VPN Certificates - Google Pixel 3 XL Questions & Answers

Is anyone else having issues importing VPN certificates with Strongswan I just get No Certificates Found in the Strongswan app but the cert shows up in settings.

I don't have my 3 XL yet, but experience tells me your certificates are sitting in a location in which the program can't find them. You might want to see into what directory they need to be moved / loaded.

I am loading the certificates into the built in Android certificate manager and they show up in settings but when the app shows built in Android certificate picker they don't show up. So I don't think it's a location issue because they are showing in Android settings just not when the picker comes up in the strongswan app.
Sent from my Pixel 3 XL using Tapatalk

georgewillims said:
I am loading the certificates into the built in Android certificate manager and they show up in settings but when the app shows built in Android certificate picker they don't show up. So I don't think it's a location issue because they are showing in Android settings just not when the picker comes up in the strongswan app.
Sent from my Pixel 3 XL using Tapatalk
Click to expand...
Click to collapse
You might check to see if the P3 is storing them in a different path than the P2 or other phones. My money says that your picker is simply pointed somewhere the files you need are not. The only other thing to consider is if your picker is looking for a specific file type, a type the target files no longer match. Those are two problems most often associated with the symptoms you are describing. Sorry I can't help further -- still don't have my new phone.

wtharp2 said:
You might check to see if the P3 is storing them in a different path than the P2 or other phones. My money says that your picker is simply pointed somewhere the files you need are not. The only other thing to consider is if your picker is looking for a specific file type, a type the target files no longer match. Those are two problems most often associated with the symptoms you are describing. Sorry I can't help further -- still don't have my new phone.
Click to expand...
Click to collapse
It's not a file picker that comes up if I open Android Settings > Security > Advanced > Encryption & Credentials > User Credentials I can see the imported certificate there but when the dialog comes up in strongswan it says no certificates. There is no way to browse for a file these are certificates that have already been imported into the certificate store on Android. With the OpenVPN app you are able to browse for a certificate but the strongswan app is different it uses the built in certificate store to access them. I am thinking it might be because of an unlocked boot loader my old also Android had a unlocked boot loader but the new Pixel has the Titan M and there are also probably security changes in the new Android 9 or maybe the strongswan app just needs to be updated. But I ended up just using less secure username/password auth instead of certificates for now.

Same issue with my pixel 3. Im guessing ovpn works because certs are embedded in the ovpn config file. My ipsec p12 cert is installed, but strongswan can't read it.
I'm also unable to log into Express VPN. Express works on my old pixel 2 and other devices. As others mentioned I'm guessing it's related to the TitanM protection of certificates and the apps not currently supporting it. Hopefully soon enough.

Digging into my ExpressVPN issue I touched on above, its related to a premature 7.x release - currently in the play store. If you downgrade to 6.8 Express VPN works fine on the Pixel3

Related

WP7 Issues and reporting to MS?

