ansaurus

Question

Exchange server will not accept username/password provided with javax.mail API

Answer 1

A:

Apparently, MS Exchange SSL connection is not established properly by Java Mail API. It relies on using SSLSocketFactory for that, but, if I remember correctly, MS Exchange requires a somewhat mixed approach.

Anyway, I have this piece of code in one of my projects:

public class ExchangeSSLSocketFactory extends SSLSocketFactory {

private SSLSocketFactory sslSocketFactory;
private SocketFactory socketFactory;

public ExchangeSSLSocketFactory() {
    try {
        socketFactory = SocketFactory.getDefault();

        SSLContext context = SSLContext.getInstance("TLS");
        context.init(null, new TrustManager[] { new EmptyTrustManager() }, null);
        sslSocketFactory = (SSLSocketFactory)context.getSocketFactory();
    }
    catch (Exception e) {
        throw new RuntimeException(e);
    }
}

private final class EmptyTrustManager implements X509TrustManager {
    public void checkClientTrusted(X509Certificate[] cert, String authType) throws CertificateException {}

    public void checkServerTrusted(X509Certificate[] cert, String authType) throws CertificateException {}

    public X509Certificate[] getAcceptedIssuers() {
        return new java.security.cert.X509Certificate[0];
    }
}

public static SocketFactory getDefault() {
    return new ExchangeSSLSocketFactory();
}

@Override
public Socket createSocket(Socket socket, String s, int i, boolean flag) throws IOException {
    return sslSocketFactory.createSocket(socket, s, i, flag);
}

@Override
public Socket createSocket(InetAddress inaddr, int i, InetAddress inaddr1, int j) throws IOException {
    return socketFactory.createSocket(inaddr, i, inaddr1, j);
}

@Override
public Socket createSocket(InetAddress inaddr, int i) throws IOException {
    return socketFactory.createSocket(inaddr, i);
}

@Override
public Socket createSocket(String s, int i, InetAddress inaddr, int j) throws IOException {
    return socketFactory.createSocket(s, i, inaddr, j);
}

@Override
public Socket createSocket(String s, int i) throws IOException {
    return socketFactory.createSocket(s, i);
}

@Override
public Socket createSocket() throws IOException {
    return socketFactory.createSocket();
}

@Override
public String[] getDefaultCipherSuites() {
    return sslSocketFactory.getSupportedCipherSuites();
}

@Override
public String[] getSupportedCipherSuites() {
    return sslSocketFactory.getSupportedCipherSuites();
}

}

You tell the Java Mail API to use this socket factory by setting following properties:

ssl.SocketFactory.provider
mail.smtp.socketFactory.class

to full class name of ExchangeSSLSocketFactory

From your debug output, it seems that you already have:

mail.smtp.starttls.enable set to true

With all this in place, the problem should be solved.

javashlook 2009-08-02 21:45:49

Thanks. Unfortunately that didn't do it. I have two Exchange servers available, they are both configured differently, and the both behave the same way with your code as they did with my code. In both cases the servers are saying they can do GSSAPI NTLM and LOGIN and my system is saying LOGIN PLAIN DIGEST-MD5, so the javax.mail system is trying to do AUTH LOGIN and that is failing. It's weird. It work on every other system, just not exchange.Is there a GSSAPI implementation that I can use?

vy32 2009-08-03 04:12:30

Answer 2

A:

I had the same issues. Now it works properly. I disabled the antivirus (McAfee) and corrected the user name (I unnecessarily gave the domain whereas it was not required).

2009-09-16 08:25:44

Interesting, but I think that you are experiencing bystander effect. That is, I don't think that the changes you made resulted in the effect that you observed.

vy32 2009-09-16 10:17:42

I think it was due to disabling McAfee. At my workplace McAfee has build in firewall (I have no idea whether it is the way McAfee is bundled) and the firewall was blocking some of the applications.

2010-01-04 13:04:53

ansaurus

tags:

views:

answers:

Exchange server will not accept username/password provided with javax.mail API

related questions