BES 5 - Can no longer access BAS after SP1 update

[Blackbezza]

Hi Guys,

I applied the blackberry SP1 update to BES 5. rebooted and all the devices are working.

However now i cant access the BAS webpage and just get "cannot display webpage". Checked/restarted the services and it continues. I tried the previous method like changing the webpage port and looked at the fix related to this issue when changing to mr2 etc but they have not worked.

Just fyi - The server is single NIC.

Also when i look in my log repository there is no BBAS-AS log. the last one was on the day the upgrade was done with the log ending with:

Pausing Coyote HTTP/1.1 on http-server.domain.name%2F<IPADDRESS>
(01/12 14:09:26:278):{JBoss Shutdown Hook} [org.apache.coyote.http11.Http11Protocol] [INFO] Pausing Coyote HTTP/1.1 on http-server.domain.name%2F<IPADDRESS>
(01/12 14:09:27:278):{JBoss Shutdown Hook} [org.apache.catalina.core.StandardService] [INFO] Stopping service jboss.web
(01/12 14:09:27:309):{JBoss Shutdown Hook} [org.apache.coyote.http11.Http11Protocol] [INFO] Stopping Coyote HTTP/1.1 on http-server.domain.name%2F<IPADDRESS>:18180
(01/12 14:09:27:309):{JBoss Shutdown Hook} [org.apache.coyote.http11.Http11Protocol] [INFO] Stopping Coyote HTTP/1.1 on http-server.domain.name%2F<IPADDRESS>:443

so it seems as though it was stopped and is not coming back?

[GaryCutri]

Hi,

Assuming you completed the upgrade correctly you need to wait 5 to 10 minutes after the services start before you can access the BlackBerry Administration Service. Have you waited this long before trying to access the BES?

Thanks,

Gary

[Blackbezza]

i asume it was done correctly(followed the setup from start to finish) and no errors were reported.

It has been 2 days.

[Blackbezza]

The server application event log displays this:

The description for Event ID ( 4 ) in Source ( BAS-AS ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: BAS-AS.

And an Application Error:
Faulting application BAS-AS.exe, version 1.2.3.0, faulting module BAS-AS.exe, version 1.2.3.0, fault address 0x00005d7f.

I just re installed the service pack incase something went wrong. no luck

[GaryCutri]

The server application event log displays this:

The description for Event ID ( 4 ) in Source ( BAS-AS ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: BAS-AS.

And an Application Error:
Faulting application BAS-AS.exe, version 1.2.3.0, faulting module BAS-AS.exe, version 1.2.3.0, fault address 0x00005d7f.

I just re installed the service pack incase something went wrong. no luck

I recommend that you contact the Three BlackBerry helpdesk as they should be able to escalate you to RIM.

[BASAdmin]

Hi,

How is your BES components installed? Did you install BAS with the BES or in a separate server. if they are installed separately which one of them upgraded to sp1 first.

thanks

[Blackbezza]

After over a week of back and forth with RIM tech finally found the issue.

There were multiple compounded issues. The first.

After upgrading to sp1 the web keystore stuff is treated differently - the following key was preventing the bas-as.exe from running correctly (it sat at ~20MB once launched).

HKCU\Software\Research In Motion\BlackBerry Enterprise Server\Administration Service\Key Store\CacertsKeyStorePass

Removed the CacertsKeystorePass string and relaunched the BAS-AS.exe and it started climbing as expected to 300MB +

After that, still couldn't load the web interface and looked at the logs and found the following error:

Error initializing endpoint java.io.IOException: Keystore was tampered with, or password was incorrect

So i followed the following KB:
View Document

It still didn't work, after a long time of mucking around it turns out that SP1 requires the password in the webkeygen.bat process and not the encrypted password in the registry (the KB advises to copy whats in the registry and use that on the bat run).

After that was done the interface loaded correctly. However i can't login with AD service account due to username/password incorrect error. The BAS-AS log shows the following:

....LDAP: error code 32 - 0000208D: NameErr: DSID-031001A8, problem 2001 (NO_OBJECT), data 0, best match of:^^^ctrl-10^^^^^^ctrl-9^^^''^^^ctrl-10^^^^^^ctrl-0^^^]....

This is fixed by the following KB:
View Document

However i cant perform that workaround as i had ONLY Active Directory athentication. So it seemed as though i was in a catch 22.

RIM eventually came back with a SQL script to create a local BAS user so that i may login locally and perform the workaround.


Here is the script, you can run this against your BesMgmt DB and it will create/edit the BAS administrator account (Username:admin Password: blackberry).

/*+---------------------------------------------------------------------------
 *  Support Script: BASAuthentication.sql
 *  Created: 07/09/2009
 *  Tracked via : 
 *  Description: The script performs a stored procedure to create or edit 
 *               the BAS administrator user account. (admin)
 *
 *  Instructions for running script:
 *	1.  Backup database
 *	2.  Edit items under the editing section. (By default none required)
 *  3.  Run the script on the BES configuration database
 *+--------------------------------------------------------------------------*/

DECLARE 
	@DisplayName              VARCHAR(256),
	@Authentication           VARCHAR(256),
	@AuthenticatorTypeId      INT,
	@AuthenticatorInstanceId  INT,
	@ExternalAuthenticatorId  VARCHAR(255),
	@EncryptedPassword        VARCHAR(256)
    	
/************************************************************
Start of editing required section
*************************************************************/

SET @DisplayName = 		'System Administrator'			-- Display name (Not always used)
SET @Authentication = 		'BAS'					-- 'BAS' for BAS authentication
SET @EncryptedPassword =	'2951a982f568f15567b7c6e0e50990b9' 	-- Encrypted string of password 'blackberry'


/************************************************************
End of editing required section
*************************************************************/

IF @Authentication LIKE 'BAS'
BEGIN
	SET @AuthenticatorTypeId =	0				-- Set to 0 for BAS
	SET @AuthenticatorInstanceId = 	0				-- Set to 0 for BAS
	SET @ExternalAuthenticatorId = NULL
	
	EXEC SetUpBASorADAuthentication @DisplayName, @AuthenticatorTypeId, @AuthenticatorInstanceId, @ExternalAuthenticatorId, @EncryptedPassword
	
END
GO

[cashmo]

I too cannot login to BAS with an AD acct. Tried using that script but get the following error in MS SQL Server Management Studio Express.

Msg 2812, Level 16, State 62, Line 43
Could not find stored procedure 'SetUpBASorADAuthentication'.

Are you using SQL 2005 Express as you DB?

[GaryCutri]

I too cannot login to BAS with an AD acct. Tried using that script but get the following error in MS SQL Server Management Studio Express.

Msg 2812, Level 16, State 62, Line 43
Could not find stored procedure 'SetUpBASorADAuthentication'.

Are you using SQL 2005 Express as you DB?

Hi,

Download the "AddBASAuthentication.zip" attachment from the link below > extract the contents to your Blackberry Server > Ensure you are logged on as BESadmin > Double click "AddBASAuthentication.sql".

Exchange 2010 BES 5.0.x Install Guide

Thanks,

Gary

[b5turbo]

After upgrading to sp1 the web keystore stuff is treated differently - the following key was preventing the bas-as.exe from running correctly (it sat at ~20MB once launched).

Removed the CacertsKeystorePass string and relaunched the BAS-AS.exe and it started climbing as expected to 300MB +

Thanks for this tip, it fixed an issue at a customer's site!