How-to Scalix 11.4.6 And BES Express 5.0.1

[arsenet]

IEMSTest.exe
BlackBerry Enterprise Server Utility - IEMSTest.exe (IExchangeManageStore), Vers
ion 1.0
Copyright (c) Research In Motion, Ltd. 1999. All rights reserved.
Opening Default Message Store Mailbox - BESAdmin
{BESAdmin@arsenet.com} Unable to find user in AD

aalonso: Opening message store using
aalonso /xxx/cn=aalonso
/o=sclx01.arsenet.com/ou=First Administrative Group/cn=Configuration/cn=
Servers/cn=sclx01.arsenet.com/cn=Microsoft Private MDB
aalonso: OpenMsgStore failed (8004011d)
aalonso: CDO Server Name: sclx01.arsenet.com
aalonso: CDO Mailbox DN: aalonso /xxx/cn=aalonso
aalonso: CDO COM exception: Code = 800406fb, WCode = 04fb, Code meaning = IDispa
tch error #1275
Description = [Collaboration Data Objects - [MAPI_E_USER_CANCEL(80040113)]]
.
aalonso: CDO test failed
aalonso: Failed to check Active Directory for Send As permissions (80070057)

[cdonovan]

I'm running on Server 2003 R2...
No BES items in Event Logs, The ExcahneMAPI is in the PATH... Only ONE CDO.DLL on system

Results from omshowmn
** scalix
mulmur
VPN
mulmurtwp
bbtest
toyracing
luxwood
sewnautical

BESAdmin is a premium user... My IEMSTests are the same on ALL Premium Users and the same as arsenet's above!

Whatever it is I'm doing wrong... I'm consistent! I must have rebuilt the server over 20 times...

Thanks again!

[BaldBoy]

Are you running Scalix Hosting Edition ? I assume that as you have many mailnodes.

Have you followed all the peculiar configuration steps for Scalix Hosting Edition from this page ? (http://downloads.scalix.com/rn/scalix-besconnect-1.0.1-GA-releasenotes.html)

Scalix Hosting Edition Configuration
When using Scalix Connect for BES with Scalix Hosting Edition, BES itself also needs to be configured to run in Hosted Mode. This is needed so that address book filtering takes place, otherwise BES users will see users on other mailnodes when doing address book lookup operations.
BES Hosting Mode Prerequisites
Please make sure that the following is true:

* BES in Hosting mode can only be run with Scalix Server 11.4.5 or higher
* Scalix Server needs to be properly setup and configured for Hosting Mode
* The BESAdmin user must be created on the Scalix Server's primary mailnode

Setting up BES for Hosted Mode

1. After Installation, using regedit on the BES system, add the following Registry Key:
HKEY_LOCAL_MACHINE\Software\Research In Motion\BlackBerry Enterprise Server\Agents\HostedServer
This should be setup as a DWORD with a value of "1"
2. Restart the BES using the Windows Services control panel

I think the most relevant step is "* The BESAdmin user must be created on the Scalix Server's primary mailnode" while your besadmin account seems to be created on the VPN node which is not the primary. Your primary mailnode is "scalix".

[cdonovan]

Yes, I went through the Hosted Server stuff and that Registry entry...

I deleted and recreated the BESAdmin account. What shows that besadmin was under VPN mailnode? When I list it in SAC, it lists under my scalix mailnode.

I am rebuidling from scatch (Once again) and following your steps again!

I'll post results soon...

Thanks...

[arsenet]

i'm in hosted mode with more than 300 mailnodes.
Ihave installed BES on SBS 2003 without exchange. is compatible this scenario? because all of you talk about W2003, but no SBS. I had to unninstall exchange.

[BaldBoy]

Ihave installed BES on SBS 2003 without exchange. is compatible this scenario? because all of you talk about W2003, but no SBS. I had to unninstall exchange.

BES 5.0.1 is not your choice. If you look at this compatibility matrix you'll find SBS is not recomended (there are compatibility issues)
http://na.blackberry.com/eng/support/software/server_exchange_ver_march_05_10.pdf

Neither 5.0.2.
http://na.blackberry.com/eng/support/software/server_exchange_ver_july_06_10.pdf

SBS is a whole more functionality than simple W2003 but ... a whole lot more limitations and self-installed components.
Obviously you may try ...

[cdonovan]

Rebuild of BES again... Same results! I'm at wits end...

I find those SBS comments interesting as the only successful BES that I have running is on a client's SBS 2003 server WITH Exchange!!

[arsenet]

The Error in scalix audit:

user-signon
time 1282237368 Thu Aug 19 19:02:48 2010 +120
user-agent-id BES CalHelper 5.0.1.35 - Scalix Connect for Blackberry Enterprise Server 1.0.1.9246
client-ip 212.85.44.14
user 0 dmulero/ 55452 55452
mboxadmin-authenticator 99 /
signon-status 655


655 is password error, but, what password??? i have besadmin in BES and besadmin in scalix with same password. In scalix:
[root@sclx01 ~]# omshowu besadmin
Authentication ID: besadmin
Globally Unique ID: 1ef53000bb7bca74-2.44.58.212
User Name : BESAdmin /CN=BESAdmin
MailNode : sclx01
Internet Address : "BESAdmin" <BESAdmin@arsenet.com>
System Login : 55785
Password : set
Admin Capabilities : NO
Mailbox Admin Capabilities : YES
Language : C
Mail Account: Unlocked
Last Signon : 19.08.10 19:02:26
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidyall : NO
Recovery Folder visible : NO
User Class : Full
SIS URL : sxidx://sclx01.arsenet.com/0ef53000bb7bca74-2.44.58.212

[cdonovan]

Thanks arsenet, didn't think about turning the audit feature on. I turned it on and have this as a result. Maybe someone with more Scalix Connector knowledge can help me decifer this...

