CUPC cannot login

[zamora0800]

Hi my name is Brian and I need some help. I have been struggling to get my  CUPS/CUCM 7.1/CUPc Integration working for weeks and just cannot get it to work. This is a VM integration as well so I am hoping that does not have anything to do with it.

I started with running the System Dashboard

Topology Background

1. VMware Infrastructure 3.5 ESX Server

2. CUCM 7.0 (2)

3. CUPS 7.0 (5)

4. Windows Server 2003 (AD, LDAP server)

5. CUPc 7 1

I started with running the System Dashboard

1. System- no errors

2. Topology - no errors

3. Cisco Unified Personal Communicator

    -shows error for conferencing server as I have not set up one

I have the LDAP set in CUPS this way

bind distinguished name cn=svcldap, cn=users, dc-cisco, dc=local

search context- cn=users, dc=cisco, dc=local

*The users show up in CUPS and they are enabled for CUPc

*I have the CUPS server in the login server field on the CUPc agent

I have added the phone to UCM using the UPCXXXX format and unchecked the  allow  control of device from

I have tried restarting Tomcat, sync and almost every other relevant service.

attached are all relevant settings

Can anyone suggest any help?

[Mohammed Al-Assadi]

Please give us the exact Error message?

Is it Unknow login Failure?

or

Username and password is incorrect??

If the it is the first one check if user licensed on CUCM and you can see the user in CUPS.

If the second one then check the digest Credentials in the End User Configuration in CUCM.

Please rate helpful posts!

[zamora0800]

Hi and thanks for the reply..

the exact error is

Login failed. Make sure your username and password are correct.

I have checked the user digest credentials. When I looked it was blank for the user I am trying to log in with. I then changed it to the password I have been trying to use- the same password from Active Directory. It did not work

I have also pasted the default credential policy in case it's relevant.

Credential Policy Default Information

Credential User
Credential Type
Credential Policy	Default  Credential Policy default
Change Credential
Confirm Credential
User Cannot Change
User Must Change at Next Login
Does Not Expire

[Mohammed Al-Assadi]

If you Integrate CUCM with AD then you need to use the AD password other wise use CUCM end user password 

If it is helpful please rate.

[zamora0800]

In order to avoid confusion I kept one single password and it is managed via Acitive Directory -LDAP. I know this password works because I can log into my CCMuser page using the username and password.

Any other suggestions?

[htluo]

were you able to log into CUPS user option page with the same credential?  (http://ip-of-cups/ccmuser)

Michael

http://htluo.blogspot.com

[zamora0800]

Michel  thanks for asking.

I just logged in successfully

[zamora0800]

sorry to be clear- I logged in successfully to the Presence CCMUser page but NOT to the CUPC

[htluo]

you may try the following:

1) On CUCM > System > Licensing > Capability Assignment.  Unlicense/re-license the user.

2) On CUPS > Serviceability > Tools > Control Center - Network Services, restart "Cisco UP Client Profile Agent".

Michael

[zamora0800]

Mike

I unlicensed the user then restarted the service.  I went back and re-licensed the user and the re-started the service once more and no luck.

Thanks for the reply

[htluo]

If that's the case, you need to generate problem report from CUPC > Help (with "Enabled Detailed" logging turned on before).  Even better, get a packet capture from CUPC computer.

Michael

[zamora0800]

Mike

where can I find the logs? Also what am I looking for exactly on the capture? Am I looking for LDAP stuff or something else?

[htluo]

Once you generated problem report, it's on your desktop.  In packet capture, what we're interested in are SOAP message.

Michael

[zamora0800]

Here is the XML file

the text file is attached

[htluo]

Based on the client log, it's just regular username/password issue:

2010-04-04 16:29:30,953 [0x0000106c] DEBUG LCSoap - Response The username/password entered is invalid.
2010-04-04 16:29:30,953 [0x0000106c] DEBUG LCConnection - CUPS_CONFIG setReason(): [NONE] --> [REFUSED]
2010-04-04 16:29:30,953 [0x0000106c] ERROR LCMiddleware - (MWMSG_EIM_SOAPLOGINFAILED) Failed to log in to SOAP server https://10.10.100.39/EPASSoap/service, The username/password entered is invalid.
2010-04-04 16:29:30,953 [0x0000106c] DEBUG LCConnection - CUPS_CONFIG setReason(): [REFUSED] --> [INVALID_CREDENTIALS]
2010-04-04 16:29:30,953 [0x0000106c] DEBUG LCMiddleware - EPASInterfaceManager::connect(). Invalid credentials

If you're pretty sure the username password was right, we need server logs.

1) CUPS > Serviceability > Trace > Configuration > Cisco UP Client Profile Agent, set trace level to "Debug".

2) Reproduce the problem.

3) Collect "Cisco UP Client Profile Agent" logs and "Cisco Tomcat Security" logs.

Michael