Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

CUCM 6.1(2) - backups via ssh often fail

Hi,

We are backing up the Publishers config via sftp (ssh) to a Unix server with ssh running.

Looking at the CallManager logs - we are getting consistent failures, then succeses at connecting via ssh to the backup server.

Detail from the Unix server:

Feb 3 02:00:00 admnpr01 ssh-server-g3: 701 Auth_method_failure, Username: callmgr, Auth method: publickey, Session-Id: 6BF68A81CC5DC02752471F14BF4D97CEF5C5B403

Feb 3 02:00:01 admnpr01 ssh-server-g3: 723 Keyboard_interactive_password_auth_error, Username: callmgr, Algorithm: password, "Could not exchange kbdint messages.", Session-Id: 6BF68A81CC5DC02752471F14BF4D97CEF5C5B403

Feb 3 02:00:01 admnpr01 ssh-server-g3: 723 Keyboard_interactive_password_auth_error, Username: callmgr, Algorithm: password, "Authentication failed for user `callmgr'.", Session-Id: 6BF68A81CC5DC02752471F14BF4D97CEF5C5B403

Detail from the logs which shows faiklures (f) and successes (s):

start key kbi fail kbi success login failure end copy

6BF68A81CC5DC02752471F14BF4D97CEF5C5B403 02:00:00 02:00:00 02:00:01 02:00:03 f

2359534D645D04D8A69B28F2421B53F5041BB8E3 02:00:01 02:00:02 02:00:03 s

27F3D091381898908F1DAD7DF81F25E33431B864 02:00:03 02:00:03 02:00:04 02:00:06 f

497C6EDFD6738EBB0F5A2D68E38FB990114060F7 02:00:04 02:00:05 02:00:06 s

As best i can tell, CUCM is trying to use a key to authenticate (fails) then tries kbi (Keyboard Interface) and fails. Then it trys kbi again and manages to successfully connect.... :o)

Can anyone shed light on what the default 6.1(2) backup tries to do? I thought it only used ssh with a username/password that we have set from the Backup GUI. The Unix sftp server logs would suggest it is trying a key, then username password, then username password again ?

Any ideas appreciated. 5 unsuccessful logins in a row lock the account on the sftp server - doh!

2 REPLIES
New Member

Re: CUCM 6.1(2) - backups via ssh often fail

Hi Andy,

Brandon Ta from Cisco told us on Cisco Networkers in Barcelona last week that they see some problems with sftp servers and he testet with the following ones:

SFTP: Unix (SunOS 5.6 Generic_105181-10) and Linux server (2.4.21-47.ELsmp and 2.6.9-42.7.ELsmp)

SFTP: Windows FreeFTPd (1.0.10 and 1.0.11)

New Member

Re: CUCM 6.1(2) - backups via ssh often fail

Thankyou! We have set the lockout on this particluar account on the sftp server to 10. We still get errors but it never locks out, so it does seem to backup correctly each night.

We typcally hit 3-4 failed logins before it logs in correctly. Seems to be that it tries multiple logins for different file copies, with some failing....all very odd!

496
Views
4
Helpful
2
Replies