vitaly_repin | # 701 | 2010-01-03, 11:46 | Report

Thanks a lot for reporting this. In fact, it was (bad) surprise for us.

However, this is automatically fixed in the upcoming MfE sw. update as we have stopped to use the symlinks mechanisms at all. Now MfE works with the certificate storage folder directly, without symlinks.

jackabite | # 702 | 2010-01-03, 11:53 | Report

Are you looking to include provisioning support in a future update ? MfE is usless to me until this is available. As an end user of corporate email I have zero influence on their secuirty policies and wouldnt expect them to change their exchange config just for me. I have been using blackberry and recently tested MfE on the iPhone, would have liked to see how it worked on the N900.

(I checked the WiKi and there's nothing on there about future support for this, can you add something to say what your plans are ?)

vitaly_repin | # 703 | 2010-01-03, 12:20 | Report

I am not the Maemo spokesperson and can not communicate our marketing plans. All I can say is that we are currently doing activities in the provisioning area. But I can not say when and what exactly will be available.

Provisioning is not as simple as to add support in MfE. Adding support for provisioning commands in MfE, is the simplest part of the equation.

Just one concrete example to illustrate this. Server administrator can specify the number of failed attempts to enter PIN code (unlock the device) after which the device will be wiped. But the device does not have this functionality at all now. And how to do wipe? Is re-creating of the filesystem enough (quick format) or shall we really WIPE the device (cat /dev/zero > /dev/mmcblk<something>?). If we shall really wipe the device, then we need to do it fast. Otherwise, the attacker will be able to stop the wiping process and restore the files. But writing the data to mmc is slow. The fast way is to use cryptographic filesystem and remove the keys. But device does not have cryptofs support in place...

This example was just to illustrate the complexity of the task. And this is not only (and mostly) about sw. development per se. This is about business and legal decisions (like, "what does wipe really mean?").

---

Last edited by vitaly_repin; 2010-01-03 at 12:29.

jackabite | # 704 | 2010-01-03, 12:51 | Report

thanks for the reponse, sounds like whatever route you take it will be sometime before this feature is available. I am suprised that Microsoft doesnt provide guidelines around how to implement the provisioning on devices. I would assume (hope) that remote wipe is specific only to the corporate data that is sync'd from exchange, and storing this information in a crypto layer would be vital, esp if you were to dock the phone via USB etc.

vitaly_repin | # 705 | 2010-01-03, 12:52 | Report

Works for me.

My remarks:

1) No debian packaging yet => no way to integrate it to extras yet. Don't forget about optification when doing debian packaging, pls.
2) You can create project page at garage.maemo.org if you wish
3) The folders are shown as a list, not as a tree. Hierarchy is lost from end-user PoV
4) Would be better to have the nice launch icon in Applications. This way, the application will be available not only for geeks but for wider audience.
5) [ Dream ] The perfect way is to implement this application as a control panel applet. Control panel applet is a so-file, loaded into the CP process in run-time, it can not be written directly in python. I am not a python programmer but I can imagine the schema like this: C-function calls python interpreter to build widgets inside C-application. Some kind of mix. I was doing this with Tcl/Tk several years ago. I believe it could be possible with python also.

THavoc | # 706 | 2010-01-03, 17:05 | Report

As far as I understand the system, this is not possible atm; maybe Vitaly can prove me wrong.

(Theoreticaly, if there would be a folder class which is not synced but still displayed by the mail client, it would be possible)

THavoc | # 707 | 2010-01-03, 17:21 | Report

Yep, I'm on this right now, but this beeing my first Maemo app, it takes some research into the whole packaging,optifying issue.

True, but I couldn't find a hildonized tree widget yet, and not even an example on the device. I will either try how a gtk tree widget looks on the device, or will try to fake a tree using buttons.

I already have the icon, it should appear in Apps when the packaging is done.

Yeah, it would be cool, but at first sight looks a little over my head

altomkins | # 708 | 2010-01-03, 20:34 | Report

From the excellent wiki;

"Unfortunately, there is no way to disable certificates check at the client side in the current MfE release."

Will there be the ability to do this in later releases?

The sertificate my company uses is duff [no CA or something]

vitaly_repin | # 709 | 2010-01-04, 10:14 | Report

You are right.

vitaly_repin | # 710 | 2010-01-04, 10:16 | Report

Not in the upcoming release. We are working on this but I can not communicate any concrete plans, schedules et cetera.