Welcome!

Welcome to the official BlackBerry Support Community Forums.

This is your resource to discuss support topics with your peers, and learn from each other.

inside custom component

BlackBerry® Enterprise Service 10

Reply
Contributor
Posts: 48
Registered: ‎03-30-2011
My Device: Bold 9700 6.0.0.668
My Carrier: A1 vodafon
Accepted Solution

Unable to log in to Administration Service after besadmin PW change

Hi everyone,

 

Odd situation...

I took over a BES 5.0.3 from another provider company.

I had to change the password of the besadmin for security reasons.

Change the services' log on information also regarding the password.

Restarted services - and I'm not able to log into BAS anymore..

Services up and running, logon to server with new PW successful.

 

BAS-AS log throws the following error:

(04/19 20:03:57:635):{http-BESserver.domain.lcl%2F192.168.1.1-443-1} [com.dstc.security.kerberos.jaas.KerberosLoginModule] [ERROR] login failed: Kerberos error creating ticket: com.dstc.security.kerberos.KerberosError: Pre-authentication information was invalid
KrbError:
    Error code: 24
    Error message: null
    Client name: null
    Client realm: null
    Client time: null
    Server name: krbtgt/domain.LCL
    Server realm: domain.LCL
    Server time: Thu Apr 19 20:03:57 CEST 2012
(04/19 20:03:57:650):{http-BESserver.domain.lcl%2F192.168.1.1-443-1} [com.rim.bes.basplugin.activedirectory.ActiveDirectoryManagerBean] [INFO] [ADAU-1000] {u=SystemUser, t=3715} _loginAsLDAPUser failed to authenticate LDAP user=BESadmin, realm=domain.lcl, KDC=dc20.domain.lcl javax.security.auth.login.LoginException: Kerberos error creating ticket: com.dstc.security.kerberos.KerberosError: Pre-authentication information was invalid^^^ctrl-10^^^KrbError:^^^ctrl-10^^^^^^ctrl-9^^^Error code: 24^^^ctrl-10^^^^^^ctrl-9^^^Error message: null^^^ctrl-10^^^^^^ctrl-9^^^Client name: null^^^ctrl-10^^^^^^ctrl-9^^^Client realm: null^^^ctrl-10^^^^^^ctrl-9^^^Client time: null^^^ctrl-10^^^^^^ctrl-9^^^Server name: krbtgt/domain.LCL^^^ctrl-10^^^^^^ctrl-9^^^Server realm: domain.LCL^^^ctrl-10^^^^^^ctrl-9^^^Server time: Thu Apr 19 20:03:57 CEST 2012

 

I already found knottyrope's hint regarding:

BESAdmin AD Account under the Account tab > Account options: Select option: Use Kerberos DES encryption types for this account.

but can a password change make this necessary?

 

Also, the " Do not require Kerberos preauthentication check box" is clear.

 

The REG_SZ "JVM Option Number 3" is also set to -Xmx768m.

 

Java version used: jdk1.6.0_18

 

The logon definately worked with the old password, I used it to check some points before changing anything.

Unfortunately I cannot change back to the old password because of the password policy.

 

Any help highly appreciated!

Thanks,

Alex

Active environments:
BES 5.0.4 / Exchange2003+2010SP3 (mixed env.)
BES 5.0.4 / Exchange2010SP3
BES 10.1 / Exchange2003+2010SP3 (mixed env.)
Guru III
Posts: 32,190
Registered: ‎06-25-2008
My Device:

I'm rockin the BlackBerry DTEK60, Passport, Z30, Z10, Q10, BlackBerry Mini Stereo Speaker, 64 gig PlayBook,BT Headset HS-700

My Carrier: I am on AT&T. Please edit your Personal Profile with your DEVICE TYPE, DEVICE OS and Carrier
Contributor
Posts: 48
Registered: ‎03-30-2011
My Device: Bold 9700 6.0.0.668
My Carrier: A1 vodafon

Re: Unable to log in to Administration Service after besadmin PW change

Hello knotty,

 

The first link pointed me to the solution! Thank you very much!

 

BlackBerry Server Configuration > Select the Administration Service - AD Settings tab > Enter the new password and press Apply, Stop and then start the BAS services >> Login works like a charm! Smiley Happy

 

Thank you very much!

Saved my weekend! Smiley Wink

Cheers,

Alex

Active environments:
BES 5.0.4 / Exchange2003+2010SP3 (mixed env.)
BES 5.0.4 / Exchange2010SP3
BES 10.1 / Exchange2003+2010SP3 (mixed env.)
Guru III
Posts: 32,190
Registered: ‎06-25-2008
My Device:

I'm rockin the BlackBerry DTEK60, Passport, Z30, Z10, Q10, BlackBerry Mini Stereo Speaker, 64 gig PlayBook,BT Headset HS-700

My Carrier: I am on AT&T. Please edit your Personal Profile with your DEVICE TYPE, DEVICE OS and Carrier

Re: Unable to log in to Administration Service after besadmin PW change

your welcome, glad to have helped out

 




Click here to Backup the data on your BlackBerry Device! It's important, and FREE!


Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals

BESAdmin's, please make a signature with your BES environment info.


SIM Free BlackBerry Unlocking FAQ
Follow me on Twitter @knottyrope


Want to thank me? Buy my KnottyRope App here


BES 12 and BES 5.0.4 with Exchange 2010 and SQL 2012 Hyper V