topic In the case of Jabber/CUCM in Collaboration Applications

Client authentication in Collaboration Edge/ MRA

baktha.muralidharan — Mon, 18 Mar 2019 00:32:07 GMT

Hello

Could someone help with the following question?

When does a Jabber client get authenticated?

My understanding is that when a Jabber device on the Internet accesses (to log on) the expressway-E, only the server (Expressway-E) is authenticated (using the public CA certificate in the Jabber device).

Is this correct? If yes, does the Jabber device/user get authenticated when the device attempts to register with the CUCM ?

Thanks in advance,

/Baktha

Dimension Data.

In the case of Jabber/CUCM

shawnangelo — Wed, 23 Sep 2015 18:41:40 GMT

In the case of Jabber/CUCM/Expressway deployment, during the initial connection between the Jabber client and the Expressway Edge server, there is a key/cert exchange/handshake that creates a secure communications channel between the two. At this point Jabber client securely passes credentials to the Expressway Edge, and it passes these through to the Expressway Core, the Core then provides the credentials to the CUCM server (which in turn challenges the authentication against its local user database or LDAP, whichever is in use) and then returns an Authenticated message to the Expressway Core, which sends it to the Expressway Edge, which in turn tells the Jabber client it has successfully authenticated.

This leaves out some of the deeper technical details, but does this answer your question?

Also, the statements above can be different for a VCS (not Expressway Series) deployment as there are multiple authentication options. This would also be regarding endpoints and Jabber Video for TelePresence, and not "regular" Jabber.

Shawn,Thank you for the reply

baktha.muralidharan — Wed, 23 Sep 2015 19:10:03 GMT

Shawn,

Thank you for the reply/answer! It helps. Guess the client authentication sort of, doesn't happen as part of the initial TLS handshake (between the Jabber device and expressway-E).

/Baktha

Hi,You can refer to this

Ayodeji Okanlawon — Thu, 08 Oct 2015 20:10:07 GMT

Hi,

You can refer to this document I wrote to under more detail about the whole jabber MRA process..

https://supportforums.cisco.com/document/12302441/jabber-mracollaboration-edge-detailed-call-fow

Thanks Ayodeji, for the very

baktha.muralidharan — Fri, 09 Oct 2015 01:00:37 GMT

Thanks Ayodeji, for the very useful document!