BES Problems...

[davidfsmith]

been working with support, have re-installed all....

only thing of note seems to have been the server clock about 4 minutes slow, this has been corrected... in the process of adding users now, although doing them 1 at a time, and not too many in a single hit... will report back how it goes.

[centrex]

Originally Posted by ajcody

You mentioned, "Even with the GAL set to do ROOT searches we BES won't show any other domains in the address book other than the one that the actual BES admin user is part of."

Do you have both of the below variables set to ROOT for the domain or just one?

zimbraGalInternalSearchBase zimbraGalSyncInternalSearchBase

zmprov gdi [domainname] variable

If you have to set the Sync one to ROOT. Log into Outlook on the BES box as both BES account and then do a GAL sync. Do the other domains show up now?

I am working on the same problem (trying to get the BES admin user to see all domains served by Zimbra so I can give Blackberry love to more than just one domain).

Assuming my BES admin user is besmgr@example2.com and set as zimbra admin (not domain admin), should running this as zimbra user produce any usable output:

zmprov gdi example2.com zimbraGalSyncInternalSearchBase

I am getting this:

ERROR: service.INVALID_REQUEST (invalid request: unknown key: example2.com) (cause: java.lang.IllegalArgumentException No enum const class com.zimbra.cs.account.Provisioning$DomainBy.exampl e2.com)

Same goes for

zmprov gdi example2.com zimbraGalInternalSearchBase

[y@w]

You're just trying to view the current settings? You'll want to use 'gd' rather than 'gdi' in this case.

[centrex]

I got things going now with a BlackBerryServer and BlackBerryManager profile that connect to a Zimbra admin account that's set to search the GAL root.

Now I can add users from any of the Zimbra hosted domains to BES, but if any of these users compose an e-mail and do a GAL lookup, they obviously get results from all domains on that Zimbra server.

Dang... I had not thought of that...

Seems the status quo right now is that you either have BES limited to one Zimbra domain or you end up with all users being able to see each other across domains.

[y@w]

Yup... that's pretty much how it goes.

So.. Could you have the BlackBerryServer and BlackBerryManager accounts on separate domains and block access to the entire GAL while doing lookups while allowing the Manager account to add anyone?