Jabber contact photo with MRA

[Hythim Ali El Hadad]

Hi,

Contact photos appear while we are registering internal as directory is set to ldap in jabber configuration file. but contact photos don't appear while registering through MRA that it support only UDS.

I see we can have a web server with the photos and to use URL in jabber configuration file with a parameter to point to the photos on the web server.

Is any one try this solution before. please help to start and what web server to use ?

or there is a solution that help to connect to ldap while registering through MRA ?

Thanks

[Mohammed al Baqari]

Hi,

You can connect to ldap using MRA. Also, you can point to http server which host the photos and allow the web server in Exp-C http allow list. You need to name the photos depending on directory service used.

[Hythim Ali El Hadad]

Hi Mohamed,

Thanks a lot for this great info

is there a document for connecting to ldap using MRA 

I'm not having directory configuration in UC service profile while connecting in internal network. I'm using the setting in configuration file. 

[Mohammed al Baqari]

There is no special config for using ldap over MRA. The same config file will be downloaded to your machine through Expressway. 

Your machine will try to contact the ldap server in your config file. The difference is that on internal network, jabber will initiate direct connection such as ldap://ms-ad.test-lab.local:389

Using MRA, jabber will initiate connection to ldap as https://exp-e.test-domain.com:8443/xkjqbbjb23mbmasdb

where xkjqbbjb23mbmasdb is the has value for ldap://ms-ad.test-lab.local:389. Exp-C will de-hash the value and connect to ldap on behalf of jabber

[Jaime Valencia]

That is not quite right, you still go to UDS, but this proxies the LDAP search to your LDAP server, but that is once you configure it

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/11_5_1/cucm_b_release-notes-cucm-imp-1151/cucm_b_release-notes-cucm-imp-1151_chapter_010.html#CUCM_RF_O11063F0_00

[Hythim Ali El Hadad]

Hi Jaime,

So photos won't appear while jabber registered from outside ?

and the only way is to use UDS with web server ?

[Jaime Valencia]

I have not tested if using the LDAP search configuration also allows you to see the pictures if they're embedded in the LDAP users, as this is not a direct connection to LDAP.

My point was, that this doesn't work just because, you need to configure LDAP search so that when the request arrives via UDS, it is then proxied to LDAP.

I do know that if you configure the images in a web server, white list that server for MRA, and configure the jabber-config.xml file with the UDS picture configuration, it does work.

[Hythim Ali El Hadad]

Dears,

After configuring LDAP search , Contact photos not working.

When I check Jabber connection status

I found Directory connected to CUCM UDS

And I can't search the directory from outside

Previously I was able to search cucm uds from outside when uds check box enabled on uc service profile

So is the contact photos should work with ldap search or there is no way

Thanks

[Shri2]

Hi Jamie, did you got the chance to test to see whether you are able to see pic when connected via MRA and UDS proxy.

[Shri2]

Hi Jamie, did you got the chance to test to see whether you are able to see pic when connected via MRA and UDS proxy.

[Hythim Ali El Hadad]

Is this new in 11.5 ?

that I see here in forums that UDS is the only supported directory while on MRA.

[Mohammed al Baqari]

Yes this is new feature in 11.5(1).  Please see below.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/11_5_1/sysConfig/CUCM_BK_SE5DAF88_00_cucm-system-configuration-guide-1151/CUCM_BK_SE5DAF88_00_cucm-system-configuration-guide-1151_chapter_0100101.html

For older versions, you can sync LDAP users to CUCM database and search from MRA using UDS which will show up the LDAP synched users (as if they are CUCM users). 

[davis.ricardo]

Hi Guys,

I have the same problem with jabber users with MRA. We cannot see the photos when In MRA.

So I have read some information here but is not clear for me .

1. The webserver can be provisioned in LAN to local users and after configured in Allow list of Expressway C?
2. Can use the same jabber-config.xml or create a new named as jabber-config-web.xml and configured for each CSF profile that use MRA?

Contact Photos Do Not Appear on Jabber Clients Through Expressways

The Mobile & Remote Access solution only utilizes UDS for Contact Photo resolution.

This requires that you have a web server available to store the photos. The configuration itself is two-fold.

1. The jabber-config.xml must be modified to direct the clients to the web server for Contact Photo resolution. The configuration here should achieve this.
   <Directory>
   <DirectoryServerType>UDS</DirectoryServerType>
   <PhotoUriWithToken>http://%IP/Hostname%/photo%%uid%%.jpg</PhotoUriWithToken>
   <UdsServer>%IP%</UdsServer>
   <MinimumCharacterQuery>3</MinimumCharacterQuery>
   </Directory>
2. Expressway-C must have the web server listed within the HTTP Server Allow List.
   1. Click Configuration > Unified Communications > Configuration > Configure HTTP server allow list.
   2. Click New > Enter IP/Hostname > Create entry.
   3. Log out of the Jabber client, and then log back in.

Best regards,

Daniel

[Ayodeji Okanlawon]

Ricardo, 

If you host your contact photos on a web server, then you need to ensure the ff

1 it is reachable from expressway c 

2. You have added the URL to expressway using a prefix rule. 

3. Check on expressway event logs to see why the request to pull down contacts photos is denied by expressway C. 

[Ayodeji Okanlawon]

Hi Mohammed, thanks for sharing this. Good to know that ldap is now supported via MRA