BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 09-11-2009, 03:01 PM   #1 (permalink)
Knows Where the Search Button Is
 
Join Date: Mar 2009
Model: none
PIN: N/A
Carrier: AT&T
Posts: 24
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Blackberry Service account issues

Please Login to Remove!

I try logging into the Blackberry Administrative Service on BES 5.0, and it somehow cannot get authenticated. This has never been an issue, and the BES has been in use for a few months now. My username, password, and domain have not changed from day 1, and I am set to be using active directory credentials.

Just for shits, I went into Active Directory and reset my BESadmin password to the same thing it has always been. I am still having issues authenticating, even after running a gpupdate /force. Is there any backdoor, or other method in, or am I missing something?
Offline  
Old 09-11-2009, 08:43 PM   #2 (permalink)
BlackBerry Genius
 
hdawg's Avatar
 
Join Date: Aug 2006
Model: hdawg
PIN: port3101.org
Carrier: hdawg
Posts: 6,632
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

You ran a Group Policy update command to fix an authentication issue? Totally unrelated.

What do your BAS logs say?
Offline  
Old 09-13-2009, 03:56 AM   #3 (permalink)
BlackBerry Extraordinaire
 
noname's Avatar
 
Join Date: Sep 2005
Location: Congested Islet of "Foreign Talents" (> 45% of workforce) - Singapore.
Model: Z10
OS: 10.0.0
PIN: NUKE(PAP)
Carrier: Singtel
Posts: 1,504
Post Thanks: 6
Thanked 9 Times in 9 Posts
Default

Either one or the other...

Article Title: Unable to log on to BlackBerry Administration Service due to clock time skew
Article Number: KB18177
Link: View Document
BAS-AS Log:
{
{http-<BASName>%2F10.200.26.82-443-1} [com.rim.bes.basplugin.activedirectory.ActiveDirect oryManagerBean] [INFO] [ADAU-1000] {u=SystemUser, t=32681} loginAsLdapUser failed to authenticate LDAP user=besadmin, realm=<Domain>, kdc=<Domain Controller providing KDC services) javax.security.auth.login.LoginException: Clock skew too great (37)
}

Article Title: Unable to administer the BlackBerry Administration Service after using the BlackBerry Server Configuration tabs
Article Number: KB18161
Link: View Document
BAS-AS Log:
{
[WARN] [BBAS-2015] {u=1, uc=-1, o=0, t=150975} _getExternalAuthenticatorId could not find external authenticator identifier - com.rim.bes.bas.usermanager.CouldNotFindExternalAu thenticatorIdException: Message: 'LOGIN ERROR: findExternalAuthenticatorIdLocal failed to login as LDAP user com.rim.bes.bas.pluginmanager.InvalidAuthenticatio nException: Message: 'LOGIN ERROR: loginAsLdapUser exception during authentication com.rim.bes.bas.util.BASCouldNotCompleteRequestRol lbackException: getAuthenticationCredentialsLocal stored password could not be decrypted', nested exception: 'getAuthenticationCredentialsLocal stored password could not be decrypted'', nested exception: 'Message: 'LOGIN ERROR: loginAsLdapUser exception during authentication com.rim.bes.bas.util.BASCouldNotCompleteRequestRol lbackException: getAuthenticationCredentialsLocal stored password could not be decrypted', nested exception: 'getAuthenticationCredentialsLocal stored password could not be decrypted''
}
__________________
Native but 4th class citizen of a nation governed by idiots who import congestions & contention.
Offline  
Old 09-13-2009, 02:41 PM   #4 (permalink)
Knows Where the Search Button Is
 
Join Date: Mar 2009
Model: none
PIN: N/A
Carrier: AT&T
Posts: 24
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

I attempted a login here around 2:39. Here is the event log for about 2 minutes begore the attempt, up to the attempted login.

