Enabling Kerberos Authentication

We had a customer recently who was using Outlook 2010’s MAPI in their application to talk to the Exchange server. They wanted to enable Kerberos authentication, but were having trouble enabling it programmatically. They had found the property that gets changed when you enable Kerberos authentication through the UI: PR_PROFILE_AUTH_PACKAGE in the global profile section…


Exchange 2010 and the MAPI Download

Bunches of people have contacted me asking if the MAPI download works with Exchange 2010. My usual response has been that I know it works, but you have to tweak the profile. I didn’t know the specific tweaks ‘cause I hadn’t looked in to it. Dave Vespa just blogged those tweaks. Note that they’re very…


Auth and Check Names

When I posted the Referral Madness article, there was an intriguing comment that I didn’t get a chance to investigate until it came up in a case. The commenter noted that when we used RPC_C_AUTHN_GSS_NEGOTIATE as our authentication mechanism, we could no longer use “Check Name” in the dialog brought up by ConfigureMsgService: If we…


GCReconnect: Please Don’t Delete the Profile

I had some extra time today, so I put together updates I’ve been working on for the GCReconnect sample/tool which we use to demonstrate/test referrals. The key addition here is an oft requested switch, –k, which requests that we keep the profile that GCReconnect built. I’ve posted the updated sample here. C:>gcreconnect Creates a profile,…


Local Referrals

Time for another round on referrals. When last we left off, we were able to get the MAPI download to request and receive referrals from Exchange 2007, but the settings didn’t work if MAPI was running locally on the Exchange 2007 server. Let’s take a closer look at why it fails: The whole point of…


Referral Madness

I’ve had a few customers lately getting hangs using Exchange’s MAPI to talk to Exchange. Their specific symptoms and repro steps varied from case to case, but in every case, the stack showed the client waiting on an NSPI call to return. NSPI is the interface the Exchange Address Book Provider uses to talk to…


MAPI and IPv6

Duncan Smith noted recently that MAPI appears to have a problem with IPv6. He contacted me to see if I knew anything about the issue. I didn’t, but one of the Exchange PMs spotted the connection between Duncan’s issue and the recently reported DSProxy issue over on the Ehlo blog. It turns out that issue…


Getting a Referral From Exchange 2007

One of my customers reported that using the MAPI download, they were unable to get a referral from Exchange 2007, even after following the instructions in Jason Johnston’s article. The same code worked if they were targeting an Exchange 2003 machine, and Outlook’s MAPI had no problems getting a referral from Exchange 2007. A little…