Welcome to Port3101.org : Your BES Connection Mark forums read | View Forum Leaders
Port3101.org : Your BES Connection



Reply
LinkBack Thread Tools Display Modes
KB18651 - "LOGIN ERROR: getActiveDirectoryRootDseInformation could not get rootDSE ..
 
  #1 (permalink)  
Old 07-16-2009, 11:27 PM
hdawg's Avatar
Proprietor
 
Join Date: Nov 2008
Posts: 2,237
Blog Entries: 147
Default KB18651 - "LOGIN ERROR: getActiveDirectoryRootDseInformation could not get rootDSE ..

KB18651 - "LOGIN ERROR: getActiveDirectoryRootDseInformation could not get rootDSE attributes for URL" in BBAS-AS logs when unable to log into the BlackBerry Administration Service

Environment

  • BlackBerry® Enterprise Server version 5.0 for Microsoft® Exchange
  • SDR331659
  • SDR331663


Overview

When attempting to log into the BlackBerry Administration Service using Windows® authentication, the following error is displayed:
the username, password, or domain is not correct.
The following log line will appear in the BBAS-AS logs:
(06/23 13:21:40:906):{http-hostmachine.domain.com%2F172.16.33.77-443-2} [com.rim.bes.basplugin.activedirectory.LdapSearch] [INFO] [ADAU-1001] {u=SystemUser, t=2642} LOGIN ERROR: getActiveDirectoryRootDseInformation could not get rootDSE attributes for URL ldap://domaincontroller.domain.com:389 error=javax.naming.CommunicationException: domaincontroller.domain.com :389 [Root exception is java.net.ConnectException: Connection timed out: connect]



Cause

The BlackBerry Enterprise Server is unable to connect to the current domain controller. This is is normally caused by an incorrect DNS record(s).



Resolution

This issue has been escalated to our development team and no resolution is available. Please see the workaround below.



Workaround

Workaround 1

Direct the BlackBerry Enterprise Server to point to an available domain controller.
  1. Open the BlackBerry Server Configuration tool from Start > Programs > BlackBerry Enterprise Server.
  2. Click on the Administration Service - LDAP tab.
  3. Change the LDAP server URL to the appropriate domain controller.
  4. Input the proper LDAP login credentials, click Verify and then click Apply.
Note: As this process will currently input the LDAP password as plain text into the configuration database, follow KB18161 before attempting to log into the BlackBerry Administration Service again.
Workaround 2

Edit the hosts file on the BlackBerry Enterprise Server to contain the IP address and Fully Qualified Domain Name (FQDN) of the domain controller.
  1. From a command prompt, ping the FQDN of the domain controller and record the listed IP address.
  2. From Windows® Explorer, navigate to C:\WINDOWS\system32\drivers\etc.
  3. Open the hosts file using Notepad.
  4. Add a line with the IP address and FQDN of the domain controller.
  5. Save and close the file.
  6. From a command prompt, run ipconfig /flushdns.
  7. Restart the BAS-AS service.
__________________
http://blog.port3101.org/hdawg/

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 08-30-2009, 12:26 PM
hdawg's Avatar
Proprietor
 
Join Date: Nov 2008
Posts: 2,237
Blog Entries: 147
Default

updated
__________________
http://blog.port3101.org/hdawg/

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -4. The time now is 05:41 PM.
Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.3.2