Cisco Jabber CTI control the Deskphone (LDAP user NOT Work & Local user Work)

[Chi Fai Leung]

Hi All UC Experts,

I am using the CUCM 9.1.2 and IM&P 9.1.1, I want to enable the CTI control Deskphone of Jabber.

I granted the related rights, including "CCM End User", "CTI Enabled", "Standard CTI Allow Control of Phones supporting Rollover Mode", and "Standard CTI Allow Control of Phones supporting Connected Xfer and conf" to the users and associated the related phone to the user.

As the same user, when the user is synced by LDAP, that would NOT be worked on the CTI control deskphone.

Then I convert the user to Local User, that is worked on the CTI control deskphone.

Why?

How can I work with LDAP users?

[bernhardczapp]

You are using LDAP authentication?

Are you already using the global catalog and global catalog ldap port?

Often normal Microsoft LDAP isn't fast enough.

[Chi Fai Leung]

global catalog? I mean I cannot control the deskphone through LDAP login ... Related the Global Catalog?

[bernhardczapp]

You want to control the deskphones via cisco jabber client?

This happens via CTI. The Jabber device authenticates to cti manager with the login provided by the user. (Users have to have CTI role assigned.)

When LDAP authentication is enabled to cti manager asks the ldap server to check the credentials.

Is the role "Standard CTI Enabled" assigned to the end users?

Are you even using ldap authentication?

If you are using ldap authentication: Are you using global catalog or not? (TCP-Port 3268)

[Chi Fai Leung]

Hi,

I'm using the USD mode even the inside or outside. Is it the "Global Catalog"  or "LDAP" auth. is EDI mode only?

Is it possible for me to set the EDI mode, when the UDS is fail?

Can the jabber-config.xml control the Jabber on Windows and Jabber on MAC? The xml just allow me to set the EDI / USD mode?

Can the UC Profiles of CUCM control the Jabber on iPhone and Jabber on Android? The Directory of UC Profile can control the UDS searching or EDI searching? Only allow one too?

[Amit Kumar]

Edwin,

if you create a UDS SRV record (supported only in call manager version 9) ; then you can use the service profile section of call manager and populate the directory profile section; jabber for windows will then use the profile information to get the LDAP resolution to work. The profile can be used for both UDS and EDI (AD ) contact resolution.

Take a look at this link for more information;

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/Windows/9_7/JABW_BK_C4C679C9_00_cisco-jabber-for-windows-97/JABW_BK_C4C679C9_00_cisco-jabber-for-windows-97_chapter_0111.html#CJAB_TK_PBBB1756_00

Look at the following section of the document; " Configure Directory Integration in a Service Profile".

- Please rate if this helps.

[Chi Fai Leung]

Thanks!

 A Cisco Unified Communication node can support UDS contact service connections for 50% of the maximum device registrations supported by the server.

That mean it only support the 50% of total registered devices to search the UDS directory as the same time?

[Amit Kumar]

total registered device does not necessarily mean the " maximum device supported by the server". When you create the server it depending upon its hardware configuration there is a maximum upper limit of devices that it will supported. So the UDS support will be 50% of that maximum devices that "this" server will support.

- please rate if this information helps.

[marco fina]

Hi all,

any update about this trouble? i have same issue

regards

[Chi Fai Leung]

Hi,

I captured the log file from Jabber client. Which part can I check about the CTI control with LDAP user fail?

[Chi Fai Leung]

Yes, I want to control the deskphone via Cisco Jabber client.

I added the roles to the users as:
Std. CCM End Users
Std. CTI Enable
Std. Allow Control of Phones supporting Connected xfer and conf
Std. Allow Control of Phones supporting Rollover mode

OpenLDAP > CUCM > IM&P
I'm using the OpenLDAP to auth. and I'm successful to login the Jabber with softphone mode, but it is fail to change the deskphone mode. That mean my CTI auth. is fail?

PS: The OpenLDAP would not have the Global Catalog as auth. How?

Really thanks for your help~

[Jason Aarons]

Check the unified-csf log file from a Jabber Problem Report. 

[Nirmal Issac]

System --> LDAP --> LDAP Authentication

Which port are you using for authentication?

389- Domain Controller, 636- Secure DC

3268 - Global Catalogue, 3269 - Secure GC

DeskPhone control feature has issues with Domain Controller ports due to delay observed in these ports. Please change the port to Global Catalogue (3268/3269 if secure) and restart CTI Manager service.

HTH

Nirmal Issac

[Chi Fai Leung]

Hi,

Do u mean I change the port at the UC Profiles of CUCM and the XML file of CUCM?

Not the CIT Profile to control the deskphone?
After the loaded the CTI Profile (CUCM IP), the authentication will query the LDAP one more time for the phone service?

[Nirmal Issac]

Not the profile. System --> LDAP --> LDAP Authentication