How would anyone tell MS of an issue with WP7?
I found a issue that would stop me from using WP7:
If your Exchange Active Sync User ID contains a space, you cannot type in the space to complete your login info!!!
I cannot use this platform with my own exchange server or my companies Exchange server.
Currently WM 6.5 and older did not stop the use of a space in the User ID.
Do you have a developer device? In that case I'd get in touch with those who sent it to you.
On a side note, are you running your own exchange server? Do you use SSL on it? If so, are you using a self-signed certificate on it? Does it work? WM was very bad at it - it would just throw an error and you'd have to install the certificate manually. WP7 won't allow users to install certs, so unless they corrected this Exchange would be a no-go in these cases.
vangrieg said:
Do you have a developer device? In that case I'd get in touch with those who sent it to you.
Click to expand...
Click to collapse
Even the Emulator has the same problem.
vangrieg said:
On a side note, are you running your own exchange server? Do you use SSL on it? If so, are you using a self-signed certificate on it? Does it work? WM was very bad at it - it would just throw an error and you'd have to install the certificate manually. WP7 won't allow users to install certs, so unless they corrected this Exchange would be a no-go in these cases.
Click to expand...
Click to collapse
Running GoDaddy SSL's on both Exchange servers. I can access Exchange(EAS) when the User ID has no space.
Well, the emulator isn't indicative of the real device behavior, it has tons of bugs and I think it doesn't even have mail - you'll need to unlock it for that. MS certainly won't comment on the problems you got this way.
Re GoDaddy - what about the certificate? Is it from Verisign or is it self-signed? When you go to the web interface, does the browser warn you about certificate problems at first?
vangrieg said:
Well, the emulator isn't indicative of the real device behavior, it has tons of bugs and I think it doesn't even have mail - you'll need to unlock it for that. MS certainly won't comment on the problems you got this way.
Re GoDaddy - what about the certificate? Is it from Verisign or is it self-signed? When you go to the web interface, does the browser warn you about certificate problems at first?
Click to expand...
Click to collapse
The emulator/dev has email with EAS. It does work with a (no-space) user id. From Verisign. Browser does not warn of problem. GoDaddy SSL works for any device with the EAS feature (Palm devices (WebOS or WM 6.1), iPhone, iPad, Andriod, Any other WM 6.5 or lower device)
Can anyone with a developer device confirm the problem as well?
The emulator has no ability to add accounts, not even the unlocked one??? It sounds like you have access to the updated bits that the rest of us don't. Maybe you could share?
But at any rate, you should be reporting/asking these sorts of things on the connect site at http://connect.microsoft.com/windowsphone
You're the first person I've seen post on here that has a device so consider yourself fortunate
RustyGrom said:
The emulator has no ability to add accounts, not even the unlocked one??? It sounds like you have access to the updated bits that the rest of us don't. Maybe you could share?
But at any rate, you should be reporting/asking these sorts of things on the connect site at http://connect.microsoft.com/windowsphone
You're the first person I've seen post on here that has a device so consider yourself fortunate
Click to expand...
Click to collapse
I pulled the unlocked emulator from this site. I think it was sometime in June.
Pdiminico said:
I pulled the unlocked emulator from this site. I think it was sometime in June.
Click to expand...
Click to collapse
That one doesn't support syncing to exchange, or any other accounts, at all... at least not that I'm aware of?
Sorry, you are correct. Just tried the emulator version and it never syncs up. The setup does complete but, never reachs EAS.
EAS - WP7 User Name with Space Issue
This is still an issue with RTM devices. Here is a thread on the MS forum:
http://social.answers.microsoft.com...f96-3037-4f57-ac6a-83bc030aeec6?prof=required
The 7.0.7355.0 build still has the same issue.
vangrieg said:
Do you have a developer device? In that case I'd get in touch with those who sent it to you.
On a side note, are you running your own exchange server? Do you use SSL on it? If so, are you using a self-signed certificate on it? Does it work? WM was very bad at it - it would just throw an error and you'd have to install the certificate manually. WP7 won't allow users to install certs, so unless they corrected this Exchange would be a no-go in these cases.
Click to expand...
Click to collapse
to install self-signed certificates simply email them to yourself and open the attachments on the phone. This is how my school installed self-signed certificates for their mail server so I could get my school emails straight to my phone.