These are my results in the 'audit' log with rci set to 20. This is a result of an IEMSTest on user BB Test...

user-signon
time 1282392840 Sat Aug 21 08:14:00 2010 -240
user-agent-id Outlook 11.0.8325.0 - Scalix Connect for Blackberry Enterprise Server 1.0.1.9246
client-type 67
client-ip 174.113.43.200
user 173 BESAdmin/scalix/CN=BESAdmin 60557 60557
signon-status 0

user-signon
time 1282392846 Sat Aug 21 08:14:06 2010 -240
user-agent-id Outlook 11.0.8325.0 - Scalix Connect for Blackberry Enterprise Server 1.0.1.9246
client-type 67
client-ip 174.113.43.200
user 172 BB Test/scalix/CN=BB Test 60551 60551
mboxadmin-authenticator 173 BESAdmin/scalix/CN=BESAdmin
signon-status 0

user-signoff
time 1282392847 Sat Aug 21 08:14:07 2010 -240
user 172 BB Test/scalix/CN=BB Test
duration 1
signoff-status 0

user-signon
time 1282392847 Sat Aug 21 08:14:07 2010 -240
user-agent-id Outlook 11.0.8325.0 - Scalix Connect for Blackberry Enterprise Server 1.0.1.9246
client-type 0 unlicensed
client-ip 174.113.43.200
user 0 BB Test/ 60551 60551
mboxadmin-authenticator 99 /
signon-status 655

user-signoff
time 1282392848 Sat Aug 21 08:14:08 2010 -240
user 173 BESAdmin/scalix/CN=BESAdmin
duration 8
signoff-status 0

Notice that the sign ons for mail seem the succeed but one does fail and the client-type is 0 unlicensed! I believe this is the CDO login with sign-on status 655.

Can anyone shed some light??

[arsenet]

to use the connector, users may be premium.

[arsenet]

with IEMSTest to a premium user, give me the error, but if i do to besadmin user, is ok.

[cdonovan]

Does your besadmin pass ALL tests including CDO??

We definately have different issues... All my Premium Users including BESAdmon produce the same results. Connector logs 2 out of 3 times and NOT when using CDO. I believe this is related to the login style from Outlook or scalix-default-mail (DNS) or SSO, which I don't use or something else that I'm missing, but it definately is between the BES Connector and my server.

[arsenet]

SOLVED
All premium accounts in scalix that will use BB connector, must exist in BES AD.

[cdonovan]

Wow, that doesn't really make sense to me, but man, I could live with double entry. That, unforunately is NOT my issue. My BESAdmin account, unlike yours did NOT pass the CDO test, but I tried your way anyway, with the same result...

Again, result of IEMSTest in my Scalix audit file...
user-signon
time 1282597614 Mon Aug 23 17:06:54 2010 -240
user-agent-id Outlook 11.0.8325.0 - Scalix Connect for Blackberry Enterprise Server 1.0.1.9246
client-type 67
client-ip 174.113.43.200
user 173 BESAdmin/scalix/CN=BESAdmin 60557 60557
signon-status 0

user-signon
time 1282597619 Mon Aug 23 17:06:59 2010 -240
user-agent-id Outlook 11.0.8325.0 - Scalix Connect for Blackberry Enterprise Server 1.0.1.9246
client-type 67
client-ip 174.113.43.200
user 103 Chris Donovan/VPN/CN=Chris Donovan 60536 60536
mboxadmin-authenticator 173 BESAdmin/scalix/CN=BESAdmin
signon-status 0

user-signoff
time 1282597620 Mon Aug 23 17:07:00 2010 -240
user 103 Chris Donovan/VPN/CN=Chris Donovan
duration 1
signoff-status 0

user-signon
time 1282597621 Mon Aug 23 17:07:01 2010 -240
user-agent-id Outlook 11.0.8325.0 - Scalix Connect for Blackberry Enterprise Server 1.0.1.9246
client-type 0 unlicensed
client-ip 174.113.43.200
user 0 Chris Donovan/ 60536 60536
mboxadmin-authenticator 99 /
signon-status 655

user-signoff
time 1282597621 Mon Aug 23 17:07:01 2010 -240
user 173 BESAdmin/scalix/CN=BESAdmin
duration 7
signoff-status 0

You see, two successful logins and logoffs and ONE failed... I assume the one failed in generated by the CDO.DLL call... I believe that this is related to Balboys' login that he spoke of using SSO... Should I try and setup SSO in my environement ??? If so, is there a HOWTO for setting up SSO??

[BaldBoy]

I believe that this is related to Balboys' login that he spoke of using SSO... Should I try and setup SSO in my environement ??? If so, is there a HOWTO for setting up SSO??

Hi, in my experience SSO should NOT be activated. I had to disable it temporarily to have BES set up properly.