[evexel]

Hello,

I've just installed Blackberry Enterprise Express 5.01 on a Windows SBS2008 server. With the installation no problems, only it's not possible to login in the Administration service with Microsoft® Windows® credentials.
The message appears:

The username, password, or domain is not correct. Please correct the entry

Iám login with administrator credentials which i was using during install.

Do anyone have a solution or workaround for this?

Thanks,

Edwin

[CyphrMedic]

Are you using the correct domain?

[evexel]

Originally Posted by CyphrMedic

Are you using the correct domain?

Hello,
What are you meaning by this?
I'm using my local domain which called domain. I've tried domain & domain.local.

[CanuckBB]

Have you tried login in as BESAdmin?

[anilvaghela82]

I had this problem too...

What i did was made sure that besadmin was logged into the server.... but i just read up on something that told me to make sure my system time (server time) is within 5 mins of the bes time.... if its out of this period it causes issues with LDAP!

Try it and let me know...as i am having the same problem but cannot do this till i get home....


Anil

[Frank Castle]

I had this issue twice now and it drives me crazy and is a known issue not presently resolved.

basically you need to specify another AD account in the configuration section (any other domain account) apply and then change back if you need to use the same AD account. Something to do with the HASH or something .. the other work around is to change the password and add a special character .. like ?.


If you put that exact error in the Tech KB search you'll find the article with more detail.

[A_Zimbo]

I had about eight or nine hours trying to resolve this yesterday and this is what I finally did to get this working. I am posting this here for others who may have the same issue and hopefully it may help the OP of this thread.

I made a discovery in the Security log of the Event viewer on my Server that was hosting both BES Express 5.0.1 as well as Exchange 2007. They are both on the same box. The Security log entry made reference to a Kerberos right being denied to the BESADMIN active directory account around the time I tried to login to the BES Admin service website. This was irrespective of whether I wanted to login to the BES Express Admin website as BESADMIN or as another login (Say my domain admin account).

I deduced from this that when the BES Express Admin Web service needs to verify your login it is being denied some sort of Kereberos Ticket and or elevated privilege. Since the Message indicated the problem to be with the BESADMIN Active Directory user that I created for installing BESX and of course used by the BESX background services to execute under, I checked out the properties of this account I had created and made the following changes / settings.

Using Active Directory Users and Computers I went to the users container and right clicked on the user BESADMIN and selected properties. Under the Account Tab I set the following items in the "Account Options" list at the bottom of that tab.

Use Kerberos DES etc - Checked.
This account Supports Kerberos AES 128bit encryption - checked.
This account supports Kerberos AES 256bit encryption - checked.
Do not require Kerberos preauthentication - UNCHECKED.

I rebooted the server (Not just restarting the background services!) and finally I was able to login to the BESX Administration Service web site under BESADMIN or under my Domain Admin login ID.

Hope that helps anyone else in this predicament. It was an unnecessarily long day yesterday getting this going thanks to that one stupid little problem.

Best Wishes all

[dramirez@violyco.com]

A_Zimbo's recommendation did not work for me...actually non of the BES services would come up after I made changes as described...I simply rolled-back those changes and followed jletendre recommendations and that did work for me. Basically, ran Blackberry Configuration utility...reintered the BESAdmin password and clicked apply. Issue resolved. Good luck for thiose experieicing this same issue...been at it since yesterday night and thanks to jletendre I'm up and running.

[evexel]

Originally Posted by A_Zimbo

I had about eight or nine hours trying to resolve this yesterday and this is what I finally did to get this working. I am posting this here for others who may have the same issue and hopefully it may help the OP of this thread.

I made a discovery in the Security log of the Event viewer on my Server that was hosting both BES Express 5.0.1 as well as Exchange 2007. They are both on the same box. The Security log entry made reference to a Kerberos right being denied to the BESADMIN active directory account around the time I tried to login to the BES Admin service website. This was irrespective of whether I wanted to login to the BES Express Admin website as BESADMIN or as another login (Say my domain admin account).

I deduced from this that when the BES Express Admin Web service needs to verify your login it is being denied some sort of Kereberos Ticket and or elevated privilege. Since the Message indicated the problem to be with the BESADMIN Active Directory user that I created for installing BESX and of course used by the BESX background services to execute under, I checked out the properties of this account I had created and made the following changes / settings.

Using Active Directory Users and Computers I went to the users container and right clicked on the user BESADMIN and selected properties. Under the Account Tab I set the following items in the "Account Options" list at the bottom of that tab.

Use Kerberos DES etc - Checked.
This account Supports Kerberos AES 128bit encryption - checked.
This account supports Kerberos AES 256bit encryption - checked.
Do not require Kerberos preauthentication - UNCHECKED.

I rebooted the server (Not just restarting the background services!) and finally I was able to login to the BESX Administration Service web site under BESADMIN or under my Domain Admin login ID.

Hope that helps anyone else in this predicament. It was an unnecessarily long day yesterday getting this going thanks to that one stupid little problem.

Best Wishes all

Thanks A_Zimbo your nightwork solution solved my problem. It's possible now to start BESASMIN.
Regards Edwin.

