BES problem in a Zimbra multidomain config

[mabombo]

Our infrastructure:

We are an Internet Service Provider with the follow infrastructure:

1) One Zimbra Mail Store Server
S.O : Linux Redhat Enterprise 5 Update Update 3
Zimbra: 5.0.13_GA_2791/2792
2) One Zimbra Mta Server
S.O : Linux Redhat Enterprise 5 Update Update 3
Zimbra: 5.0.13_GA_2791/2792
3) One BES Server BlackBerry Enterprise Server Version: 4.1.6.10
S.O : Windows 2003 Server
Connector: ZCS connector for BES Beta 3

Our problem is this:

On Our Zimbra Infrastructure we have Multiple Domain, one for each customer. We have decide to use One BES Serv for the BlackBerry connectivity with our
Zimbra Mail Server.
We have installed Bes and the Connector according with the Zimbra Connector Documentation.
In particular we have created the two Mapi Profile required for the Bes (BlackBerryManager and BlackBerryServer) using an Zimbra Mail Account BESAdmin@...
that is a Global Admin, so is it possible for him view the users in all our Domain.
This is neccesary because if you want map user and blackberry device inside the Bes Server Manger, the Account must be a Global Admin to see all domain's users.
To obtain this we have changed zimbraGalInternalSearchBase from Domain to Root for the domain where the BESAdmin was created.

So our situation is this: In our Zimbra Server we have:

Zimbra Mail Domain A : zimbraGalInternalSearchBase Root
Number of User: 1 (BESAdmin@domainA.it)
Zimbra Mail Domain B : zimbraGalInternalSearchBase Domain
Number of User: N° (user1@domainB.it) ecc...
Zimbra Mail Domain C : zimbraGalInternalSearchBase Domain
Number of User: N° (user1@domainC.it) ecc...
Zimbra Mail Domain D : zimbraGalInternalSearchBase Domain
Number of User: N° (user1@domainD.it) ecc...

This it works great, The user in the domain B can see on their GAL only the user of the DOMAIN B and the same situation is for the others DOMAIN.
Only the user BESAadmin can see the users of all domain (A,B,C,D).
The PROBLEM is for the Device Black Berry because they are using the BESAdmin user to work with Zimbra.
So all BlackBerry Devices can see all user when they check the GAL to send an Email.

For Us this is a big problem, because is absolutly necessary that the user of Domain B can see only the user in this Domain.

I want to know which is the correct configuration for our GOAL. Where is Our Mistake??

Best Regards

Mauro Casiraghi

[eugener]

Please see the following bugs to find a solution:

Bug 32836 – support multi-domains in blackberry connector
Access Denied

[mpellica]

Hello,

Has this bug been squashed yet or is the unsecure workaround or having 1 BES per domain still the only solutions?

Thanks,

Manny P.