|
|
|
03-10-2010, 08:15 AM
|
#1
|
New Member
Join Date: Mar 2010
Model: bold
PIN: N/A
Carrier: kpn
Posts: 5
|
Login problem Blackberry Administration Service
Please Login to Remove!
Hello,
I've just installed Blackberry Enterprise Express 5.01 on a Windows SBS2008 server. With the installation no problems, only it's not possible to login in the Administration service with Microsoft® Windows® credentials.
The message appears:
The username, password, or domain is not correct. Please correct the entry
Iám login with administrator credentials which i was using during install.
Do anyone have a solution or workaround for this?
Thanks,
Edwin
|
Offline
|
|
03-10-2010, 08:28 AM
|
#2
|
Knows Where the Search Button Is
Join Date: Feb 2010
Model: 8530
PIN: N/A
Carrier: Verizon
Posts: 42
|
Are you using the correct domain?
|
Offline
|
|
03-10-2010, 08:38 AM
|
#3
|
New Member
Join Date: Mar 2010
Model: bold
PIN: N/A
Carrier: kpn
Posts: 5
|
Correct Domain
Quote:
Originally Posted by CyphrMedic
Are you using the correct domain?
|
Hello,
What are you meaning by this?
I'm using my local domain which called domain. I've tried domain & domain.local.
|
Offline
|
|
03-10-2010, 09:21 AM
|
#4
|
BlackBerry Extraordinaire
Join Date: Feb 2006
Location: YYZ
Model: 9900
Carrier: Rogers
Posts: 1,183
|
Have you tried login in as BESAdmin?
|
Offline
|
|
03-10-2010, 10:02 AM
|
#5
|
New Member
Join Date: Dec 2008
Location: London
Model: 9500
OS: WINXP
PIN: 20D6F70D
Carrier: Vodafone
Posts: 4
|
I had this problem too...
What i did was made sure that besadmin was logged into the server.... but i just read up on something that told me to make sure my system time (server time) is within 5 mins of the bes time.... if its out of this period it causes issues with LDAP!
Try it and let me know...as i am having the same problem but cannot do this till i get home....
Anil
|
Offline
|
|
03-11-2010, 02:42 AM
|
#6
|
BlackBerry Extraordinaire
Join Date: Jul 2005
Location: MA
Model: 9930
PIN: PM Me!
Carrier: VZW
Posts: 1,073
|
I had this issue twice now and it drives me crazy and is a known issue not presently resolved.
basically you need to specify another AD account in the configuration section (any other domain account) apply and then change back if you need to use the same AD account. Something to do with the HASH or something .. the other work around is to change the password and add a special character .. like ?.
If you put that exact error in the Tech KB search you'll find the article with more detail.
|
Offline
|
|
03-11-2010, 10:24 AM
|
#7
|
Knows Where the Search Button Is
Join Date: Nov 2008
Location: Isle of Man
Model: 9800
PIN: N/A
Carrier: Manx Telecom
Posts: 23
|
I had about eight or nine hours trying to resolve this yesterday and this is what I finally did to get this working. I am posting this here for others who may have the same issue and hopefully it may help the OP of this thread.
I made a discovery in the Security log of the Event viewer on my Server that was hosting both BES Express 5.0.1 as well as Exchange 2007. They are both on the same box. The Security log entry made reference to a Kerberos right being denied to the BESADMIN active directory account around the time I tried to login to the BES Admin service website. This was irrespective of whether I wanted to login to the BES Express Admin website as BESADMIN or as another login (Say my domain admin account).
I deduced from this that when the BES Express Admin Web service needs to verify your login it is being denied some sort of Kereberos Ticket and or elevated privilege. Since the Message indicated the problem to be with the BESADMIN Active Directory user that I created for installing BESX and of course used by the BESX background services to execute under, I checked out the properties of this account I had created and made the following changes / settings.
Using Active Directory Users and Computers I went to the users container and right clicked on the user BESADMIN and selected properties. Under the Account Tab I set the following items in the "Account Options" list at the bottom of that tab.
Use Kerberos DES etc - Checked.
This account Supports Kerberos AES 128bit encryption - checked.
This account supports Kerberos AES 256bit encryption - checked.
Do not require Kerberos preauthentication - UNCHECKED.
I rebooted the server (Not just restarting the background services!) and finally I was able to login to the BESX Administration Service web site under BESADMIN or under my Domain Admin login ID.
Hope that helps anyone else in this predicament. It was an unnecessarily long day yesterday getting this going thanks to that one stupid little problem.
