Solved: Aubert,

aubert ciavaldini · ‎12-17-2015

Hi all,

Can you tell me if there is a command to check if the password security is valid on UCCX?

I wouldn't to change or reset the security password on UCCX, thanks a lot for your help.

BR

Aubert

Deepak Rawat · ‎12-18-2015

Aubert,

What do you mean if Security Password is valid on UCCX or not. There is nothing as such that the Security password will corrupt on its own, what can happen is that one does not remember it correctly that can cause issue in below two scenarios:

1) If you are going to add the second server to the existing cluster. During this, system will check if the Security Password matches with the primary node or not. If not, then the DB replication will not come up at all

2) If the DRS backup was taken of a UCCX system or any other UC system for that matter, then while doing the restore system will ask you to enter the Security Password and if it does not match with the one that was there while the backup was taken then the restore will not go through

In order to check, if you remember the Security Password or not, try below:

admin:set password user security
Please enter the old password: ******
Please enter the new password: *********
Reenter new password to confirm: *********
WARNING:
Please make sure that the security password on the publisher is changed first.
The security password needs to be the same on all cluster nodes,
or the publisher and subscriber(s) will not communicate.
After changing the security password on a cluster node, please restart that node.

Continue (y/n)?y

Please wait...

The old password did not match.

In the above example, I put the wrong Security Password intentionally and it gave me an error. If you will put the correct old Security Password and then set the same again as New, system will only allow if the old password was entered correctly. Through this, you can check if you remember the Security Password correctly or not.

However, I would definitely not take the risk of trying above in a production environment unless I am facing one of the above issues as mentioned above. In that case, if you do not remember the Security Password, you can always contact TAC who can help you with this by taking the root of your system and running the Password Guess utility and then change it to something else.

Regards

Deepak

- Rate Helpful Posts -

View solution in original post

Deepak Rawat · ‎12-19-2015

Aubert,

Absolutely you can use that method and reset your Security Password. Remember to reset the password in all the servers in cluster else there will be replication issues.

Do not forget to restart the servers after resetting the Security Password.

In case you face any issues feel free to let me know.

Regards

Deepak

- Rate Helpful Posts -

View solution in original post

Deepak Rawat · ‎12-18-2015

Aubert,

What do you mean if Security Password is valid on UCCX or not. There is nothing as such that the Security password will corrupt on its own, what can happen is that one does not remember it correctly that can cause issue in below two scenarios:

1) If you are going to add the second server to the existing cluster. During this, system will check if the Security Password matches with the primary node or not. If not, then the DB replication will not come up at all

2) If the DRS backup was taken of a UCCX system or any other UC system for that matter, then while doing the restore system will ask you to enter the Security Password and if it does not match with the one that was there while the backup was taken then the restore will not go through

In order to check, if you remember the Security Password or not, try below:

admin:set password user security
Please enter the old password: ******
Please enter the new password: *********
Reenter new password to confirm: *********
WARNING:
Please make sure that the security password on the publisher is changed first.
The security password needs to be the same on all cluster nodes,
or the publisher and subscriber(s) will not communicate.
After changing the security password on a cluster node, please restart that node.

Continue (y/n)?y

Please wait...

The old password did not match.

In the above example, I put the wrong Security Password intentionally and it gave me an error. If you will put the correct old Security Password and then set the same again as New, system will only allow if the old password was entered correctly. Through this, you can check if you remember the Security Password correctly or not.

However, I would definitely not take the risk of trying above in a production environment unless I am facing one of the above issues as mentioned above. In that case, if you do not remember the Security Password, you can always contact TAC who can help you with this by taking the root of your system and running the Password Guess utility and then change it to something else.

Regards

Deepak

- Rate Helpful Posts -

aubert ciavaldini · ‎12-19-2015

Hi Deepak,

Thanks a lot for your explanation, unfortunately I don't remember the old security password, the set password user security command doesn't work.

I seen that there is an another method in Cisco Unified Communications Operating System
Administration (Reset administrator or security password).

Can you tell me I can use this method to reset the security password?

Thanks a lot for all.

BR

Aubert

Deepak Rawat · ‎12-19-2015

Aubert,

Absolutely you can use that method and reset your Security Password. Remember to reset the password in all the servers in cluster else there will be replication issues.

Do not forget to restart the servers after resetting the Security Password.

In case you face any issues feel free to let me know.

Regards

Deepak

- Rate Helpful Posts -

aubert ciavaldini · ‎12-20-2015

Hi Deepak,

how are you today!