[30000] (09/13 14:38:03.321):{0x68C} EventLog::ThreadProc: Received notification, processing...
[30000] (09/13 14:38:17.063):{0x68C} EventLog::ThreadProc: Received notification, processing...
[30000] (09/13 14:38:25.358):{0x68C} EventLog::ThreadProc: Received notification, processing...
[30000] (09/13 14:38:42.137):{0x68C} EventLog::ThreadProc: Received notification, processing...
[30000] (09/13 14:38:48.398):{0x68C} EventLog::ThreadProc: Received notification, processing...
[30000] (09/13 14:38:57.210):{0x68C} EventLog::ThreadProc: Received notification, processing...
[30000] (09/13 14:38:57.210):{0x68C} [Alarm::ActivateAlarm] Queuing alarm: <N/A> | BlackBerry Controller (Application Event Log on COLBB1) | 09/13/2009 14:38:57 (AFFF4FB6) -> 'COLBB1' agent 1: will not restart - reached the maximum of 10 restarts per 24 hours
[30000] (09/13 14:38:57.210):{0x5C8} Alarm::ThreadProc: Received an alarm message
[30000] (09/13 14:38:57.225):{0x68C} [Alarm::ActivateAlarm] Queuing alarm: <N/A> | BlackBerry Controller (Application Event Log on COLBB1) | 09/13/2009 14:38:57 (AFFF4FB6) -> 'COLBB1' agent 2: will not restart - reached the maximum of 10 restarts per 24 hours
[30000] (09/13 14:38:57.225):{0x5C8} Alarm::ThreadProc: Received an alarm message
[30000] (09/13 14:39:05.427):{0x68C} EventLog::ThreadProc: Received notification, processing...
[30000] (09/13 14:39:10.435):{0x68C} EventLog::ThreadProc: Received notification, processing...
Offline  
Old 09-13-2009, 04:54 PM   #5 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,366
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default

First, restart the Server running the Blackberry Server, otherwise the counter will not be reset.

Did you try this workaround to fix log the login credentials ?
Code:
Workaround
To work around the issue, perform one of the following options:

Option 1
On the server where the BlackBerry Administration Service is installed, navigate to this directory:

<drive>:\Program Files\Research In Motion\BlackBerry Enterprise Server\BAS\bin

Run the following command:

basUtility "C:\Program Files\Java\jre1.5.0_15" "C:\Program Files\Research In Motion\BlackBerry Enterprise Server\BAS" encode "<LDAP Password>" > C:\Output.txt

Open the text file created in Step 2.
Copy the hashed version of the password to your Microsoft SQL Server.
Run the following SQL Query against the BlackBerry Configuration Database:

update BASAuthenticationCredentials set password = '<contents of output.txt>' where AuthenticationType LIKE '1'

Restart the BlackBerry Administration Service services.
Log in to the BlackBerry Administration Service using Microsoft Active Directory.
If not, do it. It will not make the situation worser then it is.
If you not have done it already, install the MR1 or MR2 release for BES 5.0 because then, this problem will not occur again.

Even if you are sure, you did not change anything, its better to do this first to rule out this problem.

If you need a program for running the sql query, get it here ( bbdbupdate.exe )
http://www.blackberry.com/btsc/viewA...mentID=KB15058
Offline  
Old 09-13-2009, 05:18 PM   #6 (permalink)
Knows Where the Search Button Is
 
Join Date: Mar 2009
Model: none
PIN: N/A
Carrier: AT&T
Posts: 24
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by nobody7290 View Post
First, restart the Server running the Blackberry Server, otherwise the counter will not be reset.

Did you try this workaround to fix log the login credentials ?
Code:
Workaround
To work around the issue, perform one of the following options:

Option 1
On the server where the BlackBerry Administration Service is installed, navigate to this directory:

<drive>:\Program Files\Research In Motion\BlackBerry Enterprise Server\BAS\bin

Run the following command:

basUtility "C:\Program Files\Java\jre1.5.0_15" "C:\Program Files\Research In Motion\BlackBerry Enterprise Server\BAS" encode "<LDAP Password>" > C:\Output.txt

Open the text file created in Step 2.
Copy the hashed version of the password to your Microsoft SQL Server.
Run the following SQL Query against the BlackBerry Configuration Database:

update BASAuthenticationCredentials set password = '<contents of output.txt>' where AuthenticationType LIKE '1'

Restart the BlackBerry Administration Service services.
Log in to the BlackBerry Administration Service using Microsoft Active Directory.
If not, do it. It will not make the situation worser then it is.
If you not have done it already, install the MR1 or MR2 release for BES 5.0 because then, this problem will not occur again.

