Cisco MRA not working *New deployment*

[Jan Slabber]

We are having trouble getting MRA working in our environment and would like some help to identify why it is not working.

We are currently running

CUCM : System version: 11.5.1.15900-18 Unrestricted
Cisco VCS Control: Version: X8.11.4
Cisco VCS Expressway: Version: X8.11.4

Everything seems to be configured correctly but I am not able to work out where this is falling over.

On the VCS Control I can see the user is authenticated:

edgeconfigprovisioning: Level="INFO" Detail="Authenticated user successfully" Username="8130" ClientId="85.255.234.187" UTCTime="2019-03-20 09:48:04,482"

But the Expressway gives the error:
traffic_server[7453]: Event="get_edge_sso" Detail="Access denied" Reason="Only legacy auth supported" Domain="global.com" Src-ip="85.255.234.187" Src-port="17712" UTCTime="2019-03-20 09:47:50,907

I've tried to find more information on the Reason="Only legacy auth supported" but cannot find any further information.

[Roger Kallberg]

Does this post match your situation? https://community.cisco.com/t5/collaboration-applications/jabber-cannot-communicate-with-server-after-authentication/td-p/4305769

[Alessandro Bertacco]

Hi Roger, unfortunatly no. Communication beetween expe-C and CUCM is fine. From the log we see that Expe-C successfully pulled TFTP, and configuration from the CUCM but we cannot see any POST message to the expe-E. All SSH tunnel beetween domains configured on the expre-C and expe-E are up & running.

TAC are investigating but at today no solution found.

Regards

Alessabdro

[ahmedelrayess]

what was the root cause for this issue cause i am facing the same error