Blackberry SWD-504685-0330050601-001 Supported authentication models, Authentication credentials

Page 14

Administration Guide

Compatibility of authentication methods with previous versions of the BlackBerry Enterprise Server User Administration Tool

Compatibility of authentication methods with previous versions of the BlackBerry Enterprise Server User Administration Tool

If your organization uses applications that work with previous versions of the BlackBerry® Enterprise Server User Administration Tool, in many cases, these applications also work with version 5.0 of the tool.

Supported authentication models

In BlackBerry® Enterprise Server version 5.0, the models for authentication (login) and authorization (roles or capabilities) for administration are different from the models that were used in previous versions.

BlackBerry Enterprise Server version 5.0 supports the following authentication models:

•BlackBerry Administration Service authentication (default)

•mailbox authentication (IBM® Lotus® Domino® environment only)

•Microsoft® Active Directory® authentication

BlackBerry Enterprise Server version 5.0 does not support Windows® authentication or Microsoft® SQL Server® authentication.

You must create one of the following administrators with sufficient credentials to authenticate with the BlackBerry Administration Service:

•administrator in the BlackBerry Administration Service

•mailbox administrator (IBM Lotus Domino environment only)

•administrator in Microsoft Active Directory

Roles or capabilities that are based on database user accounts are not supported in BlackBerry Enterprise Server version 5.0.

For more information about how to create a BlackBerry Administration Service administrator, visit www.blackberry.com/go/ serverdocs to read the BlackBerry Enterprise Server Administration Guide.

Authentication credentials

In the BlackBerry® Enterprise Server User Administration Tool version 5.0, you can use the following parameters interchangeably:

•"-username" or "-sqluser" (authentication user name)

•"-password" or "-sqlpass" (authentication password)

The BlackBerry Enterprise Server User Administration Tool uses the values associated with these options for the authentication and authorization models that are supported in the BlackBerry® Enterprise Server version 5.0. The tool does not does not support Microsoft® SQL Server® authentication or roles or capabilities that are defined on the Microsoft SQL Server database engine.

12

Image 14

Contents Administration Guide SWD-504685-0330050601-001 Contents Sending notification messages to BlackBerry devices Input, output, and user feedback parameters Setuseritpolicyrule Edit a group across Group BlackBerry Enterprise Server User Administration ToolOverview Template Create a software Configuration View a softwareDelete a software Configuration Create an application View a job Service instance View push rules for Service View pull rules for Tool Description BlackBerry Enterprise Activation New in this release Add and remove a role across organizations Outputfilename PasswordInputfilename Servername Supported authentication models Authentication credentialsSyntax for authentication credentials Use cases User name SQLU1 Password SQLP1String value requirements ExampleSetclientauth -username BASU1 -password Following command BESUserAdminClientSetclientauth -basauth -setp password1 BASP1 -basauth -setp password1Re-install the service using the new client password Add a new user account to the BlackBerry Enterprise Server Managing user accountsAdding user accounts UsernameAdd a new user account to a group Assign a software configuration to a user accountUsername Sw configurationname Add an existing user account to a groupFind a user account Finding user accountsChanging and removing user accounts Delete a user account from a group Delete a software configuration from a user accountMove a user account to a different user group Username InstanceChange user account settings Delete a user account from the BlackBerry Enterprise ServerList the groups in a BlackBerry Domain Managing email message forwarding Turn on or turn off email message forwardingTurn on or turn off email message forwarding for folders Managing IT policies and IT policy rules List the IT policy rules in an IT policySet IT policy rules for a user account Set owner information on a BlackBerry device Set a password for a BlackBerry deviceManaging BlackBerry devices Resend a service book Delete pending messagesResend the peer-to-peer encryption key Protect a stolen BlackBerry deviceInfofile filename or Send a notification PIN messageUsername or Groupname Instance Subject subjectlinetext Body messagebodytextSend a notification email message Retrieve user account statistics BlackBerry devicesRetrieving user account statistics and information about Results of a statistics query for a user accountPIN of the BlackBerry device Column Description ServerDNThat is associated with the BlackBerry device Device Type Model number of the BlackBerry device StateClear user account statistics Retrieve enterprise activation statistics for a user accountRetrieve enterprise activation statistics for a user account Retrieving BlackBerry device information Retrieve the statistics for BlackBerry devicesColumn Description User Name Name of the user account Results of a statistics query for a BlackBerry deviceUsers userdeviceinformation Groupname Instance Home CarrierColumn Description IT Policy Time Software configuration on the deviceUptime Time since the BlackBerry device was last reset System StatusMessaging server Instance filtered Instance sentEnterprise Server instance Configuring log files Administration ToolTroubleshooting the BlackBerry Enterprise Server User Yyyymmdd is the dateWarn Error Fatal Using the command summary in the help file Common parameters BES1,USER2,GROUP1,false Input, output, and user feedback parametersSubparameter Description BES1,USER7,GROUP2,trueBe one of the following types With the BlackBerry Administration ServiceError This level is not currently used Well as messages of earlier levelsGroupWise BlackBerry Administration ServiceAdd Itpolicy ITpolicyname OryWt expiry time Csw configurationname AssignswconfigSubparameters -assignswconfig Description Cannot use this subparameter with -swUtype type Change Syntax -changeEnterprise Server for Novell GroupWise This subparameter clears the users email message filtersBlackBerry Enterprise Server for Novell GroupWise AccountFrom Account to -add or an existing user account to -changePurgependingmessages Password Subparameter Description CanonicalnameSubparameters -delete Description Administration Tool does not find the mailboxDelete ForceAdministration Guide Find Subparameters -find DescriptionHandheldinfo Action. It works with the -u subparameter Subparameters -handheldinfo Description AppnameWork with the -u or -b subparameters HhstatsSubparameter Description Users Instead of one user accountKillhandheld Subparameters -killhandheld DescriptionAdministration Guide List Itpolicy IT policyname ConfigurationnameApppolicyname Instance Displayname Move the account to MoveSubparameters -move Description Administration Guide Action ResendpeertopeerkeySubparameters -resendpeertopeerkey Description Resendservicebook Subparameters -resendservicebook DescriptionInfofile filename.txt SendemailBody bodytext Utype type This subparameter specifies the body of the PIN message SendpinSubparameters -sendpin Description This subparameter specifies the name of the user groupDisplayname Default authentication type SetclientauthCredentials in the Windows registry Interchangeably with -passwordExchange messaging server Sqluser usernameServer for Novell GroupWise SetfolderredirectionSubparameters -setfolderredirection Description Foldername foldernameUsername Info ownerinformation SetownerinfoSubparameters -setownerinfo Description Infofile infofile.txtUtype type Setpassword Subparameters -setpassword DescriptionPolicyrule policyrulename SetuseritpolicyruleSubparameters -setuseritpolicyrule Description Administration Guide Subparameters -stats Description Service This subparameter specifies service instancesStats Email emailinstanceUtype type Status Glossary Provide feedback Legal notice Administration Guide Administration Guide