Even if you are sure, you did not change anything, its better to do this first to rule out this problem.

If you need a program for running the sql query, get it here ( bbdbupdate.exe )
http://www.blackberry.com/btsc/viewA...mentID=KB15058

I am in the process of doing this work around now. I have run the basUtility, an come up with the Output.txt, but I do not understand the steps after that, can you walk me through that? I do not follow the "copy to the hashed value to SQL server". I have the value, but not sure what to do with it.

Thanks.
Offline  
Old 09-13-2009, 05:49 PM   #7 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,366
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default

If you have the text,
open notpad,
paste:
update BASAuthenticationCredentials set password = '<contents of output.txt>' where AuthenticationType LIKE '1'

And, if your output.txt is 0398705298428
then make it:
update BASAuthenticationCredentials set password = '0398705298428' where AuthenticationType LIKE '1'

save it as updateauth.sql

now run:
BBDBupdate.exe -db BESMgmt -input updateauth.sql
Offline  
Old 09-14-2009, 09:19 AM   #8 (permalink)
Knows Where the Search Button Is
 
Join Date: Mar 2009
Model: none
PIN: N/A
Carrier: AT&T
Posts: 24
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

says BBDBupdate is not recognizable, even after I downloaded the .exe

Last edited by Money$hift : 09-14-2009 at 09:46 AM.
Offline  
Old 09-14-2009, 11:17 AM   #9 (permalink)
Knows Where the Search Button Is
 
Join Date: Mar 2009
Model: none
PIN: N/A
Carrier: AT&T
Posts: 24
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

C:\Program Files\Research In Motion\BlackBerry Enterprise Server\BAS\bin>BBDBupd
ate.exe -db BESMgmt -input updateauth.sql
BlackBerry Configuration Database Update tool Version 4.1.4.8
Copyright (c) Research In Motion, Ltd. 2000-2007. All rights reserved.
Modification date: Aug 8 2007

[20000] (11:15:15.858):{0x1920} Connect to database server: localhost
[20000] (11:15:15.858):{0x1920} Database name: BESMgmt
[10000] (11:15:33.014):{0x1920} Failed to open database connection

C:\Program Files\Research In Motion\BlackBerry Enterprise Server\BAS\bin>

Also prior to running this, I downloaded both MR1 and MR2.

Last edited by Money$hift : 09-14-2009 at 11:19 AM.
Offline  
Old 09-14-2009, 11:42 AM   #10 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,366
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default

What name has the sql instance where your database is located ?
Syntax:

bbdbupdate n < Host name of remote SQL server\ instance name(if applicable )> -db <database_name> -input EnableBESOnlyMessageApplication.sql
Offline  
Old 09-14-2009, 11:58 AM   #11 (permalink)
Knows Where the Search Button Is
 
Join Date: Mar 2009
Model: none
PIN: N/A
Carrier: AT&T
Posts: 24
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

our instance is BESMgmt
Offline  
Old 09-14-2009, 12:03 PM   #12 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,366
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default

Then:

bbdbupdate n localhost\BESMgmt -db BESmgmt -input updatequth.sql
Offline  
Old 09-14-2009, 12:37 PM   #13 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,366
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default

Then:

bbdbupdate n localhost\BESMgmt -db BESmgmt -input updatequth.sql
Offline  
Old 09-14-2009, 08:43 PM   #14 (permalink)
BlackBerry Genius
 
hdawg's Avatar
 
Join Date: Aug 2006
Model: hdawg
PIN: port3101.org
Carrier: hdawg
Posts: 6,632
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

bbdbupdate = osql renamed and rebadged; silly RIM.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.