Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About IngoJuergensmann
Stats
Member since
03-09-2015
154
Posts
0
Helpful
8
Solutions
Same over here. And it only
in Other Collaboration Subjects
08-08-2017
07:13 AM
08-08-2017
07:13 AM
Same over here. And it only happens with ce8.3.2a715ecb.
That single ce8.2.1 with same error might have indeed wrong credentials. At least all ce8.0.0 to 8.2.2 and all tc endpoints don't have that issue.
... View more
Created by
IngoJuergensman
in Other Collaboration Subjects
11-10-2015
05:08 AM
11-10-2015
05:08 AM
Well, SSL certs are a mess, really.
Anyway, we are not using LDAPS but only the plain LDAP with no SSL certs involved. However I think for Windows this seems to work now, but on Mac we still have the issue that LDAP queries are not working properly. The TAC engineer was unavailable for some time and is expected to have returned yesterday, so maybe I get some updates the other days...
... View more
Created by
IngoJuergensman
in Other Collaboration Subjects
09-17-2015
10:42 PM
09-17-2015
10:42 PM
No, no news yet. We have still the SR with TAC open, but there's no process here and I'm quite busy with a large project to keep this going together with our Gold Partner. We had to move the user group inside the AD anyway because there were other problems with this user group being outside of the existing company structure in the AD. These problems resulted in not being able to logon to the Wifi network and such.
... View more
Created by
IngoJuergensman
in Other Collaboration Subjects
03-15-2015
11:36 PM
03-15-2015
11:36 PM
Ok, we had a Webex with the Cisco TAC engineer on Friday and he found out that the LDAP server is giving a login error when using the shorter LDAP auth search base DN. Why this is happening, is a different story, because when using a LDAP browser it is working. Maybe the LDAP user we are using in CUCM do not enough priviledges to access this higher level in LDAP subtree. We have to investigate this with our Windows admins next week. Other reasons that came to mind are: CUCM LDAP auth search base needs to start with OU=..., CUCM LDAP auth search base cannot be shorter than the LDAP directory search base in both cases: CUCM does something different (comared to LDAP browser) in setting up the LDAP connection. In any case: there's no quick fix or workaround - other than moving the subtree for our new office (and independent company) within our existing and working subtree. That's nothing completely and awfully bad, but it's somewhat contradicting the design goal to separate both companies as much as possible in our LDAP/Active Directory. I think we have to live with that, because the decision that needs to be taken (moving company inside others companys LDAP subtree (clean design) vs. working setup) will persist. Here is what the TAC engineer found out: --------------------------------------------------------------------------- The first difference in LoginCheckRequest in CTI are lines 03514824.073 |14:29:30.121 |AppInfo |LDAP Search for User base: 'OU=User,OU=company_DE,DC=company,DC=de' 03531822.073 |14:36:43.462 |AppInfo |LDAP Search for User base: 'DC=company,DC=de' Then in working scenario there is 03514824.074 |14:29:30.124 |AppInfo |LDAP Search complete. Code: 0 And after that there is process of getting control over Phone Which is missing in nonworking. We are receiving different message from LDAP in nonworking As response for LDAP 229 searchRequest(3) "OU=User,OU=company_DE,DC=company,DC=de" wholeSubtree Based on this that is LDAP, it is responding in different way.
... View more
Created by
IngoJuergensman
in Other Collaboration Subjects
03-12-2015
02:16 AM
03-12-2015
02:16 AM
Hi Aaron! Also the change looked promising yesterday, this morning all users were unable to login. So I reversed the change back to its original setup. We are investigating this now with a Cisco TAC engineer and I expect to have a Webex today on this topic... I'll keep you updated...
... View more
Created by
IngoJuergensman
in Other Collaboration Subjects
03-11-2015
04:30 AM
03-11-2015
04:30 AM
Yes, today I've tested port 3269 as well. It could only connect with SSL checked on, but CTI didn't work as well. Then I tried to connect to port 3268, without SSL, and CTI is working. According to our Windows sysadmins it shouldn't be possible to authenticate against a GC, but logging into Jabber as well as CUCM does still work. The servers are still the same, but use a different port. Personally I see no reason why it shouldn't work with port 389 as well, giving a timeout instead. We have now a TAC SR open and I'll report back any findings from the TAC to here.
... View more
Created by
IngoJuergensman
in Other Collaboration Subjects
03-10-2015
03:09 PM
03-10-2015
03:09 PM
Hi Aaron! a) I tried to change search base DN from OU=User,OU=company_DE,DC=company,DC=de to OU=company_DE,DC=company,DC=de which results in a still working CTI with Cisco Jabber. When shortening DN to DC=company,DC=de it stops working. b) I'm attaching SDL log and some output from PRT. 172.25.10.139 is the IP of the PC running Cisco Jabber. Hope this helps and someone can find something... (I've already opened a SR with our Gold Partner so that a TAC case can be opened this way...)
