cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
2791
Views
5
Helpful
6
Replies
PWJPW
Beginner

CUPS 11.5 not allowing XMPP clients to authenticate

Hi All

We recently upgraded from UC 10.5.2 to 11.5.1 (CUCM,CUPS and CUC).

We use Jabber for Windows and MAC devices, all working well, but all 3rd party XMPP clients can no longer authenticate.

Looking at the debug logs of an XMPP client (such as Pidgin), it shows the problem:


(11:26:42) jabber: Sending (ssl) (me@mydomain.com): <stream:stream to='mydomain.com' xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' version='1.0'>
(11:26:42) jabber: Recv (ssl)(178): <stream:stream xmlns='jabber:client' xml:lang='en-US.UTF-8' xmlns:stream='http://etherx.jabber.org/streams' from='mydomain.com' id='TJbNCkdwzZW7RT0o0SvDvA6628' version='1.0'>
(11:26:42) jabber: Recv (ssl)(139): <stream:features><mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><mechanism>CISCO-VTG-TOKEN</mechanism></mechanisms></stream:features>
(11:26:42) sasl: Mechs found: CISCO-VTG-TOKEN
(11:26:42) sasl: No worthy mechs found
(11:26:42) connection: Connection error on 06DF7CE8 (reason: 3 description: Server does not use any supported authentication method)


However, according to Cisco documentation, CUPS should support/allow both PLAIN AND CISCO-VTG-TOKEN mechanisms.

https://developer.cisco.com/fileMedia/download/a2ce9071-4c3b-4ad5-adaa-095153ea1b4c

In particular:

Cisco Unified CM IM and Presence provides two different SASL authentication mechanisms when connecting over the XMPP Interface: PLAIN and CISCO_VTG_TOKEN. When an XMPP Client connects to Cisco Unified CM IM and Presence, the server will return the supported SASL authentication mechanisms in in stream features:

<mechanisms>
<mechanism>PLAIN</mechanism>
<mechanism>CISCO_VTG_TOKEN</mechanism>
</mechanisms>

Seeing as CUPS is not sending the PLAIN mechanism option to the client, it cannot proceed.

Does anyone know a setting in CUPS where it may have been disabled, or how else to check/debug?

Thanks

James

6 REPLIES 6
PWJPW
Beginner

Just hoping someone would be able to advise what the solution may be.

Thank you

James

PWJPW
Beginner

Just hoping someone can work some magic on this for me?

HI!

 

Do you find solution of this issue?

jkhtkd5385
Beginner

Did anyone ever get this to work? I have it working internally but not through Expressway.

Hi

 

how did you get to work internally?

 

Regards,
Peter

visitdemo11
Beginner

How did you solve this issue?
Create
Recognize Your Peers
Content for Community-Ad