I am trying to get BES (on windows 2003) to talk to my GW6.5.4 server (on linux) for about 3 days. I have installed the novell NDS and GW clients on the BES server but everytime i run the key generator i get this ridculously terse error message (read from the ini file it appears) and the thing quits. Has anyone else been able to get this to work? The install docs are completely useless (nice job Rim, the install guide has about a dozen ambiguos steps and the software license is a book an inch thick! how sad is that? anyway i digress...)
any help would be appreciated because i have run out of ideas.
Sounds like you are installing version 4.0. It would be in your interest to just download sp1 from the bb website as sp1 is a full install. The key generator in sp1 is GUI, no more ini file to play with so its unlikely you will make mistakes. Also, make sure that the you have sufficient rights to edit the primary domain too.
Correct on idontknow... Sounds like you are having problems maybe finding the domain or authenticating it as a trusted server. Make sure you edit the .ini file to point to your domain path.
Ok, I have SP1 installed and the only thing between me and blissful connectivity is the trusted key. Any hints on where the GUI key generator is 'in SP1'?
Well I seem to have worked through trusted key issue: needed to point keygen .ini path domain to domain NOT po (thanks bfrye! ). So, now I have a key. However, when I try to perform users operations via the Manager authentication fails (the error tells me to check the registry for a GROUPWISE account.) Does it really mean an edirectory account (ala admin) or is it really asking for a groupwise (email) account? Format? (e.g. "cn=foo,o=bar"? foo.bar? foo?)
i couldn't figure out how to map the linux mount point so that the novell client would let the windows server see it (only PUBLIC and SYS would show up). symlinks, etc. didn't work. so, for those who may find themselves in a similar situation:
1. copied the groupwise [mail]/[GWdomainName] dir to PUBLIC/ on groupwise server
2. pointed the key generator .ini on BES server to [groupwiseserver]\PUBLIC\[GWdomainName]
3. ran the key generator app on BES server
4. updated BES with Trusted Key that was generated on BES server
5. added to BES groupwiseUserID of a user that is listed as domain adminstrator in groupwise
6. copied PUBLIC/[GWdomainName]/wpdomain.db back to [mail]/[GWdomainName] on groupwise server (this file is updated by key generator)
7. verified Trusted App in Console One on mail server, removed IP and port restrictions (they are set to the loacl machine and port 0 for some reason)
8. restarted BES services on BES server
9. added groupwise user with Manager on BES server
10. manually created password for user with Manager on BES server (i couldn't send an automatically generated password key to my handheld users via the Manager GUI. i had to create one manually. dunno why but mail with password never showed up. no errors anywhere that i could find)
11. performed enterprise activation on blackbery using password.
12. passed out (2:30 am of *second* day of figuring out this hairball)
It clearly spells out in the readme of that keygen (and in the install file) what to put in the trusted key generator :P
(I'm sorry if that sounded harsh but in reality the solution to most problems is right there, if people actually read the documentation properly).
I've put together this little checklist for this process if you wish to peruse it:
BES 4.0.1 for Novell Groupwise - Configure Trusted Application Permissions
Verify your Groupwise Primary Domain
· In ConsoleOne, right click the primary domain in your Groupwise system and then click Properties.
· Click the Groupwise -> Identification tab. The UNC path value points to the location of your Groupwise primary domain database.
Install the trusted application key generator
· Log in with a Novell administrator account that has supervisor rights to the GroupWise system.
· Copy the folder that contains the trusted application key generator located on the BlackBerry Enterprise Server product CD to the BES machine.
Create the trusted application key
The trusted application key allows the BlackBerry Enterprise Server(s) to communicate with the GroupWise mail server. One key is generated for each GroupWise mail server.
· In the key generator application directory, double click Generate_GW_Trusted_App.exe.
· Type the Groupwise Domain Path that points to the location of the GroupWise primary domain database (for example, \\server\volume\GWDomain\).
· Click Generate.
· Click Yes. The generated key is populated in the Trusted Application Key field.
· Click Yes to create a configuration file that contains the trusted application key information.
· Save the Generate_GW_Trusted_App.ini file.
If an error occurs during key generation, the error message is logged in Generate_GW_Trusted_App.ini.
Verify that the BlackBerry Enterprise Server is a trusted application
· In ConsoleOne, select your GroupWise system.
· On the Tools menu, select GroupWise System Operations > Trusted Applications.
1. having to sift through readmes is a poor form of documentation
(sorry to sound harsh but if the pile of money that went to the multilingual tomb of licensing could be spent one would think there would be enough for an update to the installation guide--the PDF version if nothing else.)
2. the 'error' that is generated in the ini file was useless. 'CONNECT ERROR'? it could have said 'Boo!' for all that helped. how about 'domain not found'? 'incorrect path to groupwise domain'? i dunno, something that that gave a hint that the server could be communicated with but the file structure target was inaccessible.
3. speaking of terms, the syntax of the installation guide was ambigous. 'account' could mean SMB account, GW account, edir(ldap) account.
in a nutshell, the steps given above are better than the installation guide hard/soft versions provided with the software.
BES on Groupwise installation problems
anyway i digress...)
). So, now I have a key. However, when I try to perform users operations via the Manager authentication fails (the error tells me to check the registry for a GROUPWISE account.) Does it really mean an edirectory account (ala admin) or is it really asking for a groupwise (email) account? Format? (e.g. "cn=foo,o=bar"? foo.bar? foo?)
