Unable to log on to the Cisco CallManager 4.x Publisher server with the use of the CCMAdministrator account after MLA is enabled but can log on to the subscriber with the same credentials

[TCC_2]

Core Issue

On the Cisco CallManager 4.x, whenever MLA is turned on, access to the Publisher Server fails, and the login screen comes back up and asks for the username and password. But, access to Subscriber Server is fine with the same credentials.

Resolution

In order to resolve this issue, complete these steps:

1. Run Adminutility in order to check the password synchronization for SQLSvc, CCMServiceRW, CCMService, CCMCDR and CCMUser in the Cisco CallManager cluster.
   
   Refer to Check Password Synchronization with the Admin Utility in the Cisco CallManager Cluster for more information about Adminutility.
   
   
2. Run the CCMPwdchanger tool to synchronize passwords.
   
   Refer to Change Passwords in Cisco CallManager and Cisco Unity Configuration Example for more information.
   
   
3. Check the Database status through DBL Helper.
   
   Refer to Using DBLHelper to Reestablish a Broken Cisco CallManager Cluster SQL Subscription for more information.
   
   
4. Restart IIS & WWW services.
   
   
5. Check registry settings as indicated in Cisco bug ID CSCeg00750, and make sure they are same on both Publisher & Subscriber.
   
   
6. This issue also occurs when SQLSvc password is not sync with MLA and system. In order to correct this, look for synchpwd.dll in the c:\winnt\system32\synchpwd.dll . If this DLL is there, then the publisher uses this file instead of the c:\program files\cisco\bin\synchpwd.dll. Hence, the password in the publisher is never in sync with the Subscriber.
   
   12/01/2006 00:31:51.924 |  Authfilt::enablePowerUser() LogonUser(SQLSvc,*****)
   12/01/2006 00:31:52.127 |  Authfilt::enablePowerUser() *ERROR* LogonUser() failed, enum=1326
   
   Remove this file from c:\winnt\system32\synchpwd.dll and then copy the synchpwd.dll file from the Subscriber to Publisher. This is the file that it uses to sychronize the password with the Subscriber. Reset the password again or otherwise the same error shows up again.

You can check the synchpwd.log in the MLA trace folder in order to see if the new phrase password is set.

Refer to these articles for more information about MLA Login failed issues:

• How to change the CCMAdmin and SQLSvc passwords in Cisco CallManager
• The difference between the SQL SA account and the SQLSvc account, and how to change the passwords