Problem Exchange Sync to 3CX

[DavidVG]

Hi,

I need your help, i can't sync my contacts Exchange (Outlook) in 3CX Phone System Management (Avanced/Contacts). I have follow this tutorial :
https://www.3cx.com/docs/manual/pbx-crm-integration/#h.8zz4zl3zmol

My config:
-OS Linux (3CX Debian Linux last ISO) = 3CX Phone System Management V16.0.3.676 on server VMWARE
-Windows Exchange Server 2016 on the same server VMWARE
-On Linux 3CX, in IIS:
Default Web Site / EWS:
Auth base : Active
Auth Windows : Disable
-Account Impersonation : OK + command enter in PowerShell Exchange
-In 3CX Phone System Management / Avanced / Contacts / Exchange :
i add my URL server mail
ID account Impersonation
Password account Impersonation
And add my email account impersonation in extension (000) to sync my contact on email account Impersonation.
-I have 5 contacts on my email account impersonation

BUT sync contact don't work because i don't have my 5 contacts (account Impersonation) in 3CX Phone System Management / Avanced / Contacts /

Sorry for my bad English ^^.

 

[StefanW]

Legacy Exchange sync via EWS is only available on Windows due to the authentication process been used. Altering the EWS IIS config lately caused loss of connectivity for outlook clients. If you have an onprem exchange, then windows based install. Or you can use Office365 and soon we will add support for shared mailboxes.

 

[mOrbo]

WTF? What is legacy with an onprem Exchange and sync via EWS? Syncing with a second EWS doesn't cause any problems with the Linux Appliance, just don't use your standard EWS and all outlook clients are happy.

I hope 3CX will not focus on Office365 crap and cancel any "legacy" onprem Exchange Support in the Linux VA??

 

[DavidVG]

Ok thx.

So, solution is second EWS + the Linux Appliance ok. I need to use Exchange. You can explains me please mOrbo?

So your tutorial isn't good :

1. Linux cannot work with the “Windows Authentication”, so these changes need to be applied in the authentication section in the IIS virtual directory for EWS:

• “Windows Authentication”: Disable
• “Basic Authentication”: Enable

But i test that and synchro contact in 3CX Phone System Management don't work.

I only managed to provision 2 Yealink T42S phone locally and provision the Softphone application (extension 000) to call extension 001.

I want to success test synchro contact Exchange in 3CX with account impersonation.

 

[mOrbo]

It works like described in your link:
https://www.3cx.com/docs/manual/pbx-crm-integration/#h.8zz4zl3zmol
You have to use a public cert. for your exchange, self-signed certs are not working.

But as I said, you need to make a second EWS, or outlook clients may loose connection in different ways.
This is a tutorial for securing your ECP with a second website:
https://www.codetwo.com/admins-blog/how-to-disable-external-access-to-ecp/

If you have this second website you can add a second EWS with this command:
New-WebServicesVirtualDirectory -Server "<ServerIdParameter>" -WebSiteName "InternalEAC" -InternalUrl "<internal url>"

After that you can set the auth methods on this new EWS and connect your 3CX to it without disturbing your outlook clients.

I hope 3CX doesn't focus on the Cloud and Office 365 crap. Calling onprem Solutions "legacy" makes me angry..

 

[DavidVG]

It works like described in your link:
https://www.3cx.com/docs/manual/pbx-crm-integration/#h.8zz4zl3zmol
You have to use a public cert. for your exchange, self-signed certs are not working.

But as I said, you need to make a second EWS, or outlook clients may loose connection in different ways.
This is a tutorial for securing your ECP with a second website:
https://www.codetwo.com/admins-blog/how-to-disable-external-access-to-ecp/

If you have this second website you can add a second EWS with this command:
New-WebServicesVirtualDirectory -Server "<ServerIdParameter>" -WebSiteName "InternalEAC" -InternalUrl "<internal url>"

After that you can set the auth methods on this new EWS and connect your 3CX to it without disturbing your outlook clients.

I hope 3CX doesn't focus on the Cloud and Office 365 crap. Calling onprem Solutions "legacy" makes me angry..

Please, how can i create a public cert to sync my Exchange contacts on 3CX?
I juste want to test sync my Exchange contacts on 3CX and for other services, i don't need now (outlook), THX.

 

[mOrbo]

You have to buy one and use it in your exchange.

You can get a wildcard cert (*.your-domain.com) for all your subdomains for 135$/year here for example:
https://www.sslmarket.com/ssl/rapidssl-wildcard/

 

[DavidVG]

You have to buy one and use it in your exchange.

You can get a wildcard cert (*.your-domain.com) for all your subdomains for 135$/year here for example:
https://www.sslmarket.com/ssl/rapidssl-wildcard/

Ok thx. And if i am in local? With linux, can i create a cert? Or on my server F-DC, because i have an error : Active Directory on my server F-DC (Controller domain).

Server Linux (3CX) : Sync Contacts Exchange 2016 on Server F-MAIL <<<< need certification authority server??? >>>> Server F-MAIL (Exchange 2016) : Contacts
So if i have my certificat and add like this:

 

[DavidVG]

I add Service Certificat in my domain controller...

 

[mOrbo]

You can't make a public cert for a .local domain. You have to use a public domain and a public cert for your exchange.

 

[DavidVG]

You can't make a public cert for a .local domain. You have to use a public domain and a public cert for your exchange.

Ok thx.

So it's not possible to test 3CX and these services without to pay, it's a pity. I want to test before to buy everything.

Thx mOrbo.

 

[mOrbo]

You can use a free Lets Encrypt Certificate for your Exchange. Without a renew tool it's only valid for 3 month, but if all your Servers are Testservers (including your Exchange) this is no problem.