... View more
Created by
IngoJuergensman
in Other Collaboration Subjects
03-10-2015
07:56 AM
03-10-2015
07:56 AM
Hi Aaron! Thanks for answering! We are already using a non-SSL connection to our AD on port 389. I don't think that response times are an issue here, because there's not much outside of the original search base DN.
... View more
Created by
IngoJuergensman
in Other Collaboration Subjects
03-10-2015
03:33 AM
03-10-2015
03:33 AM
This is a crosspost from https://communities.cisco.com/thread/50881 - I believe it is better suited to be discussed over here... Maybe someone can confirm this: When changing LDAP auth user search base DN in CUCM 10.5.2 this results in loss of CTI functionality in Cisco Jabber 10.6.x, when logging into Jabber after the change has been made. Changing LDAP auth user search base DN back to its original value and restarting Cisco Jabber will make CTI work again. More detailed information: We are about to set up a new site office or more precise: a new subsidiary company. This subsidiary company will be located outside of the current search base in our AD. Current user search base for LDAP authentication is: OU=User,OU=company_DE,DC=company,DC=de The new location would be: DC=company,DC=de After this change has been made, the user is still able to login in Cisco Jabber as well as in CUCM Self Care site. I take this as confirmation that authentication is working with that new LDAP auth user search base. The problem is: when the users will sign into their Cisco Jabber client at next opportunity, they will experience that CTI will not work anymore. The users are listed as "Active LDAP Synchronized User". The corresponding error in Cisco Jabber is: Deskphone - Unhealthy Status: Not connected Protocol: CTI Reason:Connection error. Ensure the server information in the Phone Services tab on the Options window is correct. Contact your system administrator for assistance. When changing search base DN back to its original setting, CTI is working again when the user is logging in again. This behaviour is reproducible and it doesn't matter whether you restart CTI Manager in Serviceability or not. My undestanding, however, is: changing the user search base DN for LDAP auth to a higher entry should not affect CTI at all. The user DN should remain the same, which is confirmed by users being able to login in Cisco Jabber as well as in CUCM itself, for example the self care portal. Is there a workaround possible? Or even a solution?
... View more
Labels:
Created by
IngoJuergensmann
in Collaboration Applications
01-08-2020
01-08-2020
Hi!When using ACME/LetsEncrypt SSL certs on Expressway and using the
Expressway for XMPP Federation ...
Created by
IngoJuergensmann
in Collaboration Applications
01-08-2020
01-08-2020
One question: do you use the Expressway with ACME for Jabber XMPP
Federation as well?
Created by
IngoJuergensmann
in Collaboration Applications
11-05-2018
11-05-2018
Hi! We have multiple CUCM/IM&P (about 30) clusters that cannot be
interconnected via Intercluster Pe...
08-08-2017
Same over here. And it only happens with ce8.3.2a715ecb. That single
ce8.2.1 with same error might h...
Created by
IngoJuergensmann
in Unified Communications Infrastructure
11-26-2015
11-26-2015
Hi Viraj!You question indicates that you are running on an older version
of CUCM. In newer CUCM vers...
11-10-2015
Well, SSL certs are a mess, really. Anyway, we are not using LDAPS but
only the plain LDAP with no S...
09-17-2015
No, no news yet. We have still the SR with TAC open, but there's no
process here and I'm quite busy ...
03-15-2015
Ok, we had a Webex with the Cisco TAC engineer on Friday and he found
out that the LDAP server is gi...
Created by
IngoJuergensmann
in Unified Communications Infrastructure
03-12-2015
03-12-2015
I've crossposted this to supportforums.cisco.com:Cisco CUCM 10.5 - LDAP
auth & CTI | Other Collabora...
03-12-2015
Hi Aaron!Also the change looked promising yesterday, this morning all
users were unable to login. So...
03-11-2015
Yes, today I've tested port 3269 as well. It could only connect with SSL
checked on, but CTI didn't ...
Created by
IngoJuergensmann
in Other Collaboration Subjects
03-10-2015
03-10-2015
Hi Aaron!a) I tried to change search base DN from
OU=User,OU=company_DE,DC=company,DC=de to OU=compa...
Created by
IngoJuergensmann
in Other Collaboration Subjects
03-10-2015
03-10-2015
Hi Aaron!Thanks for answering! We are already using a non-SSL connection
to our AD on port 389. I do...
Created by
IngoJuergensmann
in Other Collaboration Subjects
03-10-2015
03-10-2015
This is a crosspost from https://communities.cisco.com/thread/50881 - I
believe it is better suited ...
Created by
IngoJuergensmann
in Unified Communications Infrastructure
03-09-2015
03-09-2015
Hi!Maybe someone can confirm this: When changing LDAP auth user search
base DN in CUCM 10.5.2 this r...
Public Statistics
| Date Registered | 03-09-2015 02:27 PM |
| Date Last Visited | 02-13-2020 09:59 AM |
| Total Messages Posted | 154 |
