BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 03-09-2013, 07:32 AM   #1 (permalink)
New Member
 
Join Date: Mar 2013
Model: Curve
PIN: N/A
Carrier: KPN
Posts: 13
Post Thanks: 1
Thanked 0 Times in 0 Posts
Unhappy Bes Express fetch certificates fail

Please Login to Remove!

Hi All,

I installed BES Express on a Windows Small server 2011.
everything works except when i try to fetch certificates.
i get

"an error occurred connecting to the server. please check your server settings and try"

Please help
Offline  
Old 03-09-2013, 04:04 PM   #2 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,362
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default Re: Bes Express fetch certificates fail

I dont know this error message. You should explain a little more in detail what happens.

At what point does this happen ?
During installation ?
On the Handheld ?
Offline  
Old 03-10-2013, 04:05 AM   #3 (permalink)
New Member
 
Join Date: Mar 2013
Model: Curve
PIN: N/A
Carrier: KPN
Posts: 13
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Bes Express fetch certificates fail

Hi,

it happen on the handheld.
i can fetch chain status and lookup contacts but when i try to fetch a certificate i get that error on the handheld.
Offline  
Old 03-10-2013, 04:27 AM   #4 (permalink)
New Member
 
Join Date: Mar 2013
Model: Curve
PIN: N/A
Carrier: KPN
Posts: 13
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Bes Express fetch certificates fail

Noticed that it fails on all requests to fetch certificates and search sertificates
Offline  
Old 03-10-2013, 05:58 AM   #5 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,362
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default Re: Bes Express fetch certificates fail

Did you enter the ldap server infomation in the BES console ?
on servers and components,
expand Blackberry solution topology
component view
MDS-Connection service
cklick on MDS-Connection service,
click edit component
click the LDAP tab.
click the plus sign to add a server.
Enter a name, a description, and the dns name of your DC:389
Enter a username (maybe use the besadmin user) for authentication in the style domainname\username
enter the password
enter the base query like: dc=domain,dc=local which should match your SBS2011 domain.
save all

restart the MDS_CS_1 instance:
click the instance,
klick the restart instance

Then, try again on the Handheld.

does it work then ?
Offline  
Old 03-10-2013, 10:16 AM   #6 (permalink)
New Member
 
Join Date: Mar 2013
Model: Curve
PIN: N/A
Carrier: KPN
Posts: 13
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Bes Express fetch certificates fail

Hi,

thanks for the input.
after adding :389 (also tried 636 with same effect) i now get:

"The search specified was invalid. Please verify the search criteria and try again"

on the Base Query i already had:
ou=SBSUsers,ou=Users,ou=MyBusiness,dc=NameOfMyDoma in,dc=local
(NameOfMyDomain beeing the real name of my domain)

i save certificates to AD and if i look using a tool (Softerra ldap administrator) i can see the userCertificate
Offline  
Old 03-10-2013, 10:41 AM   #7 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,362
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default Re: Bes Express fetch certificates fail

For testing,
Start with
dc=mydomain,dc=local

If that works, you know everything is ok, and then, if you want to narrow the search, then try to make this work.
Posted via BlackBerryForums.com Mobile
Offline  
Old 03-10-2013, 10:50 AM   #8 (permalink)
New Member
 
Join Date: Mar 2013
Model: Curve
PIN: N/A
Carrier: KPN
Posts: 13
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Bes Express fetch certificates fail

no luck
still the same error
"The search specified was invalid. Please verify the search criteria and try again"

the settings i'm using: port 389
Secure connection enabled : yes
Base Query: DC=mydomain,DC=local

everyone complaining about this error has spaces in the base query but that doesn not apply
Offline  
Old 03-10-2013, 11:31 AM   #9 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,362
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default Re: Bes Express fetch certificates fail

Disable the secure connection.

Also, examine the logfiles:
I think, in the /Program Files (x86)/Research in Motrion/Blackberry Enterprise server/logs/
there is the mdat log. AFAIK here are the events of the MDS instance logged (not 100% sure).

Last edited by nobody7290 : 03-10-2013 at 01:01 PM.
Offline  
Old 03-11-2013, 09:51 AM   #10 (permalink)
New Member
 
akpain's Avatar
 
Join Date: Mar 2013
Model: 8520
PIN: N/A
Carrier: Claro
Posts: 3
Post Thanks: 0
Thanked 0 Times in 0 Posts
Post Re: Bes Express fetch certificates fail

I recently install my BES to work with s/mime

in LDAP I put

server.domain:389
secure: not
besadmin
passwordbesadmin
CN=domain,CN=corp


also I configure the OCSP url

I use this guide
Code:
docs.blackberry.com/en/admin/deliverables/25767/Configuring_how_apps_trusted_conn_to_web_servers_268738_11.jsp
and
Code:
btsc.webapps.blackberry.com/btsc/viewdocument.do?externalId=KB15786&sliceId=1&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl
but doesn't work, my error when I fetch is "Internal proxy provider error"

regards
Offline  
Old 03-11-2013, 02:55 PM   #11 (permalink)
New Member
 
Join Date: Mar 2013
Model: Curve
PIN: N/A
Carrier: KPN
Posts: 13
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Bes Express fetch certificates fail

