Solved: Thanks for this info. It

VON CLAWSON · ‎05-20-2016

I have IM&P 9.1 working with Jabber 11.6. It is configured in MRA and that is working as well. However, I have one user that cannot login automatically. Only when we set the presence server manually. This is inside the network. When we clear the cache and try to login it finds the services. But when the user puts in the password he gets "Cannot Communicate with Server". the Jabber.log indicates that it is able to find the UDS server but then we get the following. I can't figure out why we are getting this HTTP response code 403. If anybody could help I would appreciate it.

2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [ces/impl/ucm-config/UdsProvider.cpp(802)] [csf.config] [doHomeUdsQuery] - Trying to connect to Home UDS URI: https://172.27.224.16:8443/cucm-uds/user/MASKED_USERNAME, with domain (retrieved from network requests): netcuras.int, domain (provided by application): netcuras.int
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [ices/impl/ucm-config/DnsProvider.cpp(87)] [csf.config] [getHighestPriorityDomain] - The domain netcuras.int was chosen due to it being the highest priority: LOCATOR_UDS_DOMAIN
2016-05-20 09:55:46,830 INFO [0x0000700000fee000] [m-config/uds/HomeUdsQueryFactory.cpp(19)] [csf.config] [createHomeUdsInstance] - Creating a 9.X version of the HomeUdsQuery object.
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [ucm-config/UcmUserConfiguration.cpp(206)] [csf.config] [addServerList] - Shuffling the UDS Server list. New servers have been added.
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [cm-config/uds/HomeUdsHttpRequest.cpp(19)] [csf.log] [performHttpRequest] - Getting the HTTP response using the HTTP utils.
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [ucm-config/http/ScopedEdgePolicy.cpp(31)] [csf.config] [ScopedEdgePolicy] - An Edge nature policy was found checking if Edge is able to be enforced.
2016-05-20 09:55:46,830 INFO [0x0000700000fee000] [ls/src/edge/GlobalEdgeStateImpl.cpp(599)] [csf.edge] [isInternalConnectivityAvailable] - Internal Visibility: 1
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [ucm-config/http/ScopedEdgePolicy.cpp(44)] [csf.config] [ScopedEdgePolicy] - Edge is enforceable, not modifying the policy set.
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [sf-netutils/src/common/PolicySet.cpp(84)] [csf.common.PolicySet] [getPolicy] - Successfully found Policy with nature EDGE_USAGE [USE_IF_REQUIRED]
2016-05-20 09:55:46,830 INFO [0x0000700000fee000] [ls/src/edge/GlobalEdgeStateImpl.cpp(599)] [csf.edge] [isInternalConnectivityAvailable] - Internal Visibility: 1
2016-05-20 09:55:46,830 INFO [0x0000700000fee000] [ls/src/edge/GlobalEdgeStateImpl.cpp(599)] [csf.edge] [isInternalConnectivityAvailable] - Internal Visibility: 1
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [ls/src/http/BasicHttpClientImpl.cpp(261)] [csf.httpclient] [execute] - Edge policy enforced successfully with transformed Url: https://172.27.224.16:8443/[...] for request #5
