Windows Authentication in Blackberry Enterprise Server (BES) 12

Update to previous post on older BES version ( “Test intranet access from Blackberry and other mobile platforms”). For BES12 create a krb5.conf file and upload to the “Single-sign on” profile (obv. switch mycompany.com to your own FQDN. And specify the FQDNs for one or more domain controllers. This has been case sensitive in the past.)``` [libdefaults] default_etypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 des3-cbc-sha1 des3-cbc-sha rc4-hmac default_realm = MYCOMPANY.COM [realms] MYCOMPANY.COM = { kdc = tcp/DC1.MYCOMPANY.COM:88 kdc = tcp/DC2.MYCOMPANY.COM:88 } [domain_realm] .MYCOMPANY.COM = MYCOMPANY.COM MYCOMPANY.COM = MYCOMPANY.COM

* * *

Find more IT Infrastructure tips at [blog.alexmags.com](http://blog.alexmags.com/)