Showing results for 
Search instead for 
Did you mean: 

Problem with MRA registration with two domain deployment



So I have deployment with abc.local and Users will be joining with abc.local only, to make login proces transparent to them. So I put local config file in Jabber 11.7.2 (version which doesn't encode local config files, and still cares If I put jabber-config-user.xml on the right place) serviceDomain=abc.local.

I see it resolving, goes to EXPE, through UC traversal zone to EXPC, asks me for passoword.

On jabber I am getting that communication with  server is not possible. In EXPC event logs I see that my username is successfully authenticated, however I am also getting an error:


traffic_server[25371]: Event="Request Failed" Detail="Access denied" Reason="Request domain not in authorised deployment" Username="gpilat" AuthDeployment="1" ReqDomain="" ReqDeployment="0" Request="" UTCTime="2019-02-21 15:43:30,922"


I followed Mobile and Remote Access Through Cisco
Expressway deployment guide, as well as :


Why is EXPC going to CUCM with domain when it is my outer domain and serves purely for resolving EXPE?

I put this domain in EXPC's server certificate, but it didn't help.

Should I put it in IM&presence as additional domain?

My jabber can login with no problem from the inside with gpilat@abc.local


any suggestion is welcomed




Sandro Nardi

is the domain configured on Expressway C under Configuration->Domain?
is correctly syncronized with Expressway E under Status-> Unified Communications status -> Domains?



got it working in the meantime, and here's what the deal was:


I had the same string set in "domains" for MRA and webRTC link in CMS section (both on Expressway)


both were set to video.XXXX.YY. When I realised where the catch was, I changed CMS link to and the error was gone.


Misleading was the following:

If you first do "CMS" portion, and "Domain" portion afterwards, you will not get any configuration error, expressway will allow you to configure it in such way only to drive you mad with error from the logs from the original post.

If you do it the other way around (which, of course, isn't how I did it), it will give you error making you re-evaluate your domains/links).


Anyway, hope this will help somebody


Content for Community-Ad

Spotlight Awards 2021