Jabber for iPhone 9.6 Integration with OpenLDAP

[Ekkalak Thongthanomkul]

     Hi everyone! i just found an issue when try to integrated jabber for iphone version 9.6 with OpenLDAP that seem like not working and want to describe my environment as below.

Using BE6K 9.1 includes,

     - CUCM 9.1.2

     - IM&Presense 9.1

     - Jabber for Window 9.6 integrate with OpenLDAP using EDI on jabber-config.xml is working properly.

     - Jabber for iPhone 9.6 integrate with OpenLDAP using BDI on jabber-config.xml not working(cannot lookup)

     - Jabber Voice for iPhone and Android can integrate with OpenLDAP which configure in phone configuration  

     - Both of Jabber can't access the photo in OpenLDAP with "jpegPhoto" attribute.

By the way im also included jabber-config.xml files for further troubleshooting. Another question, is it possible to include EDI and BDI for working together in one jabber-config.xml file

One another file is jabber for iphone log when im trying to search "anu" word in searching box

-- 2557-02-02 20:48:06.045 DEBUG [3d8d018c] - sidebar search, string is : a   <------ started from this line in my log file for easier troubleshooting.

If you need more log or any files for troubleshoot just tell me. Thanks for reading!.

<Jabber-config.xml>

<?xml version="1.0" encoding="utf-8"?>
<config version="1.0">
<Directory>
<DirectoryServerType>BDI</DirectoryServerType>
<BDILDAPServerType>OpenLDAP</BDILDAPServerType>
<BDIPrimaryServerName>10.0.1.11</BDIPrimaryServerName>
<BDIServerPort1>389</BDIServerPort1>
<BDIConnectionUsername>cn=xxx,dc=xxxx,dc=xx,dc=xx</BDIConnectionUsername>
<BDIConnectionPassword>xxxxxxxBDIConnectionPassword>
<BDIUseJabberCredentials>false</BDIUseJabberCredentials>
<BDIEnableTLS>false</BDIEnableTLS>
<BDIPredictiveSearchFilter>uid</BDIPredictiveSearchFilter>
<BDIUserAccountName>uid</BDIUserAccountName>
<BDIBaseFilter>(&amp;(objectClass=inetOrgPerson)</BDIBaseFilter>
<BDISearchBase1>ou=users, dc=xxxx,dc=xx,dc=xx</BDISearchBase1>
<BDIUseANR>false</BDIUseANR>

<ConnectionType>1</ConnectionType>
<PrimaryServerName>10.0.1.11</PrimaryServerName>
<UseWindowsCredentials>0</UseWindowsCredentials>
<UseSecureConnection>0</UseSecureConnection>
<SearchBase1>ou=users, dc=xxx,dc=xx,dc=xx</SearchBase1>
<UserAccountName>uid</UserAccountName>
<BaseFilter>(&amp;(objectClass=inetOrgPerson)</BaseFilter>
<PredictiveSearchFilter>uid</PredictiveSearchFilter>
<ConnectionUsername>cn=xxxx,dc=xxx,dc=xx,dc=xx</ConnectionUsername>
<ConnectionPassword>xxxxxx</ConnectionPassword>

<PhotoSource>jpegPhoto</PhotoSource>

</Directory>
</config>

[Craig Cooper · Accepted solution]

Successful configuration was:

-----------------------------

  10.0.1.9

  1

  10.0.1.11

  0

  0

  ou=users, dc=xxx, dc=xx, dc=xx

  uid

  (&(objectClass=inetOrgPerson))

  uid

  cn=xxxx,dc=xxx,dc=xx,dc=xx

  xxxxxx

  BDI

  10.0.1.11

  domain.not.set

  389

  cn=xxxx,dc=xxx,dc=xx,dc=xx

  xxxxxx

  uid

  (&(objectClass=inetOrgPerson)

  ou=users,dc=xxx,dc=xx,dc=xx

  uid

  false

[Ekkalak Thongthanomkul]

Thanks Craig,

for support me all the time.

[dan lin]

hi noom_ekkalak~

i have seen your question below, 

"- Jabber Voice for iPhone and Android can integrate with OpenLDAP which configure in phone configuration"  

When I try to conect the Directory account, I get “Unable to verify account”. 

Can you help me to get this working? Thank you!

CUCM: 8.6

jabber voice version 9.1.8

[Ekkalak Thongthanomkul]

Hi qingchuyu,

If you use Jabber Voice, you can specific LDAP parameter in TCT phone configuration as "Product Specific Configuration Layout"  

[dan lin]

Hi noom_ekkalak ,

Thanks for your answer!

I have specific LDAP parameter in TCT phone configuration as you say, then try to connect the "Directory" setting in Jabber Voice, but it didn't work . i just get the error “Unable to verify account” all the time.   :(

Besides this ,is there anything i need to specific? How did you specific Jabber Voice "Directory" parameter?

Thank you!

[Ekkalak Thongthanomkul]

Hi Qingchuya,

please verify that LDAP username / password by test synchronized between CUCM and LDAP first to test the LDAP parameter then use in phone specific.

Hint. Sometime LDAP username must be this type -> "administrator@example.com" instead of cn=administrator, dc=example, dc=.com

Please rate if this helpful

[brillat]

Hey.. the "correct answer" XML file didn't format correctly in the Forum.  Can you upload as an attachment, or paste again using the "source" tag to disable XML processing?

[Ekkalak Thongthanomkul]

Here you are..

[gsilva]

Hi noom,

Thanks for share the example.

We are configuring CUCM 10 & IMP 10 with open ldap. The CUCM is connected with the LDAP correctly, but the jabber clients not.

I have a doubt.

This configuration file, work with all jabber (jabber windows, jabber MAC, jabber Iphone, Jabber android ?

Is possible retrieve the photos of the contacts from the LDAP?

Thanks

[Ekkalak Thongthanomkul]

Hi gsilva,

I would like to share about jabber-config.xml above is work for all jabbers. First you need to know is difference directory service about UDS, BDI, EDI

UDS -> for All jabbers connect to CUCM via service profiles

BDI -> for Jabber for iPhone,iPad, MAC

EDI -> for Jabber for Window

*I am not sure about Jabber for Android whether is categorized into BDI or EDI?

Since Jabber 9.6.1 Release it can support UDS and it easier to implement i also attached jabber.config.xml which configure to UDS(all you need is just specify CUCM)

and make sure CUCM can completely synchronized to OpenLDAP by see Active LDAP user in end user page

For Photo retrieval from LDAP please see Jabber for iPhone and window document in Contact photo topic, there is difference way between BDI and UDS 

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/iOS/9-6-1/ICG/JABI_BK_C9AC3244_00_cisco-jabber-for-iphone-and-iPad-961/JABI_BK_C9AC3244_00_cisco-jabber-for-iphone-and-iPad-961_chapter_0110.html#CJAB_RF_U5C2AD3B_00

Please rate if this helpful

[gsilva]

Thanks noom,

sorry, but I am not clear.

with the jabber-configsample.txt that you posted, all jabber is working right?

I will test with this example?

Guillermo