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [sf-netutils/src/common/PolicySet.cpp(84)] [csf.common.PolicySet] [getPolicy] - Successfully found Policy with nature IP_FAMILY_PREFERENCE [DUAL_STACK]
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [netutils/src/common/PolicyDriven.cpp(59)] [csf.common.PolicyDriven] [policyFailureCanBeIgnored] - Checking if the failure of a policy can be ignored by this object
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [sf-netutils/src/common/PolicySet.cpp(84)] [csf.common.PolicySet] [getPolicy] - Successfully found Policy with nature FAILURE_MANAGEMENT [NEVER_IGNORE_FAILURE]
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [netutils/src/common/PolicyDriven.cpp(69)] [csf.common.PolicyDriven] [policyFailureCanBeIgnored] - The policy failure cannot be ignored
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [etutils/src/http/HttpRequestData.cpp(73)] [csf.httpclient] [consumeEasyCURLConnection] - Acquired lock (_easyCurlConnectionMutex)
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [etutils/src/http/HttpRequestData.cpp(82)] [csf.httpclient] [consumeEasyCURLConnection] - Releasing lock (_easyCurlConnectionMutex)
2016-05-20 09:55:46,830 INFO [0x0000700000fee000] [etutils/src/http/CurlHttpUtils.cpp(1087)] [csf.httpclient] [configureEasyRequest] - *-----* Configuring request #5 GET https://172.27.224.16:8443/[...]
2016-05-20 09:55:46,830 INFO [0x0000700000fee000] [etutils/src/http/CurlHttpUtils.cpp(1732)] [csf.httpclient] [CurlHeaders] - Number of Request Headers : 0
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [etutils/src/http/CurlHttpUtils.cpp(1471)] [csf.httpclient] [configureEasyRequest] - Request #5 configured with: connection timeout 10000 msec, transfer timeout 30000 msec
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [ls/src/http/BasicHttpClientImpl.cpp(519)] [csf.httpclient] [performCurlRequest] - About to perform curl connection request #5
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [netutils/src/http/CurlHttpUtils.cpp(192)] [csf.httpclient] [curlTraceCallback] - Request #5 post connect phase: 'Connected to 172.27.224.16 (172.27.224.16) port 8443 (#1)'
2016-05-20 09:55:46,830 DEBUG [0x0000700000fee000] [netutils/src/http/CurlHttpUtils.cpp(217)] [csf.httpclient] [curlTraceCallback] - Request #5 auth phase: Server auth using Basic with user name length = 12
2016-05-20 09:55:47,254 DEBUG [0x0000700000fee000] [netutils/src/http/CurlHttpUtils.cpp(732)] [csf.httpclient] [curlHeaderCallback] - Request #5 got status line: HTTP/1.1 403 Forbidden
2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [netutils/src/http/CurlHttpUtils.cpp(712)] [csf.httpclient] [curlHeaderCallback] - Request #5 got CR-LF pair. Accumulated headers:
Cache-Control: private
Expires: Wed, 31 Dec 1969 17:00:00 MST
Set-Cookie: Redacted by client
Set-Cookie: Redacted by client
Content-Type: text/html;charset=utf-8
Content-Length: 2289
Date: Fri, 20 May 2016 15:55:47 GMT
Server:

2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [etutils/src/http/CurlHttpUtils.cpp(1673)] [csf.httpclient] [logOperationTiming] - Request #5 network IO timestamps: [name lookup = 8.3e-05 ; connect = 8.3e-05 ; ssl connect = 8.3e-05 ; pre-transfer = 0.000275 ; start-transfer = 0.424192 ; total = 0.424358 ; redirect = 0]
2016-05-20 09:55:47,255 INFO [0x0000700000fee000] [ls/src/http/CurlAnswerEvaluator.cpp(115)] [csf.httpclient] [curlCodeToResult] - Request #5 got curlCode=[0] curl error message=[] HttpClientResult=[SUCCESS] fips enabled=[false]
2016-05-20 09:55:47,255 INFO [0x0000700000fee000] [ls/src/http/BasicHttpClientImpl.cpp(448)] [csf.httpclient] [executeImpl] - *-----* HTTP response code 403 for request #5 to https://172.27.224.16:8443/[...]
2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [ls/src/http/BasicHttpClientImpl.cpp(470)] [csf.httpclient] [executeImpl] - Request #5 -> local IP address: 172.31.10.84, destination IP address: 172.27.224.16
2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [etutils/src/http/HttpRequestData.cpp(90)] [csf.httpclient] [returnEasyCURLConnection] - Request #5 returning borrowed EasyCURLConnection
2016-05-20 09:55:47,255 INFO [0x0000700000fee000] [ls/src/edge/GlobalEdgeStateImpl.cpp(599)] [csf.edge] [isInternalConnectivityAvailable] - Internal Visibility: 1
2016-05-20 09:55:47,255 INFO [0x0000700000fee000] [ls/src/edge/GlobalEdgeStateImpl.cpp(599)] [csf.edge] [isInternalConnectivityAvailable] - Internal Visibility: 1
2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [ls/src/http/BasicHttpClientImpl.cpp(491)] [csf.httpclient] [executeImpl] - For request #5 the total size of the data received is: 2289, the size of the response body is: 2289
2016-05-20 09:55:47,255 DEBUG [0x0000700000081000] [etutils/NetworkEventReporterImpl.cpp(56)] [csf.netutils] [execute] - Executing a NetworkEventTask for label: csfnetutils.http.clientRequestSuccessful
2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [/impl/ucm-config/http/HttpUtils.cpp(208)] [csf.config] [doGet] - HTTP request returned with result: SUCCESS
2016-05-20 09:55:47,255 INFO [0x0000700000081000] [tutils/NetworkEventReporterImpl.cpp(156)] [csf.netutils] [hintNetworkIsInUseImpl] - Event Label:csfnetutils.http.clientRequestSuccessful
2016-05-20 09:55:47,255 INFO [0x00007000010f4000] [ansitionDetectionControllerImpl.cpp(252)] [csf.edge] [processEvent] - EdgeTransitionDetectionController processing Event NetworkActivity with DDCAFsm in state Idle and DDCUFsm in state Monitoring
2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [cm-config/uds/HomeUdsHttpRequest.cpp(23)] [csf.log] [performHttpRequest] - Result of HTTP request - Result: SUCCESS, Response Code: 403.
2016-05-20 09:55:47,255 ERROR [0x0000700000fee000] [/ucm-config/uds/HomeUdsUtilities.cpp(64)] [csf.config] [convertHttpUtilsResult] - Home Uds query failed responseCode =[403]
2016-05-20 09:55:47,255 DEBUG [0x00007000010f4000] [DetectDirectConnectAvailableFsm.cpp(273)] [csf.edge] [logIgnoringEvent] - DetectDirectConnectAvailable.Idle: Ignoring event NetworkAccessOpportunity
2016-05-20 09:55:47,255 INFO [0x00007000010f4000] [csf-netutils/src/common/Reactor.cpp(180)] [csf.edge] [runEventLoop] - Reactor event loop entering wait()
2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [cm-config/uds/HomeUdsHttpRequest.cpp(27)] [csf.log] [performHttpRequest] - Result of UDS result conversion - UDS Result: HOME_UDS_QUERY_FAILED.
2016-05-20 09:55:47,255 WARN [0x0000700000fee000] [pl/ucm-config/uds/HomeUds90Query.cpp(82)] [csf.config] [run] - Home Uds request unsuccessful.
2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [ces/impl/ucm-config/UdsProvider.cpp(821)] [csf.config] [doHomeUdsQuery] - Result from Home UDS query: HOME_UDS_QUERY_FAILED
2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [vice/src/services/impl/Blacklist.cpp(61)] [csf.config] [BlacklistAddress] - Created BlacklistAddress with request: https://172.27.224.16:8443/cucm-uds/user/james.little (FQDN: 172.27.224.16, Hostname: 172.27.224.16) and matching type URL.
2016-05-20 09:55:47,255 ERROR [0x0000700000fee000] [ces/impl/ucm-config/UdsProvider.cpp(898)] [csf.config] [convertHomeUdsResult] - homeUdsResult=[HOME_UDS_QUERY_FAILED] ucmConfigResult=[FAILED_CONNECTION]
2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [ces/impl/ucm-config/UdsProvider.cpp(251)] [csf.config] [getHomeUdsResult] - Did not update the UcmUserConfiguration object, could not connect with the latest information, reason: FAILED_CONNECTION
2016-05-20 09:55:47,256 WARN [0x0000700000fee000] [rvices/impl/ucm-config/CacheData.cpp(57)] [csf.config] [isUdsCacheAvailable] - The UCM object is invalid.
2016-05-20 09:55:47,256 WARN [0x0000700000fee000] [l/ucm-config/UcmConfigQueryImpl.cpp(214)] [csf.config] [fetchXmlFileSet] - No information available after doing a fetch.
2016-05-20 09:55:47,256 DEBUG [0x0000700000fee000] [l/ucm-config/UcmConfigQueryImpl.cpp(222)] [csf.config] [fetchXmlFileSet] - Returning: FAILED_CONNECTION