[XAP] [Source] IDswitch

Just picked up a request from the DEV IDEA POOL
danchar4 said:
I have a very simple app request to target unlocked phones. Basically a one button switch between primary LiveID accounts based on sensboston's work: http://forum.xda-developers.com/showthread.php?t=1335240
1. Launch app
2. app asks for email address
3. user types in email address or selects email from list of last-used addresses
4. app asks "Are you sure?" with suitable warning
5. app writes selected email address to following regkeys:
Code:
[HKCU\Software\Microsoft\ActiveSync\Partners\{B2830118-7BC6-4A74-8C9A-3D8B9CEF88E0}]
"Email"[email protected]
"User"[email protected]
[HKCU\Software\Microsoft\IdentityCRL\Environment\Production]
"DefaultID"[email protected]
6. app automatically reboots phone
Simple enough, right?
Click to expand...
Click to collapse
Here it is!
Because I made no test on myself please give me feedback if the registry values get applied
ne0cr0n, unfortunately, "my" method has some important cons (you should list 'em) - after that change you'll be not able to upload pictures to SkyDrive, also some accounts like Twitter will be non-functional I've tried to find some workaround but without success...
sensboston said:
ne0cr0n, unfortunately, "my" method has some important cons (you should list 'em) - after that change you'll be not able to upload pictures to SkyDrive, also some accounts like Twitter will be non-functional I've tried to find some workaround but without success...
Click to expand...
Click to collapse
but you can revert it back, right?
The new LiveID could be associated to a different market zone, which you could use to buy some apps with your correct credit card infos, then revert back to your main LiveID, and regain all regular functionalities like auto uploads to skydrive, twitter integration, etc.
Am I right?
http://forum.xda-developers.com/showthread.php?p=25500576#post25500576
kevyn82 said:
Am I right?
Click to expand...
Click to collapse
I'm so sorry but I can't confirm - just never tested this way. I've researched that hack 'cause damn Verizon blocked and deleted my very-very old email ( @verizon.net) what I've used during 11 years, and also as my LiveID email.
Wow dude thanks for writing the app so quickly. What is the etiquette for sharing apps? Are you supposed to share source code too? I don't want to be rude by asking you for the source
I don't use twitter, but I was able to upload a photo to skydrive just fine after swapping LiveID's. Steps:
reset my phone with my own liveID
download bunch of apps from appstore
dev unlock/interop, etc
manually edit registry and change to my wife's LiveID (she has zunepass on her ID which is why I wanted to swap to hers)
reboot phone
take picture
upload to skydrive
login to skydrive app and see that picture is there on *my* skydrive account, not my wife's
So skydrive integration with picture hub/camera obviously stored my liveID and credentials somewhere other than the regkeys I edited. Most likely Twitter is the same way.
I presume the credential data is stored encrypted in some weird GUID key with no obvious pattern. Too bad there is no regmon/procmon tool like on Big windows, otherwise I could figure it out in a few seconds... Although somehow I doubt that you can use provxml to import export those keys to re-write encrypted credentials. That would be a pretty bad exploit.
So I ran IDSwitch and it gave me the error "no root access". Hmm. So I went into WP7 Root tools and switched on "trusted" for the app.
So a pre-requisite for running the app is to have WP7 root tools? I'm kinda new at this so perhaps that is an assumption of any app that is going to do interop/native stuff? In order to get it to work you have to set it to "trusted"?
Anyway the app let me type in the new liveID and rebooted the phone, but upon booting up, it appears that the old LiveID is still there in the 3 registry settings. I ran it a second time and the app remembered the address I typed in so thats cool. BUt again after rebooting, it failed to modify the registry entries.
Can you post up a debug version with some breakpoints or console spew? I could try to attach a debugger on my end (not sure I know how to do that, but I can try to figure it out)
sensboston said:
ne0cr0n, unfortunately, "my" method has some important cons (you should list 'em) - after that change you'll be not able to upload pictures to SkyDrive, also some accounts like Twitter will be non-functional I've tried to find some workaround but without success...
Click to expand...
Click to collapse
Thanks for the info. I will add a warning and how to use message when launching the app for the first time.
danchar4 said:
Wow dude thanks for writing the app so quickly. What is the etiquette for sharing apps? Are you supposed to share source code too? I don't want to be rude by asking you for the source
Click to expand...
Click to collapse
I will do that, but the code is kind of ugly xD
danchar4 said:
Can you post up a debug version with some breakpoints or console spew? I could try to attach a debugger on my end (not sure I know how to do that, but I can try to figure it out)
Click to expand...
Click to collapse
I uploaded the source. Should make things much easier
I tried it on Samsung Focus Mango updated with WP7 Root Tools. Even though it reboots but it does not change the primary id. After reboot when I open the app again, it shows the primary id as the old id and not the id to which I wanted to switch.
Found the bug. I used the content from to current ID textbox not the new ID textbox -.-
I guess nobody tested it or I am getting a different result. Here is what happens :
1. ID A which is primary ID in my Account with No CC.
2. I switch from ID A to ID B. ID B does not have a CC.
3. When I access Marketplace, The region used is according to ID B.
4. Next I Move to buy an App and it asks me to signin with ID A instead of ID B.
5. For free apps, I can easily download it without going to login page ever which is pretty obvious.
Today Evening I will try out to buy app by signing with ID A when it sends me to login page of ID B by first sigining out and then signing again.
Few things I noticed :
1. Facebook, Twitter, Skydrive all was working.
2. It takes a while for the OS to realize the ID is new and hence may take around a minute or more to change marketplace.
3. I downloaded a free app with the swtched id and used it without any issues.
4. I even updated a free App which was bought using the primary ID with the new ID.
5. Email ID A stopped working. It did not show any email nor it gave an error of wrong password which is pretty odd.
My Thoughts :
1. This will be useful for parents who have kids carrying a Windows Phone who do not want to give them credit card access but using this they might buy apps for kids.
2. I still need to test but this will work for IDs which are in same region. For example I have a US id to which if I want to add a CC, the country is fixed and hence I cannot use an Indian CC with it.
wpxbox said:
1. Facebook, Twitter, Skydrive all was working.
Click to expand...
Click to collapse
Try to share pictures from camera to SkyDrive...
wpxbox said:
2. It takes a while for the OS to realize the ID is new and hence may take around a minute or more to change marketplace.
Click to expand...
Click to collapse
Try to reboot after LiveID change.
Just tried it out and it worked. The file was uploaded to Skydrive account of the primary Live id.
Wait... What "primary Live id" and what are you tried? New one or the old one? Have you tried:
- change LiveID to new one
- reboot handsets
- go to pictures hub and share picture to the SkyDrive ?
When I said Primary Live Id I mean the ID with which the phone was configured.
1.Phone configured with ID A
2. Change to ID B using the app, Reboot
3. Upload to Skydrive and it was stored in ID A Skydrive Account.
He-he, it's exactly what I mean by "not working". For example if you change first (original) LiveID email to the new one (as I had to do), you'll be not able to upload pictures to SkyDrive, and can't login to the Twitter account. So please do not confuse people.
sensboston said:
He-he, it's exactly what I mean by "not working". For example if you change first (original) LiveID email to the new one (as I had to do), you'll be not able to upload pictures to SkyDrive, and can't login to the Twitter account. So please do not confuse people.
Click to expand...
Click to collapse
Oh Ok I understand now what you said by breaking. The new ID cannot be used for Skydrive or Facebook or Twitter etc in short, anything connected with old Live id.
Basically its not a true switcher and can only be used to buy apps with the new account connected with CC
Hi all
The whole idea of this app is JUST to let you assign an account that will give u the ability to buy apps from marketplace using CC, if your original ID have problem with adding CC information. So it is not to change you ID permanently. You can read my thread if u want. Anyway thanks op for making the app.
I can confirm this works. Just bought an app using a different account and it works. Editing a video on this so will be up in couple of hours.
As promised, Here the link to the video we made http://youtu.be/2H7dr7ZzJZs

