KB03193 - Configure LDAP for the BlackBerry Enterprise Server

Environment

• BlackBerry® Enterprise Server version 3.5 to 5.0
• Microsoft® Exchange

---

Overview

The LDAPDomain, LDAPSearch, LDAPport, LDApssl, and LDAPALPSearch registry entries are used to configure the Lightweight Directory Access Protocol (LDAP) for the BlackBerry Enterprise Server. These registry entries allow the BlackBerry Enterprise Server to use LDAP instead of the default Messaging Application Programming Interface (MAPI) for specific functions.
Warning: The following procedure involves modifying the computer registry. This can cause substantial damage to the Windows® operating system. Document and back up the registry entries prior to implementing any changes.

---

LDAPDomain

The LDAPDomain entry configures the BlackBerry Enterprise Server to use a specific domain when performing LDAP searches.
Note: In an environment with multiple domains, the LDAPDomain key is required.

1. Open the Registry Editor by clicking Start > Run.
2. Type regedit and click OK.
3. Go to the following path in the registry:
   • For BlackBerry Enterprise Server version 4.0 and later HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Agents
   • For BlackBerry Enterprise Server versions 3.5 and 3.6 HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Servers\
4. Create a new String Value called LDAPDomain and change the entry in the Value data field to the Global Catalog and Port that the BlackBerry Enterprise Server uses. If the BlackBerry Enterprise Server must connect to multiple Global Catalogs for name resolution, specify all of them in this value with their fully qualified domain names (FQDNs) as follows: : : :
5. Press Enter.

---

LDAPSearch

The LDAPSearch entry is used for address resolution only.

1. Go to the following path in the registry:
   • For BlackBerry Enterprise Server version 4.0 and later HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Agents
   • For BlackBerry Enterprise Server versions 3.5 and 3.6 HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Servers\
2. Create a new DWORD Value called LDAPSearch and change the entry in the Value data field to 1.
3. Select the Hexadecimal option.
4. Press Enter.

---

LDAPport

The LDAPport entry configures the BlackBerry Enterprise Server to use a specific LDAP port for searches.

1. Go to the following path in the registry:
   • For BlackBerry Enterprise Server version 4.0 and later HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Agents
   • For BlackBerry Enterprise Server versions 3.5 and 3.6 HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Servers\
2. Create a new DWORD Value called LDAPport and change the entry in the Value data field to the specific LDAP port.
3. Press Enter.

---

LDAPssl

The LDAPssl entry enables the use of LDAP over Secure Sockets Layer (SSL) for searches or lookups.

1. Go to the following path in the registry:
   • For BlackBerry Enterprise Server version 4.0 and later Go to HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Agents
   • BlackBerry Enterprise Server versions 3.5 and 3.6 Go to HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Servers\
2. Create a new DWORD Value called LDAPssl and change the entry in the Value data field to 1.
3. Select the Hexadecimal option.
4. Press Enter.

---

LDAPALPSearch

The LDAPALPSearch entry is used for address lookups from the BlackBerry smartphone.
Note: This entry only applies to BlackBerry Enterprise Server software version 4.1 and later.

1. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion\BlackBerry Enterprise Server\Agents.
2. Create a new DWORD Value called LDAPALPSearch and change the entry in the Value data field to 1.
3. Select the Hexadecimal option.
4. Press Enter.

The BlackBerry Controller must be restarted before any changes will take effect.
Important: Restarting certain BlackBerry Enterprise Server services will delay email message delivery to BlackBerry smartphones. For more information, see KB04789.

__________________
Si MCTS
Co-Owner
Port3101 - Your BES Connection

Don't forget, you can follow us on Twitter

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.