Best Wishes all
|
Offline
|
|
03-11-2010, 07:35 PM
|
#8
|
New Member
Join Date: Mar 2010
Model: 9000
PIN: N/A
Carrier: verizon
Posts: 1
|
BESx Administration Login FIX>>>>
A_Zimbo's recommendation did not work for me...actually non of the BES services would come up after I made changes as described...I simply rolled-back those changes and followed jletendre recommendations and that did work for me. Basically, ran Blackberry Configuration utility...reintered the BESAdmin password and clicked apply. Issue resolved. Good luck for thiose experieicing this same issue...been at it since yesterday night and thanks to jletendre I'm up and running.
|
Offline
|
|
03-11-2010, 08:53 PM
|
#9
|
New Member
Join Date: Mar 2010
Model: bold
PIN: N/A
Carrier: kpn
Posts: 5
|
Solved the problem
Quote:
Originally Posted by A_Zimbo
I had about eight or nine hours trying to resolve this yesterday and this is what I finally did to get this working. I am posting this here for others who may have the same issue and hopefully it may help the OP of this thread.
I made a discovery in the Security log of the Event viewer on my Server that was hosting both BES Express 5.0.1 as well as Exchange 2007. They are both on the same box. The Security log entry made reference to a Kerberos right being denied to the BESADMIN active directory account around the time I tried to login to the BES Admin service website. This was irrespective of whether I wanted to login to the BES Express Admin website as BESADMIN or as another login (Say my domain admin account).
I deduced from this that when the BES Express Admin Web service needs to verify your login it is being denied some sort of Kereberos Ticket and or elevated privilege. Since the Message indicated the problem to be with the BESADMIN Active Directory user that I created for installing BESX and of course used by the BESX background services to execute under, I checked out the properties of this account I had created and made the following changes / settings.
Using Active Directory Users and Computers I went to the users container and right clicked on the user BESADMIN and selected properties. Under the Account Tab I set the following items in the "Account Options" list at the bottom of that tab.
Use Kerberos DES etc - Checked.
This account Supports Kerberos AES 128bit encryption - checked.
This account supports Kerberos AES 256bit encryption - checked.
Do not require Kerberos preauthentication - UNCHECKED.
I rebooted the server (Not just restarting the background services!) and finally I was able to login to the BESX Administration Service web site under BESADMIN or under my Domain Admin login ID.
Hope that helps anyone else in this predicament. It was an unnecessarily long day yesterday getting this going thanks to that one stupid little problem.
Best Wishes all
|
Thanks A_Zimbo your nightwork solution solved my problem. It's possible now to start BESASMIN.
Regards Edwin.
|
Offline
|
|
03-11-2010, 10:19 PM
|
#10
|
Talking BlackBerry Encyclopedia
Join Date: Jul 2008
Model: 9780
PIN: 2075BBB4
Carrier: Carrier
Posts: 263
|
The user ID is case sensitive also. I had the same problem and it was driving me crazy. I was doing it in all lower case and it would not let me in at all until I tried BESAdmin instead of besadmin. I tried the BES pro and that was not case sensitive but it seems like the BES express is for some reason.
Last edited by GrandMstrBud; 03-11-2010 at 10:20 PM..
|
Offline
|
|
03-12-2010, 06:09 AM
|
#11
|
Knows Where the Search Button Is
Join Date: Nov 2008
Location: Isle of Man
Model: 9800
PIN: N/A
Carrier: Manx Telecom
Posts: 23
|
Quote:
Originally Posted by evexel
Thanks A_Zimbo your nightwork solution solved my problem. It's possible now to start BESASMIN.
Regards Edwin.
|
Glad it worked for you Edwin. Just wish I knew the answer why?!?! Since I got it working i have stopped bothering to look into Kerberos Tickets etc.
Last edited by A_Zimbo; 03-12-2010 at 06:09 AM..
Reason: Spelling mistake
|
Offline
|
|
03-15-2010, 06:21 AM
|
#12
|
Thumbs Must Hurt
Join Date: Sep 2007
Model: evo4g
PIN: N/A
Carrier: Sprint
Posts: 159
|
I am having the same issue with SBS08 and BESx
anil - where do you find "bes time"
jletendre - i assume you mean in blackberry server configuration and the tab administration service - AD settings? if so i changed to to the admin account and then back to BES admin, is that what you meant to do? it didnt work for me if so!
a zimbo - are you using sbs08 because under "Users and Computers" in AD i dont show BES admin (and yes there is a user on the box setup corretly even with the name BES admin) am i missing something?
dram - please see my message above to jletendre and give any input you may have
grandmstr - i thought the default login was 'admin' and besadmin was just the username for winlogin to bes? at anyrate i tried both and neither worked (with all differnt case's, nada)
__________________
my bb History = 7200, 8700, 7100i, 8320, 9530, back to the 8320, 8900, 9700, 9930, PlayBook
|
Offline
|
|
03-15-2010, 06:28 AM
|
#13
|
Knows Where the Search Button Is
Join Date: Nov 2008
Location: Isle of Man
Model: 9800
PIN: N/A
Carrier: Manx Telecom
Posts: 23
|
Quote:
Originally Posted by sleeper55
I am having the same issue with SBS08 and BESx
a zimbo - are you using sbs08 because under "Users and Computers" in AD i dont show BES admin (and yes there is a user on the box setup corretly even with the name BES admin) am i missing something?
|
Sleeper, I am on full blown Windows Server 2008 x64 not on SBS08.
