
07-16-2009, 11:27 PM
|
 |
Proprietor
|
|
Join Date: Nov 2008
Posts: 2,237
|
|
KB18651 - "LOGIN ERROR: getActiveDirectoryRootDseInformation could not get rootDSE ..
KB18651 - "LOGIN ERROR: getActiveDirectoryRootDseInformation could not get rootDSE attributes for URL" in BBAS-AS logs when unable to log into the BlackBerry Administration Service
Environment
- BlackBerry® Enterprise Server version 5.0 for Microsoft® Exchange
- SDR331659
- SDR331663
Overview
When attempting to log into the BlackBerry Administration Service using Windows® authentication, the following error is displayed:
the username, password, or domain is not correct.
The following log line will appear in the BBAS-AS logs:
(06/23 13:21:40:906):{http-hostmachine.domain.com%2F172.16.33.77-443-2} [com.rim.bes.basplugin.activedirectory.LdapSearch] [INFO] [ADAU-1001] {u=SystemUser, t=2642} LOGIN ERROR: getActiveDirectoryRootDseInformation could not get rootDSE attributes for URL ldap://domaincontroller.domain.com:389 error=javax.naming.CommunicationException: domaincontroller.domain.com :389 [Root exception is java.net.ConnectException: Connection timed out: connect]
Cause
The BlackBerry Enterprise Server is unable to connect to the current domain controller. This is is normally caused by an incorrect DNS record(s).
Resolution
This issue has been escalated to our development team and no resolution is available. Please see the workaround below.
Workaround
Workaround 1
Direct the BlackBerry Enterprise Server to point to an available domain controller.
- Open the BlackBerry Server Configuration tool from Start > Programs > BlackBerry Enterprise Server.
- Click on the Administration Service - LDAP tab.
- Change the LDAP server URL to the appropriate domain controller.
- Input the proper LDAP login credentials, click Verify and then click Apply.
Note: As this process will currently input the LDAP password as plain text into the configuration database, follow KB18161 before attempting to log into the BlackBerry Administration Service again.
Workaround 2
Edit the hosts file on the BlackBerry Enterprise Server to contain the IP address and Fully Qualified Domain Name (FQDN) of the domain controller.
- From a command prompt, ping the FQDN of the domain controller and record the listed IP address.
- From Windows® Explorer, navigate to C:\WINDOWS\system32\drivers\etc.
- Open the hosts file using Notepad.
- Add a line with the IP address and FQDN of the domain controller.
- Save and close the file.
- From a command prompt, run ipconfig /flushdns.
- Restart the BAS-AS service.
__________________
http://blog.port3101.org/hdawg/
The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.
|