For Kerberos to work properly, you also need to edit krb5.conf file on the server. Default configuration does not point to your domain properly, so SSO will never work.
From: [email protected] [mailto:[email protected]] On Behalf Of Yasar Er Sent: Friday, January 21, 2011 6:34 AM To: A list for BES Admin's to discuss issues, etc. Subject: [Bes-admins] Cannot access webconsole with Bes Express Hi all I have just installed BES Express and trying to access the Admin page with web console, I get a certificate error to which I accept and then presented with the login page. I enter the details using BESAdmin as username and enter the password and it just sits there no errors. I have tried used admin as username and this made no difference, I read a thread here http://www.blackberryforums.com/bes-admin-corner/221284-bes-express-5-01-install-problems.html details below , however my account options are greyed out so not sure if this is the problem or not - any ideas ? Using Active Directory Users and Computers I went to the users container and right clicked on the user BESADMIN and selected properties. Under the Account Tab I set the following items in the "Account Options" list at the bottom of that tab. Use Kerberos DES etc - Checked. This account Supports Kerberos AES 128bit encryption - checked. This account supports Kerberos AES 256bit encryption - checked. Do not require Kerberos preauthentication - UNCHECKED. I rebooted the server (Not just restarting the background services!) and finally I was able to login to the BESX Administration Service web site under BESADMIN or under my Domain Admin login ID. Hope that helps anyone else in this predicament. It was an unnecessarily long day yesterday getting this going thanks to that one stupid little problem. Best Wishes all -- Regards Yasar Er
_______________________________________________ Bes-Admins mailing list [email protected] http://www.dataoutages.com/mailman/listinfo/bes-admins http://www.dataoutages.com http://www.dataoutagenews.com RSS Feed: http://feeds.feedburner.com/Bes-admins --------------------------------- Bes-Admins mailing list is sponsored by Dataoutagenews.com. http://www.dataoutagenews.com