Adaway issues with HTC M8

Hi Guys
I have noticed since upgrading to the latest firmware (4.4.4 build number 3.28.401.7) that adaway is creating issues with other apps. I frequently get error messages stating "unfortunately google service has closed ,,,,"
I could confirm this by disabling adaway then everything is fine
however I prefer to find a solution to this, maybe someone could recommend a better ad blocking app?
many thanks
Unfortunately adaway is the best but there are other that work well if you have xposed framework look for min min guard it works pretty well
spinninbsod said:
Unfortunately adaway is the best but there are other that work well if you have xposed framework look for min min guard it works pretty well
Click to expand...
Click to collapse
i did that and it didn't block ads on the app i was testing
No issues with Adaway and 4.4.4 for me.
Do you have any other issues with Google services? There is an issue with the US carrier AT&T, where Google services will sometimes fail on LTE with Euro based ROMs. It seems to be a problem with the Euro build.prop not playing well with AT&T's network.
Might have nothing to do with your issue, but might be worth trying another ROM at least.
redpoint73 said:
No issues with Adaway and 4.4.4 for me.
Do you have any other issues with Google services? There is an issue with the US carrier AT&T, where Google services will sometimes fail on LTE with Euro based ROMs. It seems to be a problem with the Euro build.prop not playing well with AT&T's network.
Might have nothing to do with your issue, but might be worth trying another ROM at least.
Click to expand...
Click to collapse
I noticed it only with latest firmware+ROM, so i cannot be sure if it's the new firmware or the new rom
But Adaway is working fine on most apps, except one or two, where the ads are NOT appearing but the app is crashing
I often get the known message "unfortunately google service has closed..." but i also get a similar message stating the name of the app needs to be closed.
Is there a way to allow ads on certain apps through adaway? Maybe i can still use Adway but allow ads to show for apps that are crashing?
thanks
krihoum said:
Is there a way to allow ads on certain apps through adaway? Maybe i can still use Adway but allow ads to show for apps that are crashing?
Click to expand...
Click to collapse
You might try the Whitelist function in Adaway. Press Menu>Your Lists, and there you will see a tab for whitelists. Never used this myself, just know it exists. But it seems like it might do what you want.
redpoint73 said:
You might try the Whitelist function in Adaway. Press Menu>Your Lists, and there you will see a tab for whitelists. Never used this myself, just know it exists. But it seems like it might do what you want.
Click to expand...
Click to collapse
well i can see it but when i want to add (using the + BUTTON) it asks me for a host name rather than an application name
i am not sure how to do that
krihoum said:
well i can see it but when i want to add (using the + BUTTON) it asks me for a host name rather than an application name
i am not sure how to do that
Click to expand...
Click to collapse
Ahh, so the white list is for hosts, not apps.
Go to Menu>Open hosts file. You will need a text editor of some sort installed (I have ES File Explorer installed, and the ES Note Editor opened the file fine - I'm guessing any text editor app will do). You'll find a large list of hosts. Try to find Google on there, and cut and paste the host name to your whitelist.
Again, I've never used the whitelist function before. So I'm just guessing how this works, and that it will help your issue.
redpoint73 said:
Ahh, so the white list is for hosts, not apps.
Go to Menu>Open hosts file. You will need a text editor of some sort installed (I have ES File Explorer installed, and the ES Note Editor opened the file fine - I'm guessing any text editor app will do). You'll find a large list of hosts. Try to find Google on there, and cut and paste the host name to your whitelist.
Again, I've never used the whitelist function before. So I'm just guessing how this works, and that it will help your issue.
Click to expand...
Click to collapse
thanks a lot
it helps me understand how Adaway works but unfortunately nothing with the word GOOGLE in the long list
however i am white listing some french sites which might be the cause of the french app to crash (its an app that lists programme TV)
I used to use AdAway ages ago, but moved onto AdBlock quite a while ago. I don't know if it's intrinsically better than AdBlock, but AdBlock is working fine for me.
AdBlock Plus
It can work without root, but is better with root, which I guess you have.
Adaway simply modifies the local HOSTS file, causing all traffic to ad servers (as defined by the subscription servers) to be redirected to local host. Since there isn't a web server running on the phone by default, the requests just fall on the floor and time out. Some (poorly written) apps get grumbly when they can't contact a web server, so there is an option under preferences for running one on localhost. I'm not clear what it "serves", though.
Personally, unless the app needs network access to function, I find that simply blocking them with iptables (I use Droidwall) is sufficient.
jshamlet said:
Adaway simply modifies the local HOSTS file, causing all traffic to ad servers (as defined by the subscription servers) to be redirected to local host. Since there isn't a web server running on the phone by default, the requests just fall on the floor and time out. Some (poorly written) apps get grumbly when they can't contact a web server, so there is an option under preferences for running one on localhost. I'm not clear what it "serves", though.
Personally, unless the app needs network access to function, I find that simply blocking them with iptables (I use Droidwall) is sufficient.
Click to expand...
Click to collapse
wow i have to admit that this did the job and was properly tested! I run the webserver and the application works, i disable it and the application crashes
The only small issue i have now is that the webserver doesn't run automatically even when i select "start at boot" but that is not a huge problem
I guess i can clear my whitelist now, since the webserver is dealing with this
many thanks Again