Hi nobody7290,

i now get "the system cannot find the file specified" for webserver.keystore in the logs...
looking online on how to fix it but i actually don't know if it's a new error or it was there all along...
the fixes online doe not seem te be working any ideas? you have helped me a lot thanks for that
Offline  
Old 03-11-2013, 03:05 PM   #12 (permalink)
New Member
 
Join Date: Mar 2013
Model: Curve
PIN: N/A
Carrier: KPN
Posts: 13
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Bes Express fetch certificates fail

i foud that "\..\..\webserver\webserver.keystore (The system cannot find the file specified)" already was there long before i stared fixing things
Offline  
Old 03-11-2013, 03:16 PM   #13 (permalink)
New Member
 
Join Date: Mar 2013
Model: Curve
PIN: N/A
Carrier: KPN
Posts: 13
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Bes Express fetch certificates fail

i moved the keystore and now get

WARNG>:<LAYER = SCM, PushServiceImpl(): net.rim.security.b.b: Keystore was tampered with, or password was incorrect

at least i get something new everytime
Offline  
Old 03-11-2013, 03:37 PM   #14 (permalink)
BlackBerry Extraordinaire
 
Join Date: Mar 2006
Model: 9700
Carrier: t-mobile Germany
Posts: 1,362
Post Thanks: 11
Thanked 69 Times in 66 Posts
Default Re: Bes Express fetch certificates fail

does/did the certificate lookup work now, and you have a new problem, or, is this something new?

regarding the certificates: you also can search or fetch a certificate using a Blackberry and setup the connection to the ldap server on the handheld. Dont know, if that helps, because the parameters are the same as when you enter that in the BES console. But maybe worth a try because it could be you get a more understandable error message ?
Offline  
The Following User Says Thank You to nobody7290 For This Useful Post:
BISAdmin (03-12-2013)
Old 03-11-2013, 07:39 PM   #15 (permalink)
New Member
 
Join Date: Mar 2013
Model: Curve
PIN: N/A
Carrier: KPN
Posts: 13
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Bes Express fetch certificates fail

hi nobody7290

No i still couldn't fetch certificates, i just finished a re-install because i tried so many things that i couldn't even check te status/ chain/ trust status anymore...

i can check status / trust status but i can't fetch certificates....(even after a re-install)

is it even possible?
fetch certificates using bes express?...
should i just take my losses and install all certificates (pressent en future) on handhelds and just check the status... i'm getting ready to trow in the towel....

i tried your option on the handheld but got the same error. i'll try it tomorrow again with a new pair of eyes
Offline  
Old 03-12-2013, 04:28 AM   #16 (permalink)
New Member
 
Join Date: Mar 2013
Model: Curve
PIN: N/A
Carrier: KPN
Posts: 13
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Bes Express fetch certificates fail

Quote:
Originally Posted by akpain View Post
I recently install my BES to work with s/mime

in LDAP I put

server.domain:389
secure: not
besadmin
passwordbesadmin
CN=domain,CN=corp


also I configure the OCSP url

I use this guide
Code:
docs.blackberry.com/en/admin/deliverables/25767/Configuring_how_apps_trusted_conn_to_web_servers_268738_11.jsp
and
Code:
btsc.webapps.blackberry.com/btsc/viewdocument.do?externalId=KB15786&sliceId=1&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl
but doesn't work, my error when I fetch is "Internal proxy provider error"

regards
Did you run the setup using the BESAdmin account?
try using DC=domain,DC=corp

Last edited by BISAdmin : 03-12-2013 at 04:36 AM.
Offline  
Old 03-12-2013, 05:00 AM   #17 (permalink)
New Member
 
Join Date: Mar 2013
Model: Curve
PIN: N/A
Carrier: KPN
Posts: 13
Post Thanks: 1
Thanked 0 Times in 0 Posts
Default Re: Bes Express fetch certificates fail

Hi nobody7290

i got it working on handheld!
my day just starterd great!

after a while i tested using url withoud ldap://
and it worked!!!

thanks for al your help!!
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads for: Bes Express fetch certificates fail
Thread Thread Starter Forum Replies Last Post
BES Express on Exchange 2010? mlcasto BES Admin Corner 1 08-03-2011 08:01 AM
BEs 5.0.2 inplace upgrade of sql express to sql server 2005 elbutre BES Admin Corner 5 10-27-2010 04:59 AM
Decommission/Uninstall/Delete BES Express kevkrop BES Admin Corner 0 08-19-2010 07:48 AM
A few issues after installing BES Express PowerK6 BES Admin Corner 0 07-23-2010 07:39 AM
Knowledge Sharing - BES/SBE/BPS 4.x upgrade options to BES Express 5. knottyrope BES Admin Corner 5 03-12-2010 03:22 PM





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.