Re: My Fast Dial Authentication

frazier24 · ‎08-12-2004

Hi,

I know.. silly question..

My customer is using the My Fast Dial Service via CCM 4.0(1) sr2. Each time my customer hits the Services button, and selects the My Fast Dials Service, they get prompted to authenticate with their UserID and Password.

What UserID and Password is it asking for? And how can my customer make this authentication more automated so that they don't have to keep authenticating?

Thanks in advance.

Lee

aaronw.ca · ‎08-12-2004

When you defined the fastdials service in CallManager administration/Phone Services Configuration, did you define the PreDial, UserID, and UserPIN parameters?

When the user subscribed to the fastdials service, did they fill in the userid and userPIN parameter values with their userid and userPIN (from the global directory)?

If the userID and userPIN parameters are not supplied when the user subscribes to the fastdials service, the fastdial service will request these values from the user each time the service is requested by the user. You can avoid being forced to authenticate each time by supplying the userID and userPIN values in the service subscription.

frazier24 · ‎08-12-2004

Thanks for the reply..

Yes, my customer has done all of this, and I have verified this on many phones/accounts.. Plus, I know this works in CCM 3.3(x). But, has anyone done this with CCM 4.0(x)? So far, I have not been able to get this Service to work properly.

I am wondering if CCM is asking for a second authentication, of which I have no idea why..

Lee

aaronw.ca · ‎08-12-2004

Hmmmm.. are you sure the correct username and PIN was used? (not password, it wants the PIN)?

Otherwise, I suppose it could be a bug. Doesn't make much sense.

One thing you could try is to call the following URL in a web browser:

http://callmanager/CCMCIP/getservicesmenu.asp?name=SEP0006276D0C21

where callmanager is your callmanager hostname/ip address and replace the SEP0006276D0C21 string with the phone name that you're debugging.

This will return a list of services that the phone is subscribed to, and you can see the actual URL that the phone calls for each one including parameters. See if the URL and parameters look correct, and try calling that URL in a browser as well and see what happens.

e.g.:

http://callmanager/ccmpd/xmlFastDials.asp?PreDial=&UserID=fred&UserPIN=12345

frazier24 · ‎08-12-2004

I'll try it.. This may be a bug in CCM 4.0x, seeing that I've never seen this happen with CCM 3.3(x).

Thanks again.

raywood · ‎08-27-2004

I wonder if you did the same thing I did. Here is the problem. If you change the user's password and/or PIN _after_ subscribing to FastDials, FastDials still uses the original authentication used when it was subscribed to, causing it to fail with the message you are getting. [Maybe Cisco should document this anomaly?] The fix is to go into global directory and set the password and PIN to whatever you want it to be, then log into CCMuser and unsubscribe from the Cisco FastDials service ( if it appears more than once, subscribe from all instances), then subscribe again to Cisco FastDials.

Ray W.

jasyoung · ‎08-29-2004

All you need to do is update the PIN on their existing service subscription(s); you don't need to tear them down and rebuild them. You don't need to do anything if the user is just changing their password, only if they change their PIN. The PIN doesn't protect all that much security-sensitive stuff, so it's not necessary to change it very often.

And yes, it would be nice if CCMUser would update subscriptions for you. There's a long-standing enhancement request open on this, CSCdx84393. I do not know if the feature is coming anytime soon.

toml · ‎01-03-2005

hi, it has been a while since I used a ccmuser pin (personal identification number). I know the ccmuser password is requried to access the ccmuser web page. I think that the pin is used to subscribe to fast dials and address book services. Please correct me on the correct use or requirement for the pin number. When would an end user need to ever use the pin versus the password?

Thanks.

brian-henry · ‎01-26-2005

I saw a similar issue where some phones did not require authen while others did and everything was the same throughout the network. It ended up being a firewall preventing a range within the Phones scope from getting to where it needed to go by trying to get authentication.