Jabber login via MRA to IM&P SASL authentication error

[janosfurucz]

Hello,

I've an error for Jabber for Windows clients trying to login over MRA to Presence service. Login works just fine inside the network, but when trying to login over MRA I've got LERR_JABBER_UNREACHABLE <16> error in jabber log.

I've tried 3 different Jabber versions with the same result.

Before that it seems successfully starts the conversation without cert error, but get the following error in Jabber log:

[gloox::CTriClient::onSend] - @XmppSDK: #0, 153, Send:<?xml version='1.0' ?><stream:stream to='<customer xmpp domain>' xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' xml:lang='en' version='1.0'>
[CEventSendData::OnEventFire] - @MMTP: event_type=0, m_Tid=25176,m_pOwnerThreadProxy = 0767B9D0, m_pMessageBlock = 077AEF90 this=077AF148
[CCmTransportTcp::SendData] - @MMTP: SendV, nSend: 182 transport: 076EB20C
[CCmTransportTcp::OnInput] - @MMTP: Recv_i return nRecv: 203 transport: 076EB20C
[gloox::CTriClient::HandleXmlTag] - @XmppSDK: #0, 174, Recv:<stream:stream xmlns="jabber:client" xml:lang="en-US.UTF-8" xmlns:stream="http://etherx.jabber.org/streams" from="<customer xmpp domain>" id="3OgOM9F59IvduvQd46h9Gg181" version="1.0" />
me-HangDetector] [HangDetector::hangDetectionCallback] - Enter - hangDetectionCallback()
[CCmTransportTcp::OnInput] - @MMTP: Recv_i return nRecv: 118 transport: 076EB20C
[gloox::CTriClient::HandleXmlTag] - @XmppSDK: #0, 138, Recv:<stream:features xmlns:stream="http://etherx.jabber.org/streams"><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl" /></stream:features>
[gloox::Client::handleNormalNode] - @XmppSDK: #0, The server doesn't offer any SASL authentication mechanism that we can support
[CEventSendData::CEventSendData] - @MMTP: event_type=0, m_Tid=25176,m_pOwnerThreadProxy = 0767B9D0, m_pMessageBlock = 6C646E61 this=077AEF90

[janosfurucz]

Hello,

Problem solved, here I describe the solution if it helps to others. 

Root cause was that Exp-C didn't able to resolve PTR DNS record of the Exp-E.

Symptom was Jabber softphone registration was successull over MRA, but the Presence not. Even the Expressway's unified communications status was ok and the traversal status is active. 

If you have similar problem try issue "xstatus XMPP" command on Exp-C it will show the status of the xmpp router. For me the IM&P connection was active, however the XMPP connection to Exp-E was inactive. In the diag logs of Exp-C you can find error messages that says the reverse DNS lookup failed and it causing that the SSL handsake fails as well.

[aalejo]

Thank you for sharing. Got the same issue having two PTR entries for same IP. Remove 1 and device Expressway-C was able to register on E.

[Ramon G.]

Thanks for sharing... I got the same problem solved following your advise. My DNS was not updated with PTR of EXP-E, after updating DNS PTR for ExpE and flushed DNS on ExpC XMPP status came active and Jabber got presence server response from MRA and logged in