Google Family link set-up?

I installed Google play on my daughter's kf and now I'm trying to set up my Google family link. The problem is that I can't figure out how to add her Google account to the kid, since she is under 13. Her child account is limited to what apps she can use, and all the apps I can think of where I might be able to add her (like Gmail), she doesn't have the permission to add herself.
Is there any way to add a Google child (under 13) user account?
Aoibhell said:
I installed Google play on my daughter's kf and now I'm trying to set up my Google family link. The problem is that I can't figure out how to add her Google account to the kid, since she is under 13. Her child account is limited to what apps she can use, and all the apps I can think of where I might be able to add her (like Gmail), she doesn't have the permission to add herself.
Is there any way to add a Google child (under 13) user account?
Click to expand...
Click to collapse
What would you have them using to device for?
rjmxtech said:
What would you have them using to device for?
Click to expand...
Click to collapse
Just some school & game apps, youtube, etc. I want it mainly so I can better control what they see on youtube...
you have to create the account from the parent's Family Link app on your phone.
Were you able to figure this out? I'm having the same problems. At first it wouldn't install on the Kindle Fire because it was connecting to her father's g-mail account so I reset to factory settings. Now it's saying I can't install using her gmail address and password.
We're you able to figure this out? I am stuck because I believe it needs the Google settings app rather than the fire version. I am getting the error "this profile manager is required for kids under 13". Rather annoyed by every aspect of the fire tablet and this seems to be the final straw.
Curious to know
I ma curious to know if you ever figured this out? I just jumped down the rabbit hole of the Google Family Link account for my twins but can't seem to figure out how to use it with the Kindles.... Any help you can provide would be so appreciated.
Aoibhell said:
I installed Google play on my daughter's kf and now I'm trying to set up my Google family link. The problem is that I can't figure out how to add her Google account to the kid, since she is under 13. Her child account is limited to what apps she can use, and all the apps I can think of where I might be able to add her (like Gmail), she doesn't have the permission to add herself.
Is there any way to add a Google child (under 13) user account?
Click to expand...
Click to collapse
I'm working on this one as well. Keep getting stuck in a loop, I try to log in my sons account, it wants to install Family Link Manager, installed Family Link apk, it leads into the same thing, saying it needs to install itself..I'm just looking to do a custom rom at this point I guess. Should probably just let him use the Freeplay thing from Amazon but paying for the whole damn Google Play Premium One whatever family plan...
I have been playing with this and got a little farther. I have an old SGS5 and got my kid set up there. Then I extracted the Family Link Manager APK (different than the Family Link APK).
Then:
Installed the four APKs needed to install Google Play Store: https://forum.xda-developers.com/amazon-fire/general/how-to-install-google-play-store-fire-t3486603
Installed the Family Link Manager APK. I posted it here: https://drive.google.com/open?id=1eVmTXa1KqvZ_MV9tmYaZYYsd-2E1351C
Launched Google Play Store
Signed in as my child
It asks which parent is setting up the device. I choose myself.
Got a warning about Android 5 and not be able to control an apps permissions after approving.
Then, a message that Family Link Manager needs to be installed. I already installed it at this point.
Checking Info...
It asks for a name for the Device
Asks which installed apps should be blocked
Then I get a screen that says, "Next, you'll activate Family Link Manager, which helps parents..."
After clicking next, I get a screen that says, "This profile manager is required for Google Accounts managed with Family Link." The only option is to click, "GOT IT." I then end up on the previous, "Next, you'll activate..." screen. If I click NEXT there, I see the same, "This profile manager is required..." screen. The process is now stuck in this loop. Does anyone have any idea what may be preventing the process from accessing the profile manager? Is it talking about the default Android profile manager? Has Amazon replaced that with their own?
One other thing: I cannot install the Family Link APK. It looks like it is going to, but then says "App not installed". Does anyone know if this is my whole problem? I have four kids, each with a Fire tablet. I am going to try this process on another one and see if I get closer.
Found a workaround for anyone interested. Create a new gmail account with a date of birth older than 13 (if in the UK, may need to be older for other countries). Invite this new account to join your 'family'. Install Google Play on the Kindle Fire (which can be done without root), install Google Play Music, add the new account to the Music app and job done! [EDIT just noticed the post above has links for installing the Play services]
Only downside I've found is that if more than 1 child then they are 'sharing' the account and any playlists they create are also shared.
This is what I've done for now as well, just was hoping to take advantage of the schmancy new parental controls and such via the family link thing. Hope it works for Chromebooks now that they are the new Android tablets
