×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Jabber for iPad not registering through VCS to TMS

Unanswered Question
Jul 19th, 2012
User Badges:

My one problem is that I can not seem to get my iPad to register to my company VCS Controller or Expressway.

I figure if I get the Controller working the rest will follow.

I have been doing Authentication on my TMS server and this works fine for my MOVI clients

Added a new Group in my Directory for the JabberTablet devices.

I created a new user for the ipad and it looks like it has all the information that is in the documentation.


Right now I am getting a "The username or password is invalid or the user account is inactive" error message.


Attached are the logs. 

If anyone can see something obvious, let me know.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
RICHARD MESSINGER Sun, 07/22/2012 - 16:22
User Badges:

Well, got tired of not hearing from anyone.

Put a monitor session on the port that has TMS and tried to register my iPad.  NO PACKETS

Then moved and put a monitor on the port for the VCS Control and tried again to register from the iPad.

Success Packets that are all ignored by the VCS Controller.

It seems that the iPad tries to set the session up using TLS pakets and never tries to try just TCP or UDP.


We did not want to bother with the hassle of getting a certificate, but is that the only way to do things, I guess we will have to do that.


Seems like the software should have been smart enough to try other methods to register.


But that is just me.

Can someone shed some light on this please? I have VCS-C and VCS-E identically configured. The VCS-C sitting on my network and the VCS-E sitting in front of the firewall. I can register and use Jabber on my Ipad when connected via the interent and coming in through the VCS-E.


When I am on my LAN I can not authenticated. The Jabber log produces this error at the end????






Thu Aug  2 14:39:41 2012

: TAF: SIP : Incoming SIP message: ---------------------------------------------

NOTIFY sip:[email protected]:52344;transport=tls SIP/2.0

Via: SIP/2.0/TLS 10.118.6.22:5061;egress-zone=DefaultZone;branch=z9hG4bKf505a98dba76d1916ba255d60f87d2ed710863.006602f8b287864e5201afc95762347a;proxy-call-id=8363ad7c-dca7-11e1-87b9-0010f31a4464;rport

Via: SIP/2.0/TCP 127.0.0.1:22400;branch=z9hG4bK3ba3d1b49fb866374f798e45970ef5b0;received=127.0.0.1;ingress-zone=DefaultZone

Call-ID: [email protected]

CSeq: 1 NOTIFY

Contact: "Provisioning Service"

From: [email protected]>;tag=e1e430e3

To: [email protected]>;tag=705b6436f835cb41

Max-Forwards: 69

Record-Route:

Record-Route:

Event: ua-profile;clientid="5e5874f8-e764-4449-a831-a5ef6cc4794b";model=jabbertablet;vendor=tandberg.com;profile-type=user;connectivity=0;version=1.0.0.0

P-Asserted-Identity: [email protected]>

Subscription-State: terminated

X-TAATag: 8363ae58-dca7-11e1-bb72-0010f31a4464

Content-Type: text/xml

Content-Length: 430



<?xml version="1.0" encoding="UTF-8" standalone="no"?>http://www.tandberg.net/Provisioning/2/">[email protected][email protected]86.12.153.205Rod Blackie1384384





Thu Aug  2 14:39:41 2012

: TAF: Provisioning : Provisioning succeeded - configuration: 384

384

High

Off

Off

Rod Blackie1


21000

21900

10

1300


30

Off




Off

Off

TRUE

TRUE

TRUE

TRUE

TRUE




Thu Aug  2 14:39:41 2012

: TAF:on_login_progress 1 : nuvia.co.uk

Thu Aug  2 14:39:41 2012

: TAF: SIP : SIPTRNSP_resolveResponseDest: secure channel enforced!

Thu Aug  2 14:39:41 2012

: TAF: SIP : Outgoing SIP message: ---------------------------------------------

SIP/2.0 200 OK

Via: SIP/2.0/TLS 10.118.6.22:5061;egress-zone=DefaultZone;branch=z9hG4bKf505a98dba76d1916ba255d60f87d2ed710863.006602f8b287864e5201afc95762347a;proxy-call-id=8363ad7c-dca7-11e1-87b9-0010f31a4464;received=10.118.6.22;rport=5061

Via: SIP/2.0/TCP 127.0.0.1:22400;branch=z9hG4bK3ba3d1b49fb866374f798e45970ef5b0;received=127.0.0.1;ingress-zone=DefaultZone

Call-ID: [email protected]

CSeq: 1 NOTIFY

From: [email protected]>;tag=e1e430e3

To: [email protected]>;tag=705b6436f835cb41

Server: TANDBERG/774 (MCX 4.5.0.0)

Content-Length: 0






Thu Aug  2 14:39:41 2012

: TAF: ICE : ICE is disabled, TurnServer is 'not provided', TurnAuthUsername is 'rod.blackie1', TurnAuthPassword is 'XXX', Force Turn Relay is 'OFF'

Thu Aug  2 14:39:41 2012

: TAF: SIP : Setting SipReg FSM in active (outbound index: 1).

Thu Aug  2 14:39:41 2012

: TAF:on_login_progress 1 : 86.12.153.205

Thu Aug  2 14:39:41 2012

: TAF: Signaling :           Sending REGISTER for [email protected] to 86.12.153.205 using transport auto

Thu Aug  2 14:39:41 2012

: TAF: SIP : Calling SIPREG_doRegister in SIPREG_StateActivateNewValue upon SIP_REG_STATUS_INACTIVE.

