Quantcast
Channel: Active Directory Rights Management Service(On premise) forum
Viewing all articles
Browse latest Browse all 1025

How does Outlook 2010 consume rights managed emails?

$
0
0

I am a student trying to develop an AD RMS publishing application with MS Outlook 2010 as the consuming application.

I have followed the steps from "Rights Management for E-Mail Messages" (http://msdn.microsoft.com/en-us/library/aa767786(v=vs.85).aspx) in creating a simple compound file message with no attachments.

I have also referred to "Data Spaces Structure for Rights-Managed Content" (http://msdn.microsoft.com/en-us/library/aa767782(v=vs.85).aspx) in creating the "\006DataSpaces" storage. The structure of rpmsg compound file for my application is as shown below:

Root
  ->"\006DataSpaces"
           -> Version
           -> DataSpaceMap
           -> DataSpaceInfo
                  -> "\009DRMDataSpace"
           -> TransformInfo
                  -> "\009DRMTransform"
                  -> "\006Primary"
                  -> EUL-GUID
  -> "\009DRMContent"
I have included an entry within the DataSpaceMap stream that maps the stream "\009DRMDataSpace" to the stream "\009DRMContent".

Within the "\006Primary" stream, I have included a transform "Microsoft.Metadata.DRMTransform" and the signed issuance license.

The "\009DRMContent" stream contains the encrypted compound file message created previously.

The encryption of the compound file message was a result of passing  the message (e.g. "test.msg") into the AD RMS SDK method DRMEncrypt.

Referencing Creating a Compound File and Adding Protected Content (http://msdn.microsoft.com/en-us/library/cc530461(v=vs.85).aspx), I constructed the "\009DRMContent" stream with the first 8 bytes of stream containing the length of encrypted msg file in bytes and the rest containing the encrypted message file stream.

I then created a wrapper email using CDO (Collaboration Data Objects), and delivered the email containing the .rpmsg file to Outlook 2010 (in other words, I was sending the rights managed email to my Oulook email inbox). When Outlook 2010 opens the email, it was able to locate the licensing URL from the signed issuance license and proceed on to ask me for credentials to retrieve the EUL required to consume the rights-managed email. However, after retrieving the EUL license (an EUL license was saved in the license store), the following error occured: "Cannot open this item. You cannot perform this action. Permission to this message is restricted".

A second attempt to try to open the email showed another error message "Cannot open this item. Network problems are preventing this message with restricted permission from being opened. Try again later".

In closing Outlook 2010, a dialog message popped out "The attachments of the message "This is a test rpmsg message." have been changed. Do you want to save changes to this message? Yes/No/Cancel".

I clicked on Yes, then another dialog message popped out "The attachment "message.rpmsg" opened from the message "This is a test rpmsg message." is open or in use by another application. If you continue, your changes to the attachment will be lost. Do you want to continue? Yes/No".

In this case, clicking "Yes", will lose any changes made to the rpmsg attachment while clicking "No", will stop the process of saving the rpmsg attachment.

These most probably means that an EUL license has been cached in the rpmsg attachment as mentioned in section 3.1.4.2.1 of "[MS-OXORMMS]: Rights-Managed E-Mail Object Protocol Specification" (http://msdn.microsoft.com/en-us/library/cc463909(v=exchg.80).aspx), but Outlook 2010 does not seem to allow me to save the newly acquired EUL.

During the creation of the issuance license, I have passed in an argument into hOwner of DRMCreateIssuanceLicense method to set the owner of the issuance license. I have also added "OWNER" rights for myself in the issuance license.

To clarify: I did not do any compression and I did not prefix the rpmsg compoud file with the header "0x76, 0xe8, 0x04, 0x60, 0xc4, 0x11, 0xe3, 0x86".

With reference to "[MS-OXORMMS]: Rights-Managed E-Mail Object Protocol Specification" (http://msdn.microsoft.com/en-us/library/cc463909(v=exchg.80).aspx), I also tried to add streams like "OutlookBodyStreamInfo" and implementation specific details like "1F 32 DE 15 02 00 00 00 02 00 00 00 00 00 00 00" to the stream "RpmsgStorageInfo" in the creation of simple compound message file (.msg). However, I am still unable to open the rights-managed email. How do I proceed from here? Please advice.

There are also many discrepancies from the MS-OXORMMS protocol specifications and "Rights Management for E-Mail Messages" (http://msdn.microsoft.com/en-us/library/aa767786(v=vs.85).aspx). Is compression necessary in the consumption of rights managed email by Outlook 2010? Should the stream "RpmsgStorageInfo" contain implementation specific details like "1F 32 DE 15 02 00 00 00 02 00 00 00 00 00 00 00" or should it be empty? I have also included the owner license within the rpmsg compound file prior to delivery of the rights managed email. Can the EUL (owner license) allow offline consumption of rights managed email? It would be best if anyone can direct me to understand the actual rpmsg format required for Outlook 2010 to consume the rights-managed email. Any suggestions is fine, thanks alot!


Viewing all articles
Browse latest Browse all 1025

Trending Articles