BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 08-02-2012, 10:37 AM   #1 (permalink)
Knows Where the Search Button Is
 
Join Date: Dec 2008
Model: 8100
PIN: N/A
Carrier: AT&T
Posts: 32
Post Thanks: 3
Thanked 0 Times in 0 Posts
Default BES and domain name/exchange migration

Please Login to Remove!

In short, if I try to activate a BB with [email address] how does RIM match up that email address with the correct BES server? What if there's some malicious BES admins out there and there's several BES servers activated with the XYZ.com domain?

We are migrating a handful of users from two companies to new comapny (hardware/domain/IP etc...). The domain name for this new company is currently pointing to one of the two other companies. We even have a blackberry or two activated on the BES at this other company. We are trying to test the new environment and are having discussions on how RIM knows which BES server to make the connection to when a BB activation is attempted with XYZ.com domain.

Any help, suggestions, discussions on the matter is appreciated.
TIA!
Offline  
Old 08-02-2012, 11:05 AM   #2 (permalink)
Knows Where the Search Button Is
 
Join Date: Dec 2008
Model: 8100
PIN: N/A
Carrier: AT&T
Posts: 32
Post Thanks: 3
Thanked 0 Times in 0 Posts
Default Re: BES and domain name/exchange migration

Okay, I THINK we figured it out. The activation hash seems to be sent from RIM. So it has to go to a valid external email address. It performs an MX lookup (of sorts).
Offline  
Old 08-02-2012, 04:16 PM   #3 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,362
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default Re: BES and domain name/exchange migration

If you activate a Handheld wireless, the Blackberry will send a message to the email address the user enters in the enterprise activation dialog using the RIM infrastructure. As you already found out, email will be delivered using the MX records for the domain.

This message is most likely encrypted, but because the one time activation password is short, it is not impossible that someone inbetween is able to decrypt the message.
After that, the Handheld + the Server will negotiate a strong encryption.

If you are paranoid, you are always able to do a wired activation, then you can be 100% sure that nobody else then the server which was meant to receive the activation mail will receive it.

http://testlab.sit.fraunhofer.de/dow...-06-104302.pdf
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads for: BES and domain name/exchange migration
Thread Thread Starter Forum Replies Last Post
MIGRATION PROBLEM: BES with besadmin user and box in 5.5/NT => Ex 2k3/AD 2k3 domain cristalin BES Admin Corner 1 01-20-2010 01:44 PM
Slow Migration of a BES 4.1 in a NT domain with Exch 5.5 cristalin BES Admin Corner 0 07-30-2007 05:21 AM
BES Migration Help EoRaptor BES Admin Corner 3 10-17-2006 10:17 AM
BES 4.01 migration to new server, do these steps look okay? mcast12 BES Admin Corner 0 08-22-2006 11:22 AM
BES on Domino multi domain, crashing SCBerry BES Admin Corner 0 09-16-2005 05:54 PM





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.