[jibi]

Anyone have a web-based user request script that utilizes the BlackBerry Resource Kit to allow a user to login to a webpage (domain authentication) and type in their email address and click a submit button in order to generate a new password for device activation?

Just curious. If you do, would you mind sharing with the forum? If not, I'll look into doing something when I get some free time.

Thanks.

[batrad]

is this possible ? any 3rd party products out there that can be used ?

thanks

[Dookie]

Going back to this topic, anyone having such a fancy webpage?
I've seen that HSBC is using really sophisticated web interface - it was shown on WES. It allowed even to download corporate approved applications. They have regulation to disallow 3rd party application download, so they overcomed this by sending policy that allows, then wait 20 minutes, pull application, resend restrictive policy.

Or everyone is waiting for RIM to come with the Web desktop SW?

[chubby_nubby]

At WES I met 2 vendors who offer this, one is called B-Nader, and the other was from conceivium, both allow users to manage their own accounts, such as activations, password resets, wipe devices, download apps.

[dmtelf]

Originally Posted by chubby_nubby

At WES I met 2 vendors who offer this, one is called B-Nader, and the other was from conceivium, both allow users to manage their own accounts, such as activations, password resets, wipe devices, download apps.

Do you have a website for B-Nader? I've googled it but can't find one.

The conceivium solution looks interesting from looking at the website which is here

[dmtelf]

Originally Posted by Dookie

Going back to this topic, anyone having such a fancy webpage?
I've seen that HSBC is using really sophisticated web interface - it was shown on WES. It allowed even to download corporate approved applications. They have regulation to disallow 3rd party application download, so they overcomed this by sending policy that allows, then wait 20 minutes, pull application, resend restrictive policy.

Or everyone is waiting for RIM to come with the Web desktop SW?

Dookie - do you know where we can find more information about the HSBC web interface including GUI pictures etc?

It'd be very interesting to see it! Unfortunately I couldn't go to WES

Thanks.

Matt

[chubby_nubby]

Originally Posted by dmtelf

Do you have a website for B-Nader? I've googled it but can't find one.

Its actually B-Nator, its a german company, here is the link.

http://isec7.com/blackberry/3rdparty...ing/index.html

[jibi]

B*Nator's website, in English, is here: www.bnator.com - Produkte

As for HSBC, it was an actual Visual Basic BlackBerry Manager replacement/improvement not a web-based thin-client management system. They have no plans of reselling it, and as seen in the demonstration, it is buggy (although the upsides far outweigh the downsides). As they said, they are a bank not a software company, so don't plan to see it surface on the market.

I'm about to start looking back into doing this using PHP once again. I've just got to find the time and possibly nag the hell out of a friend before I can get it done.

Another vendor at WES mentioned the possibility of straight SQL injections, which would be a lot easier than using the BRK, but I have no clue on how to manipulate the database in that manner.

[Alexander]

Hi,
I have written an ASP/COM+ website which utilizes the BRK in order to add/ delete/ change/ remove/ reset password/ change policies/ kill blackberry/ resend service book/ etc. Besides this it has a 'per user usage statistics' (send/received messages, MDS traffic, attachments opened, etc), a 'per BES usage statistics' (in a graph: the last 250 days)

This is exactly what the BRK tools offer: creating users and statistical info from the daily logfiles which imported into a SQL database.


Dont think direct SQL injections will work because the initialization process will create a hidden folder in the user's mailbox containing an encryptionkey/ search reference folders/ a list of messageID's which are sent to the BB/ etc.
Also the mailbox of the ServiceAccount contains a hidden folder which has info about each user (statistics, exchange servername of the user's mailbox)

With a few SQL INSERT statements those folders arent created..

Alexander

[jsplit]

Originally Posted by jibi

B*Nator's website, in English, is here: www.bnator.com - Produkte

As for HSBC, it was an actual Visual Basic BlackBerry Manager replacement/improvement not a web-based thin-client management system. They have no plans of reselling it, and as seen in the demonstration, it is buggy (although the upsides far outweigh the downsides). As they said, they are a bank not a software company, so don't plan to see it surface on the market.

I'm about to start looking back into doing this using PHP once again. I've just got to find the time and possibly nag the hell out of a friend before I can get it done.

Another vendor at WES mentioned the possibility of straight SQL injections, which would be a lot easier than using the BRK, but I have no clue on how to manipulate the database in that manner.

jibi,

you could just ask ;p

[jibi]

thanks bro. i'll write up the scope and send it over in the morn

[Dookie]

Do you have any screen caps? Or do you sell that? I might be interested

[jsplit]

Originally Posted by Dookie

Do you have any screen caps? Or do you sell that? I might be interested

Shoot me an email and I'll keep you in the loop.

[Alexander]

Ive attached a functional overview of the webapplication
As you can see it uses com+ roles to secure the functionalities/methods.

If interested i'll describe the application more detailed.

Cheers