Please rate if this helps.

Shashank Mahajan · ‎05-23-2016

It seems CUCM is not providing the Home Cluster Information for UDS request

2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [cm-config/uds/HomeUdsHttpRequest.cpp(23)] [csf.log] [performHttpRequest] - Result of HTTP request - Result: SUCCESS, Response Code: 403.
2016-05-20 09:55:47,255 ERROR [0x0000700000fee000] [/ucm-config/uds/HomeUdsUtilities.cpp(64)] [csf.config] [convertHttpUtilsResult] - Home Uds query failed responseCode =[403]

The End User on CUCM needs to be added to the "Standard CCM End Users" Access Control Group in order for the CUCM UDS service discovery to be successful.

View solution in original post

VON CLAWSON · ‎05-23-2016

Can anyone help me with this?

Please rate if this helps.

Shashank Mahajan · ‎05-23-2016

It seems CUCM is not providing the Home Cluster Information for UDS request

2016-05-20 09:55:47,255 DEBUG [0x0000700000fee000] [cm-config/uds/HomeUdsHttpRequest.cpp(23)] [csf.log] [performHttpRequest] - Result of HTTP request - Result: SUCCESS, Response Code: 403.
2016-05-20 09:55:47,255 ERROR [0x0000700000fee000] [/ucm-config/uds/HomeUdsUtilities.cpp(64)] [csf.config] [convertHttpUtilsResult] - Home Uds query failed responseCode =[403]

The End User on CUCM needs to be added to the "Standard CCM End Users" Access Control Group in order for the CUCM UDS service discovery to be successful.

VON CLAWSON · ‎05-24-2016

Thanks Shashank. That was exactly it. I had misread this user. He had Standard CCM Super Users but not Standard CCM End Users. Put that in and he was able to login without issue.

Please rate if this helps.

Alessandro Bertacco · ‎07-04-2016

Great answer!!!! Same issue here. Solved with your answer!

Thank you very much.

Regards

Alessandro

douglasfir · ‎09-05-2016

Hi Shashank,

I'm doing fresh installation and I have similar problem, but with all users. They are all assigned to Standard CCM End User group, they are enabled for IM&Presence and so on. Do you have any suggestion wht might be the problem in this case?

[csf.httpclient] [csf::http::CurlHttpUtils::curlTraceCallback] - Request #72 auth phase: Server auth using Basic with user name length = 7
[csf.httpclient] [csf::http::CurlHttpUtils::curlHeaderCallback] - Request #72 got status line: HTTP/1.1 403 Forbidden

[csf.log] [csf::ucm90::HomeUdsHttpRequest::performHttpRequest] - Result of HTTP request - Result: SUCCESS, Response Code: 403.
[csf.config] [csf::ucm90::HomeUdsUtilities::convertHttpUtilsResult] - Home Uds query failed responseCode =[403]

Thanks!

Dragan

Peter Fiers · ‎11-25-2016

Thanks for this info. It saved my life!

Peter

Dalton-Covene · ‎02-15-2017

Thank you Shashank Mahajan, this resolved the issue.

The customer had removed the Standard CCM End Users in order to prevent users from accessing the SelfCare Portal, but inadvertently broke Jabber as well. Jabber logins were failing with "Cannot Communicate with Server"

Error in Jabber PRT:

[/ucm-config/uds/HomeUdsUtilities.cpp(64)] [csf.config] [convertHttpUtilsResult] - Home Uds query failed responseCode =[403]

Thanks!

Dalton Woolsey

boyd.lynn · ‎05-06-2020

Thanks Shashank,

This resolved the problem in my lab :-)

Bizarrely the same account worked in Jabber for Windows but failed in Jabber for iMac.

Best Regards

Boyd

Jabber for Mac login Cannot Communicate with server 403 response