Configuring BlackBerry Device Service with DSfW

The attributes listed below may not be populated on user accounts there for will need to be added.

These attributes can be mapped to the fields of their choice in BlackBerry Administration Service if they are available in other AD fields:

displayName - Users name

mail - e-Mail address

The attributes below should already be populated when the user is samified by DSfW

samAccountName

distinguishedName

objectGUID

During installation, select BlackBerry Administration Service for the administration account rather than Active Directory, if Active Directory is selected, it may produce an error involving a missing Global Catalog server, this can be ignored and BlackBerry Administration Service account will be the only choice.

Add an Active Directory enabled account as an administrative account after the installation completes and the services are running.

Log into the BlackBerry Administration Service console, click on Create a User, and then initiating the search.

The samified users with the attributes discussed above properly populated should be returned.

Before actually adding a user account, please follow the BlackBerry Device Service - Administration Guide to prepare the service to host and manage the BlackBerry enabled accounts.

Errors regarding the Global Catalog servers encountered during the install can be ignored.  The April 2013 Maintenance Patch along with removing the 'Require TLS for Simple Binds with Password' option on the ldap group object will resolve this error.  

Removing the 'Require TLS for Simple Binds with Password' can be acomplished using iManager or by running the following command:

ldapconfig -s 'Require TLS for Simple Binds with Password=no'