Thu Aug  2 14:39:41 2012

: TAF: SIP : Dumping registration status overview:

0: 86.12.153.205:5061 - UNUSED



Thu Aug  2 14:39:41 2012

: TAF: SIP : SIPTRNSP_resolveRequestDest: secure channel enforced!

Thu Aug  2 14:39:41 2012

: TAF: SIP : SipTrnsp: IP address or maddr in URL, sending Req to '86.12.153.205:5061'

Thu Aug  2 14:39:41 2012

: TAF: SIP : SipTrnsp(si=-1) SipSockMap_allocate: allocate 0 (global -1) type=PROXY   

Thu Aug  2 14:39:47 2012

: TAF: SIP : NetConnectRej socketId=0x10000

Thu Aug  2 14:39:47 2012

: TAF: SIP : NETConnectRej: Connection timed out

Thu Aug  2 14:39:47 2012

: TAF: SIP : SipTrnsp: Connect Rej on localSocket 65536

Thu Aug  2 14:39:47 2012

: TAF: SIP : Transport failed to send registration (sipexcept: 1) to 86.12.153.205:5061

Thu Aug  2 14:39:47 2012

: TAF: SIP : Dumping registration status overview:

0: 86.12.153.205:5061 - UNUSED



Thu Aug  2 14:39:47 2012

: TAF: SIP : Calling SIPREG_doRegister in SIPREG_StateActivateNewValue upon SIP_REG_STATUS_INACTIVE.

Thu Aug  2 14:39:47 2012

: TAF: SIP : Dumping registration status overview:

0: 86.12.153.205:5061 - UNUSED

1: 86.12.153.205:5060 - UNUSED



Thu Aug  2 14:39:47 2012

: TAF: SIP : SipTrnsp: IP

Patrick Pettit Thu, 08/02/2012 - 12:14
User Badges:
  • Cisco Employee,

HI Rod.  That address looks public to me. What I'm thinking is happening here, is that the Ipad is trying to open a connection to that address and it fails. 


Wondering here, since we only have this locally, and you may need to test this and see the outcome, but if you mod the template configuration to include SIP Server (VCS Control) and Public SIP Server (VCS Expressway) in the template, and try again.  Wait for it to move through the provisionign process (a couple of minutes or so) and see if you can try and log in again?  Looks like to me its trying to connect to that address and its failing.  Maybe give it a shot, and let us know?


Thanks. 


VR

Patrick

Patrick


You are a star ! many thanks. It just goes to show that i pays to recheck everything when troubleshooting. My problem turned out to be as you suggested. I had accidently put the public IP in bothe the public SIP address and the SIP server address filed withing the template. The resolution was to change the SIP server address to match my internal VCS..


Thank you very much.


Rod

Patrick Pettit Thu, 08/02/2012 - 12:02
User Badges:
  • Cisco Employee,

Hi Richard.  Is [email protected] trying to subscribe? 


The outbound transport is TLS and VCS responds with TLS as well.  After receiving the first 401 Unauthorized, iPad seems to resend the subscribe with Authorization credentials.  VCS then sends 403 Forbidden. 


Not sure why, maybe a credential check somewhere, or something else.  If your running X7, can you run network log debug and try to subscribe again.  I'd like to see this from the VCS point of view if your still interested in taking a look still.  Thanks. 


VR

Patrick

dwindorski Wed, 03/20/2013 - 07:34
User Badges:

Richard,


Did you ever get an answer or fix to the issue you had?  I'm running into the same thing.  It's really odd.  Movi works fine.  Jabber for iPad can not authenticate.  In fact, if I keep trying, I lock my account.  So I know whatever is going up to authentication has the account correct but the password is getting corrupted.  I'm LDAP integrated.


Thanks,

Dave

Patrick Pettit Wed, 03/20/2013 - 12:19
User Badges:
  • Cisco Employee,

HI Dave.  Your problem may be different here.  When you use IPAD to register, do you have to specify DOMAIN/username to log in perhaps?


VR

Patrick

Patrick Pettit Wed, 03/20/2013 - 17:15
User Badges:
  • Cisco Employee,

Hi Dave.  Rethinking this, you saying your getting locked out of the account your using? Is it possible you can include a log from the VCS Control here?


I'm also curious to know the code versions running in VCS C and E, TMS etc.  and is the jabber ipad template loaded on TMS and associated to your user account?


VR

Patrick

dwindorski Fri, 03/22/2013 - 08:54
User Badges:

Hey Patrick,


VCSc and expressway are 7.2.1.  TMS is 13.2.1.  The jabber template I'm using is 1.0.2.0.  I'll have to see about getting a log file.  The template is indeed associated with my account.


Thanks,


Dave

Patrick Pettit Fri, 03/22/2013 - 08:58
User Badges:
  • Cisco Employee,

HI Dave.  Thanks.  If you can, and if its possible, network log debug from VCS that is provisioned so we can see whats happening.  Also, are you logging in as DOMAIN\username?  There's a bug open when doing it this way, just wanted to be sure is all.


Thanks.


VR

Patrick

dwindorski Fri, 03/22/2013 - 10:25
User Badges:

Yep, I did see that bug.  We are not including the domain.

Actions

This Discussion