You can configure the following options when you configure the BlackBerry Enterprise Server to use LDAP to retrieve email
addresses and organizer data:
• Windows domain that the Microsoft Active Directory uses
• whether to use LDAPS to connect to Microsoft Active Directory
• timeout value for the connection to Microsoft Active Directory
• which contacts the BlackBerry Enterprise Server cannot retrieve, if required
• whether to support a Microsoft Active Directory that you configured for multi-tenancy, if required
• custom field to use to resolve email addresses for Hosted BlackBerry services, if required
• baseDN of the Microsoft Active Directory tree, if required
Related information
Configuring a Hosted BlackBerry services environment,
409
Configure the BlackBerry Enterprise Server to connect
to Microsoft Active Directory
1.
On the computer that hosts the BlackBerry Enterprise Server, click
Start > Run
.
2.
Type
regedit
. Click
OK
.
3.
Perform one of the following actions:
• If you are running a 32-bit version of Windows, navigate to HKEY_LOCAL_MACHINE\Software\Research In Motion
\BlackBerry Enterprise Server\Agents.
• If you are running a 64-bit version of Windows, navigate to HKEY_LOCAL_MACHINE\Software\WOW6432Node
\Research In Motion\BlackBerry Enterprise Server\Agents.
4.
If your organization’s environment includes multiple Windows domains, perform the following actions:
a.
Create a String value named
LDAPDomain
.
b.
Change the value to the FQDN of the global catalog server and the port number that the BlackBerry Enterprise
Server can use to resolve the DNS name of Microsoft Active Directory, using the following format:
<FQDN_of_GC>
:
<port>
. If the BlackBerry Enterprise Server must connect to multiple global catalog servers for
DNS name resolution, specify all of them as the value, using the following format:
<FQDN_of_GC1>
:
<port>
<FQDN_of_GC2>
:
<Port>
<FQDN_of_GC3>
:
<port>
. Separate multiple entries using spaces.
Optionally, if you do not want to configure a limited list of global catalog servers, set the value to a domain name,
and the port number to the global catalog server (for example, example.com:3268).
5.
If the BlackBerry Enterprise Server must use a specific port to connect to Microsoft Active Directory and you did not
specify the port number in the LDAPDomain string, perform the following actions:
a.
Create a DWORD value named
LDAPport
.
Administration Guide
Managing a BlackBerry Domain
413