I have a UCCX HA, the second UCCX has a problem the engine service is down and when I restart the engine service and after few minutes the engine service is down (shutdown).

I rebooted the server and same problem, after few minutes the engine service is down (shutdown).

Do you have an idea?

Thanks a lot for your help.

BR

Aubert

Deepak Rawat · ‎12-20-2015

What is the exact UCCX version you are using there Aubert.

Regards

Deepak

aubert ciavaldini · ‎12-21-2015

Hi Deepak,

here is the UCCX HA version: 9.0.2.11001-24.

BR

Aubert

Deepak Rawat · ‎12-21-2015

Can you post the output of show status command from UCCX Secondary CLI on which the engine is going in shutdown state.

Regards

Deepak

aubert ciavaldini · ‎12-21-2015

Hi Deepak,

sorry for delay, here is information on both UCCX:

Master:

admin:show status

Host Name    : eu-luc-uccx-02
Date         : Mon Dec 21, 2015 10:19:00
Time Zone    : Central European Time (Europe/Paris)
Locale       : en_US.UTF-8
Product Ver : 9.0.2.11001-24
OS Ver       : 5.0.0.0-2
License MAC : 470500e8e6c7

Uptime:
10:19:01 up 5 days, 14:47, 1 user, load average: 0.41, 0.30, 0.27

CPU Idle:   96.52% System:   00.50%    User:   02.99%
IOWAIT:   00.00%     IRQ:   00.00%    Soft:   00.00%   Intr/sec: 448.04

Memory Total:        4016504K
        Free:         159644K
        Used:        3856860K
      Cached:         928944K
      Shared:              0K
     Buffers:         148264K

                        Total            Free            Used
Disk/active         26631156K       15730104K       10626132K (41%)
Disk/inactive       27093228K       16366152K       10451828K (39%)
Disk/logging        94244060K       31362760K       58093932K (65%)

admin:

Slave:

admin:show status

Host Name    : eu-luc-uccx-01
Date         : Mon Dec 21, 2015 10:16:52
Time Zone    : Central European Time (Europe/Paris)
Locale       : en_US.UTF-8
Product Ver : 9.0.2.11001-24
OS Ver       : 5.0.0.0-2
License MAC : de6a6177bd5e

Uptime:
10:16:53 up 4 days, 17:29, 1 user, load average: 0.99, 0.36, 0.23

CPU Idle: 100.00% System:   00.00%    User:   00.00%
IOWAIT:   00.00%     IRQ:   00.00%    Soft:   00.00%   Intr/sec: 374.00

Memory Total:        4016504K
        Free:         162460K
        Used:        3854044K
      Cached:         603952K
      Shared:              0K
     Buffers:          25364K

                        Total            Free            Used
Disk/active         26631156K       15813436K       10542800K (41%)
Disk/inactive       27093228K       16449592K       10368388K (39%)
Disk/logging        94244060K       31706680K       57750012K (65%)

admin:

BR

Aubert

Deepak Rawat · ‎12-21-2015

Aubert,

Even though your disk logging looks ok at this point but I feel that somewhere in the past that was the issue and you might have restarted the secondary UCCX server in the recent times causing the CSCun54915 to come into effect.

It will be worth if you can contact TAC and they can possibly apply the workaround after confirming in the logs.

Regards

Deepak

aubert ciavaldini · ‎12-21-2015

Hi Deepak,

I resynchronized on both UCCX and Jtapi is ok for both UCCX.

Cisco JTAPI Resync StatusInfomational Message Cisco JTAPI Resync is completed

Cisco JTAPI Client
Node ID: 1 -- Cisco JTAPI Client versions are consistent
Node ID: 2 -- Cisco JTAPI Client versions are consistent

BR

Aubert

aubert ciavaldini · ‎12-21-2015

Hi Deepak,

I opened a case Cisco and thanks for your help.

Have a good day?

BR

Aubert

aubert ciavaldini · ‎12-22-2015

Hi Deepak,

how are you today?

Can you tell me if this message is a error message or I can proceed at backup?

Thanks a lot for all.

BR

Aubert

Deepak Rawat · ‎12-22-2015

This is just an informational message highlighting the fact the Security Password should be the same at the time of Restore as well. You can proceed with the backup.

Regards

Deepak

aubert ciavaldini · ‎12-22-2015

Hi Deepak,

thanks a lot for all.

BR

Aubert

How to check if the security password is valid on UCCX?