| EWS Tunnel for FSR in Hybrid Environments [message #150407] |
Mon, 25 October 2021 03:21 |
mukunda
Messages: 1
Registered: May 2021
|
|
|
|
GFI Support here. We have had an open support case for a while asking about the possibility of running Folder Structure Retrieval in a hybrid environment. I reviewed the case recently since it seems like our development team can't work on it, as it is simply an unsupported scenario by the software's design, the main problem being the fact that you can only configure one set of credentials to be used. Our maintenance only covers functionality not working by design. Everything else isn't covered by support or maintenance and typically you would have to wait for a product update which implements the desired functionality.
Originally this request was pending our development team because of an error we figured that could be fixed, but, after my review (and wow, hybrid environments are hard to set up!), I found that I could fix that error but noted that it would still not be feasible for most environments due to the credentials mismatching between sites.
Now, while our support can't do much about this, it seemed like an interesting weekend exercise. As a potential workaround solution, I put together a python app that acts as a reverse proxy for EWS connections, and then you just tell Archiver to use that as the EWS endpoint. It routes payloads to either Office365 or your local machine, rewriting the authorization headers as necessary, including fetching OAuth tokens via Microsoft's MSAL library using the client-credentials flow.
It's pretty neat, but I must warn you that using this is definitely outside of our scope of support. GFI Support can't help you with anything that goes wrong or answer any questions about custom code like this. It's provided as-is. I've ran some basic tests in my environment and confirmed that it was working, but your mileage may vary depending on your environment, and there are some limitations, such as having only one local Exchange EWS server. Please also note that the service is providing full access to your EWS services in a typical scenario, so you want to keep that secured.
I'm raising this thread here in the hopes that our lovely community can help each other with configuring or maintaining a setup like this for those that want it (without waiting for an official product update which might allow for such flexibility).
|
|
|
|
Members
Search
Help
Register
Login
Home
