06-26-2013 07:39 AM
Hi testing the usage of browsing intranet via PAC file according to BB instructions.
It worked, then didn't, then worked then didn't. Nothing I can see in the logs, events to point me anywhere logical.
Strangely also the logs on the BES server showed pac returns when successful, and now don't either successful or not. No change in logging has been made.
When it doesn't work no User authentication prompts and I get a TMG error 1202 message. No change in TMG. I've been searching for days on the internet and BB knowledge articles to no avail.
Has anyone else experience this bizarre issue and can provide me with info\explanation or fix.
07-02-2013 09:00 AM
Welcome to the forums and thank you for your question.
Depending on the PAC file configuration and your environments configuration of the Threat Management Gateway or TMG, it would appear that the intermittent denial would be best researched by first accessing the environments logs at the time of the denial; such as the TMG network, ISA, etc.
The BlackBerry Enterprise Server logs for the most part, do not offer detailed information on instances such as this, other than to mainly state a failure to connect, login, etc.
The BlackBerry Enterprise Server does not change the way in which it tries to communicate, unless otherwise edited to do so by the BlackBerry Enterprise Server Administrators. When using the PAC file, you have essentially edited the route in which BlackBerry Enterprise Server is to take for specific traffic tasks, looking at the traffic paths in which the BlackBerry Enterprise Server has to utilize to exit the environment, tracing that path and reviewing the data for each point or interaction will lead you to the cause and resolution.
Let us know if you have any further questions regarding this specific request.
07-02-2013 09:09 AM
07-03-2013 08:56 AM
Hi anyone that is reading this. I just need some clarity on the pac file script and the "Univeral Resource Locator" entry in the Proxy Mapping tab.
I have the PAC with an entry that states
if (shExpMatch(url, "http://test.dept.co.uk/*))
but the URL field specified above in the Proxy Mapping tab is popluated this way... -
Will this have an impact and perhaps explain my issue?
Additionally am I required to set spn property for the BB service account associated to the MDS service?
07-22-2013 11:41 AM - edited 07-22-2013 11:43 AM
I have 2 devices 9700 and 9790,
the 9700 works fine (always) using the PAC file.
the 9790 only works after refreshing about 5 times.
tmg logs show the pac files gets ignored and attempts the stipulated url (within the pac file) using an internet service account and thus the tmg blockage.
If I edit the device policy to use the pac url as homepage I have no problems but that cannot be the case. Browser version for 9790 is 7.0 and on this device there is no other browser to select.
I think this this is a browser software related issue that I cannot resolve.