[GrandMstrBud]

The user ID is case sensitive also. I had the same problem and it was driving me crazy. I was doing it in all lower case and it would not let me in at all until I tried BESAdmin instead of besadmin. I tried the BES pro and that was not case sensitive but it seems like the BES express is for some reason.

[A_Zimbo]

Originally Posted by evexel

Thanks A_Zimbo your nightwork solution solved my problem. It's possible now to start BESASMIN.
Regards Edwin.

Glad it worked for you Edwin. Just wish I knew the answer why?!?! Since I got it working i have stopped bothering to look into Kerberos Tickets etc.

[sleeper55]

I am having the same issue with SBS08 and BESx

anil - where do you find "bes time"

jletendre - i assume you mean in blackberry server configuration and the tab administration service - AD settings? if so i changed to to the admin account and then back to BES admin, is that what you meant to do? it didnt work for me if so!

a zimbo - are you using sbs08 because under "Users and Computers" in AD i dont show BES admin (and yes there is a user on the box setup corretly even with the name BES admin) am i missing something?

dram - please see my message above to jletendre and give any input you may have

grandmstr - i thought the default login was 'admin' and besadmin was just the username for winlogin to bes? at anyrate i tried both and neither worked (with all differnt case's, nada)

[A_Zimbo]

Originally Posted by sleeper55

I am having the same issue with SBS08 and BESx

a zimbo - are you using sbs08 because under "Users and Computers" in AD i dont show BES admin (and yes there is a user on the box setup corretly even with the name BES admin) am i missing something?

Sleeper, I am on full blown Windows Server 2008 x64 not on SBS08.

Not sure how you can have setup a user called BESAdmin but say that the user doesn't appear in the list of users in Active Directory Users and Computers. Very odd. Maybe I have misunderstood you? I assume the Exchange Server and BESx are all running on the one box and that this box is also a "Domain Controller"?

[sleeper55]

Originally Posted by A_Zimbo

Sleeper, I am on full blown Windows Server 2008 x64 not on SBS08.

Not sure how you can have setup a user called BESAdmin but say that the user doesn't appear in the list of users in Active Directory Users and Computers. Very odd. Maybe I have misunderstood you? I assume the Exchange Server and BESx are all running on the one box and that this box is also a "Domain Controller"?

correct one box is doing it all, users must be different in sbs compared to server 08, damn!

[A_Zimbo]

Originally Posted by sleeper55

correct one box is doing it all, users must be different in sbs compared to server 08, damn!

So you can see all the other users in the domain Sleeper? Just not the BESAdmin one you added to the Domain to install BESx under? So all the other logins are clearly visible, just not the new one you added?

[sleeper55]

no none show in there in sbs. Also the user isn't even new i previously had a VM with server2003 runnning on my sbs2008 box to run BPS and i was using BPS and all worked fine. Now BESx is out and i dont need a VM anymore so i went ahead and installed it on my SBS2008 box and shut down the VM and it all went fine or seemed to but now when i try to login to the web interface at :3443 for BES admin it keeps teling me "The user name or password is not correct. Please correct the entry" but i am positive the password is correct, IDEAS?

[A_Zimbo]

Originally Posted by sleeper55

no none show in there in sbs. Also the user isn't even new i previously had a VM with server2003 runnning on my sbs2008 box to run BPS and i was using BPS and all worked fine. Now BESx is out and i dont need a VM anymore so i went ahead and installed it on my SBS2008 box and shut down the VM and it all went fine or seemed to but now when i try to login to the web interface at :3443 for BES admin it keeps teling me "The user name or password is not correct. Please correct the entry" but i am positive the password is correct, IDEAS?

Ok. I think I follow what you are saying. When you use the MMC Snapin for Active Directory Users and Computers you should be able to expand the "tree" on the left hand side underneath the domain and select a container called Users. (Like a subfolder in an explorer window would look). In there you should see all the users of the SBS08 box and amongst them is the user you created called BESAdmin.

[sleeper55]

Originally Posted by A_Zimbo

Ok. I think I follow what you are saying. When you use the MMC Snapin for Active Directory Users and Computers you should be able to expand the "tree" on the left hand side underneath the domain and select a container called Users. (Like a subfolder in an explorer window would look). In there you should see all the users of the SBS08 box and amongst them is the user you created called BESAdmin.

all of the default users are there for an sbs box (created by microsoft for sbs functions) but none of the actual "users" on the machine (not my name or no employee's or admin or besadmin, etc)

[sleeper55]

open for any suggestions at this point!

[knottyrope]

Not saying this is your issue but its some thing you can look over.
once you look over it please post any magt mast logs that you have after.


Mixed windows domain.
View Document

LDAP setup
View Document

No records were found that match the specified search criteria
View Document

Send As revoked beacuse install on DC and no local admin
The xxx34;Send Asxxx34; right is removed from a user object after you configure the xxx34;Send Asxxx34; right in the Active Directory Users and Computers snap-in in Exchange Server

BlackBerry Messaging Agent log shows "Failed to read 001e6602 reg value from the BlackBerry MAPI profile"
Also messaging agent failed to start error code 5305

BlackBerry Technical Solution Center