iain2510 said:
Found a workaround for anyone interested. Create a new gmail account with a date of birth older than 13 (if in the UK, may need to be older for other countries). Invite this new account to join your 'family'. Install Google Play on the Kindle Fire (which can be done without root), install Google Play Music, add the new account to the Music app and job done! [EDIT just noticed the post above has links for installing the Play services]
Only downside I've found is that if more than 1 child then they are 'sharing' the account and any playlists they create are also shared.
Click to expand...
Click to collapse
Sent from my Pixel XL using Tapatalk
Xeroid said:
After clicking next, I get a screen that says, "This profile manager is required for Google Accounts managed with Family Link." The only option is to click, "GOT IT." I then end up on the previous, "Next, you'll activate..." screen. If I click NEXT there, I see the same, "This profile manager is required..." screen. The process is now stuck in this loop. Does anyone have any idea what may be preventing the process from accessing the profile manager? Is it talking about the default Android profile manager? Has Amazon replaced that with their own?
Click to expand...
Click to collapse
exactly the same problem with Mi Pad 4 - Oreo 8.1...
unable to proceed & get past that screen...
do you find the solution?
I'm in the exact same loop. Did you ever figure it out?
Xeroid said:
I have been playing with this and got a little farther. I have an old SGS5 and got my kid set up there. Then I extracted the Family Link Manager APK (different than the Family Link APK).
Then:
Installed the four APKs needed to install Google Play Store: https://forum.xda-developers.com/amazon-fire/general/how-to-install-google-play-store-fire-t3486603
Installed the Family Link Manager APK. I posted it here: https://drive.google.com/open?id=1eVmTXa1KqvZ_MV9tmYaZYYsd-2E1351C
Launched Google Play Store
Signed in as my child
It asks which parent is setting up the device. I choose myself.
Got a warning about Android 5 and not be able to control an apps permissions after approving.
Then, a message that Family Link Manager needs to be installed. I already installed it at this point.
Checking Info...
It asks for a name for the Device
Asks which installed apps should be blocked
Then I get a screen that says, "Next, you'll activate Family Link Manager, which helps parents..."
After clicking next, I get a screen that says, "This profile manager is required for Google Accounts managed with Family Link." The only option is to click, "GOT IT." I then end up on the previous, "Next, you'll activate..." screen. If I click NEXT there, I see the same, "This profile manager is required..." screen. The process is now stuck in this loop. Does anyone have any idea what may be preventing the process from accessing the profile manager? Is it talking about the default Android profile manager? Has Amazon replaced that with their own?
One other thing: I cannot install the Family Link APK. It looks like it is going to, but then says "App not installed". Does anyone know if this is my whole problem? I have four kids, each with a Fire tablet. I am going to try this process on another one and see if I get closer.
Click to expand...
Click to collapse
---------- Post added at 12:50 AM ---------- Previous post was at 12:47 AM ----------
I'm in the exact same loop.. Did you ever figure it out??
Xeroid said:
I have been playing with this and got a little farther. I have an old SGS5 and got my kid set up there. Then I extracted the Family Link Manager APK (different than the Family Link APK).
Then:
Installed the four APKs needed to install Google Play Store: https://forum.xda-developers.com/amazon-fire/general/how-to-install-google-play-store-fire-t3486603
Installed the Family Link Manager APK. I posted it here: https://drive.google.com/open?id=1eVmTXa1KqvZ_MV9tmYaZYYsd-2E1351C
Launched Google Play Store
Signed in as my child
It asks which parent is setting up the device. I choose myself.
Got a warning about Android 5 and not be able to control an apps permissions after approving.
Then, a message that Family Link Manager needs to be installed. I already installed it at this point.
Checking Info...
It asks for a name for the Device
Asks which installed apps should be blocked
Then I get a screen that says, "Next, you'll activate Family Link Manager, which helps parents..."
After clicking next, I get a screen that says, "This profile manager is required for Google Accounts managed with Family Link." The only option is to click, "GOT IT." I then end up on the previous, "Next, you'll activate..." screen. If I click NEXT there, I see the same, "This profile manager is required..." screen. The process is now stuck in this loop. Does anyone have any idea what may be preventing the process from accessing the profile manager? Is it talking about the default Android profile manager? Has Amazon replaced that with their own?
One other thing: I cannot install the Family Link APK. It looks like it is going to, but then says "App not installed". Does anyone know if this is my whole problem? I have four kids, each with a Fire tablet. I am going to try this process on another one and see if I get closer.
Click to expand...
Click to collapse
so close...
i found a few useful nuggets with `adb logcat` . Unfortunately, they exited my scroll back buffer before i could write them down.
the initial loop (downloading the app)
it doesn't have permission to write to storage; looks like its downloading and discarding
... it should be like "[email protected]%# where'd my download go?"
