Issues with Email Settings API and Mailbox Delegation

99 views
Skip to first unread message

Brian Mcnamara

unread,
Mar 24, 2012, 8:20:22 AM3/24/12
to Google Apps Domain Information and Management APIs
I have a customer Go Live on Monday and am having issues with the
Email Settings API via GAM. Below is the debug output (stripped out
client-specific information). Any help is most welcome. If there are
any Googlers watching, I've opened up ticket 02024680 and provided the
domain-specific information.

bmacnamara$ python gam.py user delegator.username delegate to
delegate.username
Giving delegate...@domain.com delegate access to
delegator...@domain.com (1 of 1)
send: 'POST https://apps-apis.google.com/a/feeds/emailsettings/2.0/domain.com/delegator.username/delegation
HTTP/1.1\r\nAccept-Encoding: identity\r\nHost: apps-apis.google.com\r
\nContent-Length: 224\r\nContent-Type: application/atom+xml\r
\nAuthorization: OAuth realm="", oauth_nonce="73200844",
oauth_timestamp="1332588259", oauth_consumer_key="XXXXXXXXXX",
oauth_signature_method="HMAC-SHA1", oauth_version="1.0",
oauth_token="XXXXXXXXXX", oauth_signature="eJyjrH8Jh9HPz7wF0CEp
%2F7%2FQJEw%3D"\r\nUser-Agent: Google Apps Manager 2.3 /
j...@ditoweb.com (Jay Lee) / Python 2.7.1 final / Darwin-11.3.0-x86_64-
i386-64bit x86_64 / GData-Python 2.0.14+20110902+custom_mods\r\n\r\n'
send: '<?xml version=\'1.0\' encoding=\'UTF-8\'?>\n<ns0:entry
xmlns:ns0="http://www.w3.org/2005/Atom" xmlns:ns1="http://
schemas.google.com/apps/2006"><ns1:property name="address"
value="delegate...@domain.com" /></ns0:entry>'
reply: 'HTTP/1.1 500 Internal Server Error\r\n'
header: Content-Type: text/xml
header: Date: Sat, 24 Mar 2012 11:24:19 GMT
header: Expires: Sat, 24 Mar 2012 11:24:19 GMT
header: Cache-Control: private, max-age=0
header: X-Content-Type-Options: nosniff
header: X-Frame-Options: SAMEORIGIN
header: X-XSS-Protection: 1; mode=block
header: Server: GSE
header: Transfer-Encoding: chunked
{'status': 500, 'body': '<?xml version="1.0" encoding="UTF-8"?>\r
\n<AppsForYourDomainErrors>\r\n <error errorCode="1000"
invalidInput="" reason="UnknownError" />\r\n</AppsForYourDomainErrors>
\r\n\r\n', 'reason': 'Internal Server Error'}

Jay Lee

unread,
Mar 24, 2012, 1:56:50 PM3/24/12
to google-app...@googlegroups.com
Hi Brian,

  Both the delegate and the delegator cannot be suspended or have the force change password flag set in order for the delegation to work:


Can you confirm that that is the case for both accounts? "gam info user xx...@domain.com" will give you the necessary info.

I'll see about adding this to the GAM Wiki also.

Jay


On Saturday, March 24, 2012 8:20:22 AM UTC-4, Brian Mcnamara wrote:
I have a customer Go Live on Monday and am having issues with the
Email Settings API via GAM.  Below is the debug output (stripped out
client-specific information).  Any help is most welcome.  If there are
any Googlers watching, I've opened up ticket 02024680 and provided the
domain-specific information.

bmacnamara$ python gam.py user delegator.username delegate to
delegate.username
Giving delegate...@domain.com delegate access to
delegator...@domain.com (1 of 1)
send: 'POST https://apps-apis.google.com/​a/feeds/emailsettings/2.0/​domain.com/delegator.username/​delegation
HTTP/1.1\r\nAccept-Encoding
: identity\r\nHost: apps-apis.google.com\r
\nContent-Length: 224\r\nContent-Type: application/atom+xml\r
\nAuthorization: OAuth realm="", oauth_nonce="73200844",
oauth_timestamp="1332588259", oauth_consumer_key="​XXXXXXXXXX",
oauth_signature_method="HMAC-​SHA1", oauth_version="1.0",
oauth_token="XXXXXXXXXX", oauth_signature="​eJyjrH8Jh9HPz7wF0CEp
%2F7%2FQJEw%3D"\r\nUser-Agent: Google Apps Manager 2.3 /
j...@ditoweb.com (Jay Lee) / Python 2.7.1 final / Darwin-11.3.0-x86_64-
i386-64bit x86_64 / GData-Python 2.0.14+20110902+custom_mods\r\​n\r\n'
send: '<?xml version=\'1.0\' encoding=\'UTF-8\'?>\n<ns0:​entry
xmlns:ns0="http://www.w3.org/​2005/Atom" xmlns:ns1="http://
schemas.google.com/apps/2006">​<ns1:property name="address"
value="delegate.username@​domain.com" /></ns0:entry>'

Brian Mcnamara

unread,
Mar 24, 2012, 2:10:13 PM3/24/12
to google-app...@googlegroups.com
Ahhh...thanks for the tip, Jay.  I should have R'd TFM first!  I'll give it a go in a bit and confirm results but I know the ResetPassword flag is set for most users.

Thanks
Brian

Sent from my iPhone
--
You received this message because you are subscribed to the Google Groups "Google Apps Domain Information and Management APIs" group.
To view this discussion on the web visit https://groups.google.com/d/msg/google-apps-mgmt-apis/-/AwgR1g-kkMgJ.
To post to this group, send email to google-app...@googlegroups.com.
To unsubscribe from this group, send email to google-apps-mgmt...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/google-apps-mgmt-apis?hl=en.

Brian Mcnamara

unread,
Mar 24, 2012, 5:44:03 PM3/24/12
to google-app...@googlegroups.com
I wanted to provide an update on this one.

Jay - You were correct.  The require password change flag was the culprit.  Delegation worked fine once I updated the flag.

Regards,
Brian

Brian McNamara, Certified Google Apps Deployment Specialist
Reply all
Reply to author
Forward
0 new messages