Welcome!

Welcome to the official BlackBerry Support Community Forums.

This is your resource to discuss support topics with your peers, and learn from each other.

inside custom component

BlackBerry® Enterprise Service 10

Reply
Contributor
SchwarD
Posts: 15
Registered: ‎06-16-2011
My Device: 9800

BlackBerry Lync Intregration in different AD-Domains

Hello Everybody,

we have two AD-Domains: domain1 and domain2. Our BlackBerry Server (BES 5.0.3 MR8) HA-Pair and the service account are in domain1.

 

My problem is that I only can logon users from domain1 and not from domain2.

 

In BBIM Log the following is displayed:

For domain1 users:

 

<2012-09-19 09:29:39.614 MESZ>:[553]:<BBIM_BESSERVER_BBIM_5>:<DEBUG>:<LAYER = BBIM, EVENT = ReceivedFromDevice, SRPID = S4157336, DEVICEPIN = ---PIN---, USERID = u2d6, TAG = 7B1AAB14, SIZE = 494>
<2012-09-19 09:29:39.614 MESZ>:[554]:<BBIM_BESSERVER_BBIM_5>:<DEBUG>:<LAYER = BBIM, DEVICEPIN = ---PIN---, USERID = u2d6, THREAD = IMLoginJobPool-Thread-2, TAG = 2065345300, EVENT = INCOMING, TYPE = 1, METHOD = onLoginRequest, SERVICEID = 4, ETAG = 05 85 67 EE F8 C7 74 6B DA 3D A3 62 36 BA 25 F1 62 8C BB 27 , SIZE = 494>
<2012-09-19 09:29:39.614 MESZ>:[555]:<BBIM_BESSERVER_BBIM_5>:<INFO >:<LAYER = BBIM, DEVICEPIN = ---PIN---, USERID = u2d6, IM server = CS 2010 hosted at LyncServer.DOMAIN1.root.int>
<2012-09-19 09:29:39.614 MESZ>:[556]:<BBIM_BESSERVER_BBIM_5>:<DEBUG>:<LAYER = BBIM, LAYER = BBIM, EVENT = AddSession: u2d6>
<2012-09-19 09:29:39.614 MESZ>:[557]:<BBIM_BESSERVER_BBIM_5>:<DEBUG>:<LAYER = BBIM, LAYER = BBIM, EVENT = ActiveSessions: 1>
<2012-09-19 09:29:39.614 MESZ>:[558]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, group client <0> etag <29 9F 0E C5 41 9D E0 38 78 0B 35 36 19 1E 63 14 55 3F 5B 11 >>
<2012-09-19 09:29:39.614 MESZ>:[559]:<BBIM_BESSERVER_BBIM_5>:<INFO >:<LAYER = BBIM, DEVICEPIN = ---PIN---, USERID = u2d6, SIP URI = sip:---SIP-Adress--->
<2012-09-19 09:29:39.614 MESZ>:[560]:<BBIM_BESSERVER_BBIM_5>:<INFO >:<LAYER = BBIM, DEVICEPIN = ---PIN---, USERID = u2d6, Account = USERName@DOMAIN1.root.int>
<2012-09-19 09:29:39.614 MESZ>:[561]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, [OCSC] Received request to login with parameters userName=USERName, userDomain=DOMAIN1.root.int, sipUri=sip:---SIP-Adress---, availability=3500>
<2012-09-19 09:29:39.849 MESZ>:[562]:<BBIM_BESSERVER_BBIM_5>:<DEBUG>:<LAYER = BBIM, [OCSC] msRTCSIP-PrimaryUserAddress: sip:---SIP-Adress--->
<2012-09-19 09:29:39.849 MESZ>:[563]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, [BBCS] Invoked remote OCSC method, login, response received:>
<2012-09-19 09:29:39.849 MESZ>:[563]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, {>
<2012-09-19 09:29:39.849 MESZ>:[563]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM,     "reqId": 2,>
<2012-09-19 09:29:39.849 MESZ>:[563]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM,     "sipUri": "sip:---SIP-Adress---">
<2012-09-19 09:29:39.849 MESZ>:[563]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, }>
<2012-09-19 09:29:39.849 MESZ>:[564]:<BBIM_BESSERVER_BBIM_5>:<DEBUG>:<LAYER = BBIM, [BBCS] Registered sip:---SIP-Adress--->
<2012-09-19 09:29:40.036 MESZ>:[565]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, [OCSC] sip:---SIP-Adress--- LocalEndpointStateChangedEvent: State=Establishing>
<2012-09-19 09:29:40.036 MESZ>:[566]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, [OCSC] sip:---SIP-Adress--- RegistrationStateChangedEvent: State=Registering, Reason=None>
<2012-09-19 09:29:40.599 MESZ>:[567]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, [OCSC] sip:---SIP-Adress--- RegistrationStateChangedEvent: State=Registered, Reason=None>
<2012-09-19 09:29:41.005 MESZ>:[568]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, [OCSC] sip:---SIP-Adress--- LocalEndpointStateChangedEvent: State=Established>
<2012-09-19 09:29:41.067 MESZ>:[569]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, [OCSC] BlackBerry OCSConnector is connected to OCS 2010>
<2012-09-19 09:29:41.130 MESZ>:[570]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, DEVICEPIN = ---PIN---, USERID = u2d6, Event Handler = [BBCS] Processing endpointEstablished event for sipUri=sip:---SIP-Adress--->

