Cisco Jabber, switch to e-mail authentication and side effects

[raziel78kain]

Hello,

we have a CUCM/CUP 11.x infrastructure with some Cisco Jabbers and the default authentication (Username@CUPDomain).

We would like to switch to the e-mail authentication, but first we would like to know all the side effetcs.

TIA and regards.

[Aseem Anand]

Hi,

Please find below the list:

Observe the following restrictions and interactions when using the Directory URI IM address scheme:

1. All users have a valid Directory URI value configured on Cisco Unified Communications Manager.

 2. All deployed clients must support Directory URI as the IM address and use either EDI-based or UDS-based directory integration.
   

Note    

    For UDS-based integration with Jabber, you must be running at least release 10.6 of Jabber.

   3.  The IM address scheme must be consistent across all IM and Presence Service clusters.

   4.  All clusters must be running a version of Cisco Unified Communications Manager that supports the Directory URI addressing scheme.

    5. If LDAP Sync is disabled, you can set the Directory URI as a free-form URI. If LDAP Directory Sync is enabled, you can map the Directory URI to the email address (mailid) or the Microsoft OCS/Lync SIP URI (msRTCSIP-PrimaryUserAddress).

 6. The Directory URI IM address settings are global and apply to all users in the cluster. You cannot set a different Directory URI IM address for individual users in the cluster.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/im_presence/configAdminGuide/10_5_1/CUP0_BK_CE43108E_00_config-admin-guide-imp-105/CUP0_BK_CE43108E_00_config-admin-guide-imp-105_chapter_0110.html#CUP0_TP_IE273735_00

[raziel78kain]

Hello Aseem,

thanks for your answer.

Meanwhile, I've found the following:

http://docwiki.cisco.com/wiki/CUPS/IM%26P_FAQ#How_to_configure_flexible_JID_and_multi-domain_on_IM.26P.3F.3F

In particular, the page states that:

"ALL JIDs will be re-generated as well as the contact lists for ALL users"

What does it mean exactly? Will everything work after the change as before (but with the new JIDs), or will the users loose their contacts and/or the chats/files exchanged with them, for example?

Regards.

[Aseem Anand]

Hi,

It only means that the Jabber ID would change because the IM address would change from user@IMdomain to user@maildomain.com and same would happen for the contacts in the contact list.

Aseem

(Please rate if useful)

[Jaime Valencia]

You need to start by understanding that your question is wrong, this is not related to authentication, this is related to the JID of the users, and how it's created.

You need to understand how IM&P and JIDs work to comprehend this change.

When you add a user, you're actually adding him by his JID, this becomes transparent as you see him with all the details because of the directory resolution. If you don't have directory resolution working, then you can still add users, by using their full JID (and you'd see your own JID instead of your name).

When you go from the default JID to directory URI, IM&P will automatically re-map from your current schema, everywhere it's needed in the IM&P DB.

What it will NOT change, and you'll lose, are going to be, if you're using them, all of your persistent chat rooms and messages, as the process only works in the IM&P server, not on the external DB. Someone confirmed my theory that you could change all the JIDs in the external DB to get them back, but that would certainly require assistance from a DB admin to script all the changes.

[raziel78kain]

Hello Jaime,

thanks for your explanation.

In other words, if we don't use any external DB, is it correct to say that we don't loose anything?

Regards.

[Jaime Valencia]

yes

[raziel78kain]

Hello Jaime,

I get back on this subject, because we haven't dealt with the topic of the DNS records, so far.

In your FAQs, you have written the following:

"SRV records for service discovery will need to be added for each domain"

Could you explain that with an example, please? You could consider "CUCMDomain.com" as the DNS domain for the CUCM and the CUCM IM&P servers, and "Mail1Domain.com" and "Mail2Domain.com" as the DNS domains for the e-mail addresses.

Furthermore, what are the ulterior DNS records to be configured in this scenario if we want to use the Expressway servers for the MRA?

Thanks and regards.

[Jaime Valencia]

The SRV records required for MRA are all outlined in the MRA config guide.

The SRV records need to be created for the domain your users will use during login, the Jabber documentation has a chapter dedicated to service discovery, have you reviewed it??

[raziel78kain]

Hello Jaime,

meanwhile, I have found a useful Cisco document that clarifies several doubts of mine related to my last questions:

http://www.cisco.com/c/en/us/support/docs/unified-communications/expressway-series/117811-configure-vcs-00.html

Furthermore, I have found another Cisco document which is very similar to the procedure depicted in your FAQs (in the "How to configure flexible JID and multi-domain on IM&P??" section):

http://www.cisco.com/c/en/us/support/docs/unified-communications/jabber-windows/118999-config-imaddress-jabber-00.html

Regards.