-mails calendar events and contacts go through WebDAV,
but the directory queries go through LDAP. Quite different from Active
Sync.
Unfortunately that has not been my experience. While I am successfully
syncing calendar, contact and email information with Entourage, I can't
access my corporate directory. My company's tech guys told me that they
can't give me the LDAP server because it has sensitive information about
employees.

That's simply ridiculous. It shouldn't provide data that's any different
from what you get on your iPhone and if they are afraid that people from
the outside will get access to it, they could have LDAP over SSL with
authentication. They can also restrict LDAP queries to computers inside
they're LAN. It just doesn't make any sense to me whatsoever.
Why can the iPhone access the "normal" company directory and Entourage
can't? (Not to mention that the iPhone did so automatically!). I would
LOVE to be able to see my company directory through Entourage.

Different protocol.
Any help would be appreciated, and my apologies if I have posted this
question in the wrong forum. Some advice on where to post it, if I am
mistaken, would be appreciated!


MS mentioned that they will soon rol-out a public beta for a new version
of Exchange that will use WebServices instead of WebDAV for Exchange
(that will only be for Exchange 2007 servers though). I don't know about
directory queries, but with a bit of luck it'll also go through
WebServices...

Corentin
 
W

William Smith [MVP]

I purchased an iPhone and within 10 minutes of taking it out of the
box my corporate email, contacts, and calendar were syncing with my
company's Outlook Exchange Server, including the corporate directory.
This success in part motivated me to buy an iMac, because I assumed
that it would be just as easy to set up Entourage to do the same
thing. Unfortunately that has not been my experience. While I am
successfully syncing calendar, contact and email information with
Entourage, I can't access my corporate directory. My company's tech
guys told me that they can't give me the LDAP server because it has
sensitive information about employees.

Why can the iPhone access the "normal" company directory and
Entourage can't? (Not to mention that the iPhone did so
automatically!). I would LOVE to be able to see my company directory
through Entourage.

Are you connecting Entourage while you're on your company network or are
you connecting from outside your company network such as from home?

Global catalog servers serve as LDAP servers for Windows networks.
Global catalog servers are also Windows domain controllers, which are
very sensitive servers. These should *never* be shared to the Internet
but they are not "super secret" when connecting from inside your company
network.

If you're connecting internally (at work) then do this to determine your
GC/LDAP server:

1. Log in to your Exchange account using Outlook for Windows.
2. Hold the Control while you also right-click the Outlook icon in the
System Tray near the clock.
3. Select "Server Status..." from the contextual menu that appears.

You'll see three servers: 1.) Your Exchange Server, 2.) your public
folders server and 3.) your GC/LDAP server.

If you're connecting from outside your company network (from home) then
I have an AppleScript that will allow you to search your company
directory. Nothing to date will allow you to browse the whole directory,
however.

"Accessing the Global Address List from Home"
<http://www.entourage.mvps.org/exchange/exchangelookups.html>

If your company uses Exchange Server 2007 and it is patched to Service
Pack 1 (SP1) then you can take advantage of the Exchange Web Services
public beta to be released later this month. You can tell if your
Exchange Server is running version 2007 by selecting Tools --> Out of
Office... Exchange Server 2007 will allow you to set your Out of Office
message for both internal and external addresses whereas the standard
Out of Office window will just allow you to set one message for everybody.

More information about the beta:

"What does Entourage for Exchange Web Services mean for you?"
<http://blog.entourage.mvps.org/2009...e_for_exchange_web_services_mean_for_you.html>
or <http://tinyurl.com/7x5dtq>

Hope this helps!

--

bill

Entourage Help Page <http://entourage.mvps.org/>
Entourage Help Blog <http://blog.entourage.mvps.org/>
YouTalk <http://nine.pairlist.net/mailman/listinfo/youtalk>
Twitter: follow <http://twitter.com/meck>
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top