thanks for the apk - sideloading gets us moving on
the next loop (activate manager) ... more permission issues
this time like "denied granting because this is not a system app".
i thought its trying to become a device admin -- so i manually enabled it in the settings > device admin ... no change
would someone (smarter than i) please point out which permissions & how to grant them, or tell me if i'm way off base ? alternately, with root - we can make this a system app, so it is not blocked from what it needs ?
FWIW: i also managed to use my sons account for ~7min ... opened the store - accepted T&Cs -- updated installed apps, grabbed a few from the family library & request a few new apps ... then i got a notification (on parent and child devices) "the account was removed because setup was incomplete"
I have been trying to get this working as well. From the looks of it, it is down to a missing settings page. I guess we could sideload the settings.apk from a AOSP device and see if that gives us access to the required pages to enable access for the app? Would that work?
leaskovski said:
I have been trying to get this working as well. From the looks of it, it is down to a missing settings page. I guess we could sideload the settings.apk from a AOSP device and see if that gives us access to the required pages to enable access for the app? Would that work?
Click to expand...
Click to collapse
I tried installing a settings.apk from apk-mirror but the name conflict with the one already installed
Stuck at the same place
Hi, did you managed to figure this out because I'm stuck at the same place as you!
Xeroid said:
I have been playing with this and got a little farther. I have an old SGS5 and got my kid set up there. Then I extracted the Family Link Manager APK (different than the Family Link APK).
Then:
Installed the four APKs needed to install Google Play Store: https://forum.xda-developers.com/amazon-fire/general/how-to-install-google-play-store-fire-t3486603
Installed the Family Link Manager APK. I posted it here: https://drive.google.com/open?id=1eVmTXa1KqvZ_MV9tmYaZYYsd-2E1351C
Launched Google Play Store
Signed in as my child
It asks which parent is setting up the device. I choose myself.
Got a warning about Android 5 and not be able to control an apps permissions after approving.
Then, a message that Family Link Manager needs to be installed. I already installed it at this point.
Checking Info...
It asks for a name for the Device
Asks which installed apps should be blocked
Then I get a screen that says, "Next, you'll activate Family Link Manager, which helps parents..."
After clicking next, I get a screen that says, "This profile manager is required for Google Accounts managed with Family Link." The only option is to click, "GOT IT." I then end up on the previous, "Next, you'll activate..." screen. If I click NEXT there, I see the same, "This profile manager is required..." screen. The process is now stuck in this loop. Does anyone have any idea what may be preventing the process from accessing the profile manager? Is it talking about the default Android profile manager? Has Amazon replaced that with their own?
One other thing: I cannot install the Family Link APK. It looks like it is going to, but then says "App not installed". Does anyone know if this is my whole problem? I have four kids, each with a Fire tablet. I am going to try this process on another one and see if I get closer.
Click to expand...
Click to collapse
So I went through the process of installing on a android VM, and it looks like this might be down to profiles. It looks like there are multiple profiles on the device after setup.
It seems to work until some timeout triggers and the account gets removed, but I'm able to install apps and have the approval come through to my device.
I haven't been able to break out of the loop. If I manually installed Family Link then it would prompt for which account to add. Selecting the child's account would stay in the loop. Adding my own would break out of it and I'd be able to access to Play Store but only as myself. The top left selector allowed my to choose the child account but would just put me back into the loop. Eventually I cleared away the Family Link stuff in the hope that a fresh attempt would work but once I was the sole account in the Play Store, I found it impossible to break out of that situation, even after deleting data from the various Google apps. I reckon removing either the Android user or the Google account record from the "Users & accounts" section in Settings would allow me to proceed but bloody FireOS hides this in favour of their own hobbled multi-user stuff.
I have made a discovery though. I found that the Humble Bundle app is also broken and despite the problem being very different, I believe the cause is the same as you get the exact same Download Provider permissions error in logcat. This post explains that it is down to an incompatible difference in FireOS compared to stock. I tried to replace DownloadProvider and DownloadProviderUi with APKs from LineageOS 12.1 but got INSTALL_FAILED_UPDATE_INCOMPATIBLE. I then "uninstalled" the existing apps using the same trick that the debloater does but then I got into a real mess as the earlier error remained and I wasn't able to restore the old apps either, even with the APKs, as they have separate ODEX files. The app isn't even really uninstalled as it is a system app and I do not have root but it seems sufficiently broken that I will have to wipe and start again. I still wonder if this is the right direction for solving this problem though. Any bright ideas?