 

 

 For Domain2 Users:

 

<2012-09-19 09:24:57.422 MESZ>:[462]:<BBIM_BESSERVER_BBIM_5>:<DEBUG>:<LAYER = BBIM, EVENT = ReceivedFromDevice, SRPID = S4157336, DEVICEPIN = ---PIN---, USERID = u315, TAG = 49B0C0CB, SIZE = 389>
<2012-09-19 09:24:57.422 MESZ>:[463]:<BBIM_BESSERVER_BBIM_5>:<DEBUG>:<LAYER = BBIM, DEVICEPIN = ---PIN---, USERID = u315, THREAD = IMLoginJobPool-Thread-1, TAG = 1236320459, EVENT = INCOMING, TYPE = 1, METHOD = onLoginRequest, SERVICEID = 4, ETAG = dummyEtag, SIZE = 389>
<2012-09-19 09:24:57.438 MESZ>:[464]:<BBIM_BESSERVER_BBIM_5>:<INFO >:<LAYER = BBIM, DEVICEPIN = ---PIN---, USERID = u315, IM server = CS 2010 hosted at LyncServer.DOMAIN1.root.int>
<2012-09-19 09:24:57.438 MESZ>:[465]:<BBIM_BESSERVER_BBIM_5>:<DEBUG>:<LAYER = BBIM, LAYER = BBIM, EVENT = AddSession: u315>
<2012-09-19 09:24:57.438 MESZ>:[466]:<BBIM_BESSERVER_BBIM_5>:<DEBUG>:<LAYER = BBIM, LAYER = BBIM, EVENT = ActiveSessions: 1>
<2012-09-19 09:24:57.438 MESZ>:[467]:<BBIM_BESSERVER_BBIM_5>:<INFO >:<LAYER = BBIM, DEVICEPIN = ---PIN---, USERID = u315, SIP URI = sip:---SIP-Address--->
<2012-09-19 09:24:57.438 MESZ>:[468]:<BBIM_BESSERVER_BBIM_5>:<INFO >:<LAYER = BBIM, DEVICEPIN = ---PIN---, USERID = u315, Account = DOMAIN2\USERName>
<2012-09-19 09:24:57.453 MESZ>:[469]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, [OCSC] Received request to login with parameters userName=USERName, userDomain=DOMAIN2, sipUri=sip:---SIP-Address---, availability=3500>
<2012-09-19 09:24:57.813 MESZ>:[470]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, [BBCS] Invoked remote OCSC method, login, response received:>
<2012-09-19 09:24:57.813 MESZ>:[470]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, {>
<2012-09-19 09:24:57.813 MESZ>:[470]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM,     "errorCode": 71,>
<2012-09-19 09:24:57.813 MESZ>:[470]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM,     "errorText": "login attempted for a user not enabled for communications",>
<2012-09-19 09:24:57.813 MESZ>:[470]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM,     "exceptionName": "UserNotEnabledException",>
<2012-09-19 09:24:57.813 MESZ>:[470]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM,     "reqId": 2,>
<2012-09-19 09:24:57.813 MESZ>:[470]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM,     "sipUri": "sip:---SIP-Address---">
<2012-09-19 09:24:57.813 MESZ>:[470]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = BBIM, }>
<2012-09-19 09:24:57.813 MESZ>:[471]:<BBIM_BESSERVER_BBIM_5>:<WARNG>:<LAYER = BBIM, [BBCS] sip:---SIP-Address--- login exception: UserNotEnabledException>
<2012-09-19 09:24:57.813 MESZ>:[472]:<BBIM_BESSERVER_BBIM_5>:<DEV  >:<LAYER = SCM, Updated Health param: current[BBIM_CON_TO_IM_SERVER_SUCCESFUL]=[1]>
<2012-09-19 09:24:57.813 MESZ>:[473]:<BBIM_BESSERVER_BBIM_5>:<DEBUG>:<LAYER = BBIM, DEVICEPIN = ---PIN---, USERID = u315, TAG = 593362944, EVENT = OUTGOING, TYPE = 2, METHOD = writeLoginResponse, RESULT = 304, SIZE = 10>

