[Raiden]

what services should be restarted after the change ipconfig /flushdns and ipconfig /registerdns??

[Raiden]

BAS-Config file

################################################## ################################################## ###############################
##
## This file contains properties for BAS main configuration.
##
################################################## ################################################## ################################

#Fri Mar 20 03:06:42 EDT 2009
KeyGenMaxAttempts=5
emailDomino_serverUrl=BMS02-VM4YYZ.core.sqm.testnet.rim.net
WirelineActivationPolicy=WIRELINE_ACTIVATE_ANY_PIN
emailExchange_ldapSearchBase=DC=DomainDnsZones,DC= vodacom,DC=corp
managementServer_namingProviderURL=localhost\:1109 9
NCC_namingProviderURL=localhost\:21099
REMOTE_EXCEPTION_CHECK_CLASSES_SQLServer=com.rim.b es.bas.remoteexceptioncheck.SQLServerExceptionRemo teExceptionCheck,com.rim.bes.bas.remoteexceptionch eck.NonSerializableRemoteExceptionCheck,com.rim.be s.bas.remoteexceptioncheck.PersistenceExceptionRem oteExceptionCheck
WirelessActivationPasswordPolicy=true
emailExchange_ldapUrl=ldap://zamdc01003.vodacom.corp:389
WirelineDeviceBackupRestorePolicy=true
emailDomino_useSSL=false
WirelineDeviceBackupDomainRestrictionsPolicy=
DTONonPlugInCollectionKeyFieldNames=com.rim.bes.ba s.dto.WLANConfigurations\:policyId,com.rim.bes.bas .dto.VPNConfigurations\:policyId,com.rim.bes.bas.d to.VOIPConfigurations\:policyId,com.rim.bes.basplu gin.emaildomino.dto.MailstoreDomain\:id,com.rim.be s.basplugin.mdscs.dto.PushRule\:ruleName,com.rim.b es.basplugin.mdscs.dto.PullRule\:ruleName
REMOTE_EXCEPTION_CHECK_CLASSES_DB2=com.rim.bes.bas .remoteexceptioncheck.NonSerializableRemoteExcepti onCheck,com.rim.bes.bas.remoteexceptioncheck.Persi stenceExceptionRemoteExceptionCheck

[x0rerror]

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
10.x.x.x myldapserver.mydomain.inc

replace the x's with your proper IP and the myldap server entry with the hostname of your ldap server.

[Raiden]

Thank x0error

i have tried this will no joy

My hosts file looks like below

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost
IP.IP.IP.IP DC.COMPANY.corp

[Raiden]

should you insert ldap://servername?

[Raiden]

have insertered
127.0.0.1 localhost
IP.IP.IP.IP DC.COMPANY.corp

Still now joy...

[baltee]

This bug is quite well know. After numerous installs, many with the same issue, I've been forcing Blackberry authentication as opposed to A/D authentication and everyone since has been quite happy. I'll keep doing so until RIM comes out with a fix..... If you're doing a reinstall to change authentication methods, you'll either have to manually edit the database, wipe it, or create a new one, to switch. (If you cannot currently log into the console.) Hope it helps

Cheers

[SEP]

shame the web desktop doesnt work would be invaluable for allowing users to re-activate themselves. Shame a vital part of it has been screwed up. Hope they are fully aware of it and have a fix soon

Have it in failover mode. So have reinstalled one bes not touching the ldap query and have added details in hosts file. Then did the same with other bes. Still no luck. With all this leaving the Db as was, details must be still in there...

[GrandMstrBud]

I can logon but I get this error message.


Status

Complete the setup process
The necessary controls have not been installed.

The functionality of the BlackBerry® Web Desktop Manager is unavailable until the necessary controls are installed successfully.

Try installing the necessary controls again.

Note: The BlackBerry Web Desktop Manager requires Microsoft® Internet Explorer® Version 6.0 or greater with JavaScript® turned on.


I've tried installing the controls again and again and it says IE has blocked this site from using an ActiveX control in an unsafe manner.

[nobody7290]

Try explorer 6.x, 7 should work somehow, but I dont think that 8.x does (at least not if you dont tweak the browsers settings - security, and compatibility mode)

[GrandMstrBud]

I got it, I had to add it to the trusted sites for some reason in IE.

[SEP]

GrandMstrBud, so you've got this web desktop to work using AD credentials now?

Which IE are you using and what procedure did you do to get this to work?

yet to find clear step procedure on how to get a full default BES installation with non working web desktop ad login to it all working

[Raiden]

Hi Guys,
I just found this on the release notes for BES 5.0 MR1 - this could solve this issue...

BlackBerry Configuration Panel
SDR 299265
In BlackBerry Enterprise Server version 5.0, if you specified the LDAP password using the BlackBerry Configuration Panel, the password was entered into the BlackBerry Configuration Database in plain text. As a result, the BlackBerry Administration Server could not read the password, and you could not log into the BlackBerry Administration Service using Windows authentication.

In BlackBerry Enterprise Server version 5.0 MR1, this issue is resolved.


I am loading Mr1 tomorrow and will let all know...

[nobody7290]

Regarding beeing not able to authenticate because of a wrong stored ldap passwort, this is fixed in the update.

But this thread deals with the issue that the bb- server is unable to locate the ldap server.

If this is not accidenatlly fixed with the upgrade too, I dont expect that this helps.

[SEP]

cool will try this

edit: oh its been out for a month now. Is it all ok? Last time I installed a MR it screwed everything up with no rollback.

edit2: see because they can't even get the installer to work.
So you type as it is "msiexec.exe /update besx500mr1.msp_file_location" because it didnt work?

[SEP]

what did people do to get MR1 to work on server 2008?

[SEP]

ok got it working but theres a surprise web desktop still doesnt work and now neither does the monitoring service page...

[nobody7290]

SEP:
Do you have another webserver running at port 443 on this machine ?
IIS with enabled SSL on the standard port is not possible

[SEP]

hey nobody. could you explain a little more. I am using the defaults so
Administration Service :443/webconsole/login

Web Desktop Manager :443/webdesktop/login

Monitoring Service :8443/webconsole/app

I could access these pages before MR1 but since all but Monitoring page works.

bes server 2008-IE 7 & my PC with IE8

Also all still accessible only via bes admin account not windows user credentials.
LDAP server info is in place and correct. However now on verifying the ldap bes admin password it says "it is valid" but "invalid parameters" when clicking <apply><ok>

[nobody7290]

This must be something else if it worked before.
I thought, you maybe have an instance of microsoft internet server running with ssl enabled.

After you installed update, did you again enter the ldap password in the controlpanel of the server ?

I dont have a good idea what to do besides looking into the tomcat/apache logfiles.