BlackBerry Forums Support Community
              

Closed Thread
 
LinkBack Thread Tools
Old 02-05-2010, 02:38 PM   #1 (permalink)
Thumbs Must Hurt
 
JavaJunkee's Avatar
 
Join Date: Jan 2007
Location: Seattle, WA
Model: 9780
Carrier: T-Mobile
Posts: 156
Post Thanks: 2
Thanked 0 Times in 0 Posts
Default Web Desktop Manager - Failed Logins, Except One Account

Please Login to Remove!

BES 5.0.1 MR1 (Bundle 82) Two Servers 2008 64-bit, High Availability
SQL 2008 Server 2008 64-bit
Exchange 2007

OK, bear with me, this is a weird one!

I installed Web Desktop Manager a couple of months after setting up my pilot BES 5.0.

Of the 10 or so pilot accounts on this system, only one is able to log on to Web Desktop Manager. Now the weird thing is, the failed login attempts are not being capture in the BBAS-AS log. I see the one successful account logins just fine.

From the client side, the failed login display The username, password, or domain is not correct. Please correct the entry. Now you would think this has to do with the BAS account doing the LDAP query, having a bad password stored in the BESMgmt DB, but then why does the one account login successfully?

Told you its a weird one.

Im also working with RIM on this. Just thought Id put it out to the forum community to see if anyone else has run into this.

My quick fix would be to completely uninstall both BAS and Web Desktop Manager, then re-install.
__________________
BES 5.0.4 MR 11 (Bundle 234)
-Server 2008 R2 Standard SP1 (ESXi 5.5)
Exchange 2010 SP3 RU7
-Server 2008 R2 SP1 Enterprise
Offline  
Old 02-08-2010, 11:37 AM   #2 (permalink)
Thumbs Must Hurt
 
JavaJunkee's Avatar
 
Join Date: Jan 2007
Location: Seattle, WA
Model: 9780
Carrier: T-Mobile
Posts: 156
Post Thanks: 2
Thanked 0 Times in 0 Posts
Default

Wow! I've stumped the panel.

(shameless bump)
__________________
BES 5.0.4 MR 11 (Bundle 234)
-Server 2008 R2 Standard SP1 (ESXi 5.5)
Exchange 2010 SP3 RU7
-Server 2008 R2 SP1 Enterprise
Offline  
Old 02-08-2010, 07:52 PM   #3 (permalink)
Thumbs Must Hurt
 
JavaJunkee's Avatar
 
Join Date: Jan 2007
Location: Seattle, WA
Model: 9780
Carrier: T-Mobile
Posts: 156
Post Thanks: 2
Thanked 0 Times in 0 Posts
Talking

* Resolved *

RIM responded with the below, which resolved the issue:

Window 2008 server was designed to use 3DES and AES for encryption types, whereas Windows 2003 and earlier used DES. Unless youre running your Windows 2008 Domain Controllers at a Windows 2008 native level, you may encounter an issue similar to what your having.

Please perform the following steps on a Domain Controller.

First try the steps below for the BlackBerry Service Account.

In Active Directory Users and Computers, bring up one of your user accounts that is not able to log in. Right click on the user, and then click on properties.

Go to the "Account" tab and under account options, make sure there is a checkmark next to "Use DES encryption types for this account". Click "Apply" then "Ok"
__________________
BES 5.0.4 MR 11 (Bundle 234)
-Server 2008 R2 Standard SP1 (ESXi 5.5)
Exchange 2010 SP3 RU7
-Server 2008 R2 SP1 Enterprise
Offline  




Copyright 2004-2016 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.