 

I tried many things but I don't get it working.

I wonder because I get the "UserNotEnabledException".

The users are enabled and can log on to the windows client without any problems.

 

Does anyone have an idea about that problem?

Thanks and Regards

Daniel

Contributor
SchwarD
Posts: 15
Registered: ‎06-16-2011
My Device: 9800

Re: BlackBerry Lync Intregration in different AD-Domains

 

Lync-Server, BlackBerry Enterprise Servers and BlackBerry Service Account are in Domain1.

 

Guru III
knottyrope
Posts: 30,779
Registered: ‎06-25-2008
My Device:

I'm rockin the BlackBerry Passport, Z30, Z10, Q10, BlackBerry Mini Stereo Speaker, 64 gig PlayBook, BlackBerry Wireless Headset HS-700

My Carrier: I am on AT&T. Please edit your Personal Profile with your DEVICE TYPE, DEVICE OS and Carrier

Re: BlackBerry Lync Intregration in different AD-Domains

are both domains in the same exchange org?

 

 

 




Click here to Backup the data on your BlackBerry Device! It's important, and FREE!


Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals

BESAdmin's, please make a signature with your BES environment info.


SIM Free BlackBerry Unlocking FAQ
Follow me on Twitter @knottyrope


Want to thank me? Buy my KnottyRope App here


BES 12 and BES 5.0.4 with Exchange 2010 and SQL 2012 Hyper V


Trusted Contributor
BoldOperator
Posts: 160
Registered: ‎10-02-2010
My Device: BlackBerry Z10

Re: BlackBerry Lync Intregration in different AD-Domains

This looks like your Lync Pool in Domain 1 is not enabled for Domain 2 users.

 

Can users in Domain 2 sign into Lync using the Desktop Client?  Are they connecting to the Lync Pool in Domain 1 or Domain 2 when they do this?

Contributor
SchwarD
Posts: 15
Registered: ‎06-16-2011
My Device: 9800

Re: BlackBerry Lync Intregration in different AD-Domains

Yes, both domains are in the same exchange org.
Contributor
SchwarD
Posts: 15
Registered: ‎06-16-2011
My Device: 9800

Re: BlackBerry Lync Intregration in different AD-Domains

our only Lyncpool is in Domain1.

Every Desktop Client signs in to Domain1.

The most of our users are in Domain2 and everybody signs in Domain1.

 

Contributor
SchwarD
Posts: 15
Registered: ‎06-16-2011
My Device: 9800

Re: BlackBerry Lync Intregration in different AD-Domains

I just setted up a new BlackBerry Server with a Test-SRP in Domain1.

Configured the Collaboration Service.

Unfortunally I can log in users from Domain1 AND Domain2.

But the configuration is the same?!?

I don't understand that...

Contributor
SchwarD
Posts: 15
Registered: ‎06-16-2011
My Device: 9800

Re: BlackBerry Lync Intregration in different AD-Domains

its getting more wierd...

Installed the maintenance release to the Test-BES.

Now I have the same failure...

Contributor
SchwarD
Posts: 15
Registered: ‎06-16-2011
My Device: 9800

Re: BlackBerry Lync Intregration in different AD-Domains

Does it make sense to install the Collaboration service as a remote component and don't patch this component?
Trusted Contributor
BoldOperator
Posts: 160
Registered: ‎10-02-2010
My Device: BlackBerry Z10

Re: BlackBerry Lync Intregration in different AD-Domains

There was a fucntional change in how the cerificate is identified in, I think, 5.0.3 MR5. Check your cert and confirm the latest requirements. KB24960

http://www.blackberry.com/btsc/KB24960