Not sure how you can have setup a user called BESAdmin but say that the user doesn't appear in the list of users in Active Directory Users and Computers. Very odd. Maybe I have misunderstood you? I assume the Exchange Server and BESx are all running on the one box and that this box is also a "Domain Controller"?
|
Offline
|
|
03-15-2010, 06:36 AM
|
#14
|
Thumbs Must Hurt
Join Date: Sep 2007
Model: evo4g
PIN: N/A
Carrier: Sprint
Posts: 159
|
Quote:
Originally Posted by A_Zimbo
Sleeper, I am on full blown Windows Server 2008 x64 not on SBS08.
Not sure how you can have setup a user called BESAdmin but say that the user doesn't appear in the list of users in Active Directory Users and Computers. Very odd. Maybe I have misunderstood you? I assume the Exchange Server and BESx are all running on the one box and that this box is also a "Domain Controller"?
|
correct one box is doing it all, users must be different in sbs compared to server 08, damn!
__________________
my bb History = 7200, 8700, 7100i, 8320, 9530, back to the 8320, 8900, 9700, 9930, PlayBook
|
Offline
|
|
03-15-2010, 06:38 AM
|
#15
|
Knows Where the Search Button Is
Join Date: Nov 2008
Location: Isle of Man
Model: 9800
PIN: N/A
Carrier: Manx Telecom
Posts: 23
|
Quote:
Originally Posted by sleeper55
correct one box is doing it all, users must be different in sbs compared to server 08, damn!
|
So you can see all the other users in the domain Sleeper? Just not the BESAdmin one you added to the Domain to install BESx under? So all the other logins are clearly visible, just not the new one you added?
|
Offline
|
|
03-15-2010, 06:50 AM
|
#16
|
Thumbs Must Hurt
Join Date: Sep 2007
Model: evo4g
PIN: N/A
Carrier: Sprint
Posts: 159
|
no none show in there in sbs. Also the user isn't even new i previously had a VM with server2003 runnning on my sbs2008 box to run BPS and i was using BPS and all worked fine. Now BESx is out and i dont need a VM anymore so i went ahead and installed it on my SBS2008 box and shut down the VM and it all went fine or seemed to but now when i try to login to the web interface at :3443 for BES admin it keeps teling me "The user name or password is not correct. Please correct the entry" but i am positive the password is correct, IDEAS?
__________________
my bb History = 7200, 8700, 7100i, 8320, 9530, back to the 8320, 8900, 9700, 9930, PlayBook
|
Offline
|
|
03-15-2010, 06:58 AM
|
#17
|
Knows Where the Search Button Is
Join Date: Nov 2008
Location: Isle of Man
Model: 9800
PIN: N/A
Carrier: Manx Telecom
Posts: 23
|
Quote:
Originally Posted by sleeper55
no none show in there in sbs. Also the user isn't even new i previously had a VM with server2003 runnning on my sbs2008 box to run BPS and i was using BPS and all worked fine. Now BESx is out and i dont need a VM anymore so i went ahead and installed it on my SBS2008 box and shut down the VM and it all went fine or seemed to but now when i try to login to the web interface at :3443 for BES admin it keeps teling me "The user name or password is not correct. Please correct the entry" but i am positive the password is correct, IDEAS?
|
Ok. I think I follow what you are saying. When you use the MMC Snapin for Active Directory Users and Computers you should be able to expand the "tree" on the left hand side underneath the domain and select a container called Users. (Like a subfolder in an explorer window would look). In there you should see all the users of the SBS08 box and amongst them is the user you created called BESAdmin.
|
Offline
|
|
03-15-2010, 07:02 AM
|
#18
|
Thumbs Must Hurt
Join Date: Sep 2007
Model: evo4g
PIN: N/A
Carrier: Sprint
Posts: 159
|
Quote:
Originally Posted by A_Zimbo
Ok. I think I follow what you are saying. When you use the MMC Snapin for Active Directory Users and Computers you should be able to expand the "tree" on the left hand side underneath the domain and select a container called Users. (Like a subfolder in an explorer window would look). In there you should see all the users of the SBS08 box and amongst them is the user you created called BESAdmin.
|
all of the default users are there for an sbs box (created by microsoft for sbs functions) but none of the actual "users" on the machine (not my name or no employee's or admin or besadmin, etc)
__________________
my bb History = 7200, 8700, 7100i, 8320, 9530, back to the 8320, 8900, 9700, 9930, PlayBook
|
Offline
|
|
03-15-2010, 06:50 PM
|
#19
|
Thumbs Must Hurt
Join Date: Sep 2007
Model: evo4g
PIN: N/A
Carrier: Sprint
Posts: 159
|
open for any suggestions at this point!
__________________
my bb History = 7200, 8700, 7100i, 8320, 9530, back to the 8320, 8900, 9700, 9930, PlayBook
|
Offline
|
|
|
|