LineageOS 14.1 - How to enable Email app for restricted user (for Exchange)?

Hi,
finally I found LineageOS as a suitable OS for the Moto G4 Plus in a work environment, where employees get an restricted user profile. In my test, everything seems to work fine up to now. But the problem is now that I cannot enable the "Email"App for the restricted profiles to connect to the Exchangeserver 2010.
Since k9-Mail does not work with Exchange, it could not work as a replacement.
I read, the reason is that a google account cannot be used in restricted accounts. That is fine. But I don't want to use a google but an exchange account. Does anyone has an idea how to solve this?
risaer said:
Hi, finally I found LineageOS as a suitable OS for the Moto G4 Plus in a work environment, where employees get an restricted user profile. In my test, everything seems to work fine up to now...
Click to expand...
Click to collapse
I don't have this device but, your best bet is to post this question within the following Official LineageOS thread for your device.
https://forum.xda-developers.com/showthread.php?t=3522101
If all else fails, and you don't receive any responses from the above thread, you can always try to obtain some member guidance within the following Q&A thread that's specific to your device.
https://forum.xda-developers.com/showthread.php?t=3526598
Good Luck!
~~~~~~~~~~~~~~~
I DO NOT provide support via PM unless asked/requested by myself. PLEASE keep it in the threads where everyone can share.
risaer said:
Hi,
finally I found LineageOS as a suitable OS for the Moto G4 Plus in a work environment, where employees get an restricted user profile. In my test, everything seems to work fine up to now. But the problem is now that I cannot enable the "Email"App for the restricted profiles to connect to the Exchangeserver 2010.
Since k9-Mail does not work with Exchange, it could not work as a replacement.
I read, the reason is that a google account cannot be used in restricted accounts. That is fine. But I don't want to use a google but an exchange account. Does anyone has an idea how to solve this?
Click to expand...
Click to collapse
So you have gapps installed. Do you really need it in this setup? Without gapps you get the default aosp mail. No Google account on the phone.
Hmm. I suppose it is not a device specific problem, but a general one.
Maybe even a general Nougat one? <-- UPDATE: Stock seems not to have the selection list **
And no. No GAPPs. It is the modified Version with MicroG. Email app is com.android.email (Version 7.1.2). I will try the unmodified version also.
If I go to the user page where I can allow, which apps can be used, more or less every app is listed but (UKW-Radio, Recorder AND E-Mail).
I also tried to move the Email from /system/app to /data/app which only caused force closes.
Maybe another reason could be that by entering exchange data you will be forced to add it as device administrator so it is not in the list?
Any help is apreciated.
I tested several mail-apps now, but either they do not support the Exchange server or they send a lot of data to other obscure servers so I have not found any alternative. I also installed the "Gmail" app (which is also usable with an exchange account) but this also does not appear in the share list and I absolutely do not understand why.
risaer said:
I tested several mail-apps now, but either they do not support the Exchange server or they send a lot of data to other obscure servers so I have not found any alternative. I also installed the "Gmail" app (which is also usable with an exchange account) but this also does not appear in the share list and I absolutely do not understand why.
Click to expand...
Click to collapse
Looks like you should install something from Microsoft.
kurtn said:
Looks like you should install something from Microsoft.
Click to expand...
Click to collapse
Sorry, if I do not understand if there is a hidden meaning behind this. If this is a serious tip I do not know what app? The android outlook app (which really looks neat) happily transfers AND STORES your account credentials and the content on their servers (see e.g. https://www.pcworld.com/article/288...s-new-outlook-apps-over-privacy-concerns.html , article is from 2015, but I suppose it is still valid. Some time ago I checked it and found out that there is no connection to my but only to some foreign servers). That is not only critical in my sense of privacy but also illegal in the sense of the GPDR. Funny that some people advertise certified Microsoft cloud products for the GPDR.
Nevertheless: Even if I would not use an MS server this would not solve the problem that I cannot select Email or GMail as an allowed app for an restricted user. I also tried the unmodified Lineageos but it has the same issue.
I really do not understand how all the companies work with android phones in working environments. All this fiddeling around just do protect the phones by encrypting the content in case of loss, to give the user restricted access so that they cannot install apps that must not be on the device and to care about privacy. Like on a usual work pc. Do they all use I-Phones?
possible Explaination (?)
(arrg. Always copy your text before you try to send your post) short summary of what I've written:
according to these links my understanding like this:
https://support.google.com/nexus/answer/3175031?hl=en and https://android.stackexchange.com/q...restricted-accounts-on-phone-running-lollipop
"Normal user" and "restricted user" is not equivalent to windows "admin" and "restricted user". "restricted users" are not allowed to use accounts so you need to use "normal user" which has some rights less than the owner. All allowed apps has to be installed again (but are just links, no duplicates).
The store and some other apps can be locked with a pattern.
I will test this. If you have further ideas or a suiable management solution for more than 10 phones to hesitate to write.

Categories

Resources