BlackBerry® Enterprise Service 10

[MatthewWong]

Hello,

We have a HA BES for Exchange 5.02 (2 nodes and 2 BES Router in DMZ zone)

We used to have problems logging in BlackBerry Administration Service but it can be solved by restarting the BES servers.

However, the primary node is now unable to login to the BlackBerry Administration Service now and the other node still very difficult to login.

On the primary node, it now got this error when we tried to login:

=====

The BlackBerry Administration Service - Native Code Container service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 60000 milliseconds: Restart the service.

=====

It does not help if we restart BAS-AS and BAS-NCC.

In the BAS-AS log, we found something like this:

=====

:

(07/20 23:01:32:742):{main} [com.rim.bes.bas.pluginmanager.PlugInManagerBean] [INFO] [BBAS-1000] {u=SystemUser, t=143} Registered plug-in id=111, name='ActiveDirectory', class="com".rim.bes.basplugin.activedirectory.ActiveDirectoryManagerBean, version='5.0.0'
(07/20 23:01:34:123):{main} [com.rim.bes.basplugin.activedirectory.ActiveDirectoryManagerBean] [WARN] [ADAU-2000] {u=SystemUser, t=145} _getActiveDirectoryGSSServiceParameters failed to get the Active Directory GSS service parameters.

*** Start of original stack trace ***

com.rim.bes.basplugin.activedirectory.CouldNotGetExchangeGCInfoException: Message: 'LOGIN ERROR:  _getExchangeGCInfo Failed to get Global Catalog server name for domain <our domain name masked> com.rim.bes.basplugin.activedirectory.CouldNotGetGCInfoException: Message: 'getGCHost could not get DC host com.rim.bes.basplugin.activedirectory.CouldNotGetDCInfoException: Message: 'getDCHost could not get domain controller information from NCC, com.rim.bes.bas.activedirectory.authentication.ActiveDirectoryAuthenticatorException: Message: 'getDomainControllerInfo Could not complete due to Exception, org.jboss.remoting.CannotConnectException: Can not get connection to server. Problem establishing socket connection for InvokerLocator [sslsocket://127.0.0.1:23843/?dataType=invocation&marshaller=org.jboss.invocation.unified.marshall.InvocationMarshaller&unmarshaller=org.jboss.invocation.unified.marshall.InvocationUnMarshaller]', nested exception: 'Can not get connection to server. Problem establishing socket connection for InvokerLocator [sslsocket://127.0.0.1:23843/?

:

=====

I cannot search any related KB about this error.  Do you have any ideas?

We have multiple Exchange Sites and multiple Exchange 2000/2003 servers.

Thanks a lot.

[knottyrope]

What is you BES using for a GC?

Runnin a 2008 GC?

[MatthewWong]

I think it is auto discover.

Should be either Windows 2000 or 2003 GC.

We tried to hard-code the GC using this key:

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\BlackBerryServer_MailStoreProfile\dca740c8c042101ab4b908002b2fe182\001e6602 but it seems not taking effect.

(point to a 2000 or 2003 GC)

TCPView shows that the BES server will connect other GC.

We also tried to use the working BES AS (on other server) to change "Servers and components"; "BlackBerry Solution topology"; "Component View"; "BlackBerry Administration Service"; and then "Microsoft Active Directory authentication" tab; and hard-code GC here.  However, it only allows us to add 2000 GC but reject 2003 GC.