Solved: Re: After upgrade to Jabber 11.9 MRA not working any more

fuhdan · ‎09-07-2017

Hi

I have Jabber 11.6 with MRA working. I did an upgrade to Jabber 11.9. Internaly it's working fine. But over MRA, I get a message that the config is changed and I should login again. After logout, I can't login any more. The error: wrong username / password.

CUCM version: 11.5

CUC Version: 11.5

IP&P Version: 11.5

EXWAY Version: 8.10

When I reset Jabber and add a jabber-config-user.xml I get the error cannot find services. I have the Presence domain: domain.com and the internal domain domain.local for authentication.

I have the setting <VoiceServicesDomain>domain.com</VoiceServicesDomain> in the jabber config file.

Thanks for any help.

Alok Jaiswal · ‎09-07-2017

By any chance did you have SSO Enabled ?

2017-09-07 16:37:47,511 DEBUG [0x00001d7c] [rvices\impl\system\SingleSignOn.cpp(116)] [Single-Sign-On-Logger] [CSFUnified::SingleSignOn::Impl::getIsSSOEnabledFromConfig] - SSO IS enabled

Can you tell me if your Expressway is set to support SSO ?

Regards,

Alok

View solution in original post

collinks2 · ‎09-07-2017

Hello,

I have smilar problem but the reverse is the case. I have the following applications

CUCM 10.5.2

CUP 10.5.2

EXP 8.9.2

i upgraded the jabber for windows to version 11.9. My MRA is working perfectly well but the log in from internal network is showing an error 'cannot communicate with the server ,reset jabber...

you can check if traffic is entering your expressway E and C.Then check from Expressway C to CUCM . do u have sip trunk from c to cucm ?you can also using cisco collaboration checker to test

https://cway.cisco.com/tools/CollaborationSolutionsAnalyzer/

fuhdan · ‎09-07-2017

Hi

Thanks for the answer.

According to the Analyzer, it seems to be OK. MRA is also working fine with Jabber Version 11.6

I don't have any SIP trunk between CUCM and Expressway C. I can see the traffic from Expressway E to Expressway C. I don't have any blocks on the firewall.

To me it looks, that the jabber config file is not working. At least the option VoiceServicesDomain not. If I reset Jabber 11.6 and use the jabber-config-user.xml I can login. If I reset jabber 11.9 and use the same jabber-config-user.xml, I get the error Can not find your services automaticly.

What is the change between Jabber 11.6 and jabber 11.9 for MRA?

Alok Jaiswal · ‎09-07-2017

Can you create Jabber problem report and attach here ? Without logs its difficult to tell what's happening.

Regards,

Alok

fuhdan · ‎09-07-2017

I created a Jabber Problem report.

fuhdan · ‎09-07-2017

Hi

Here an other jabber log.

I found, that jabber was not able to download the edge config:

https://exwayeste-01.stebler.ch:8443/c3RlYmxlci5jaA/get_edge_config

If I do that in the browser from the same computer, i get the correct xml file back.

collinks2 · ‎09-07-2017

OK. Add that https link in the https allow list of expressway c. Try to see
if u can log in

collinks2 · ‎09-07-2017

Hi,
One change I have noticed is that mra users sign in automatically to CUCM,
cup, cuc and Web ex. Users don't need to sign in manually. Once the Jabber
launches, it signs you in all the uc applications.
It looks two of us need to help each other. 11.9 version is working with my
MRA unlike yours but working internally with yours unlike mine (lol)
On the jabber client, can you input the ip address of your Im and presence
server and check.

fuhdan · ‎09-07-2017

lol.

OK. Do you have split Domain or a single domain?

I have the srv records vor the internal domain domain.local:

_cisco-uds._tcp.domain.local

And on the cucm I have the service profile, where unity and im&p are defined. That's it. I login with user@domain.local After service discovery, I will be asked for username and password (username without @domain.local)

I have as well the srv record (internal) _cisco-uds._tcp.domain.com whitch points to the local cucm.

collinks2 · ‎09-07-2017

I have a single domain. Both MRA and internal are working now.

collinks2 · ‎09-08-2017

hello daniel, i am battling with jabber issue .i cant login internally and externally.see my dns srv lookup

Default Server: win-52ec91ac84c.fuoict.com
Address: 10.108.13.20

> set type=srv
> _cisco-uds._tcp.fuoict.com
Server: win-52ec91ac84c.fuoict.com
Address: 10.108.13.20

_cisco-uds._tcp.fuoict.com      SRV service location:
          priority       = 10
          weight         = 80
          port           = 8442
          svr hostname   = cucm-sub.fuoict.com
_cisco-uds._tcp.fuoict.com      SRV service location:
          priority       = 5
          weight         = 10
          port           = 8443
          svr hostname   = cucm-lab.fuoict.com
cucm-sub.fuoict.com     internet address = 10.108.13.10
cucm-lab.fuoict.com     internet address = 10.108.13.17
> _cuplogin._tcp.fuoict.com
Server: win-52ec91ac84c.fuoict.com
Address: 10.108.13.20

_cuplogin._tcp.fuoict.com       SRV service location:
          priority       = 0
          weight         = 0
          port           = 8442
          svr hostname   = imp-lab.fuoict.com
imp-lab.fuoict.com      internet address = 10.108.13.18
>

fuhdan · ‎09-08-2017

OK. The cuplogin SRV you don't need.

On the CUCM side, you need to have a working SIP Trunk to the IM&P Server's. You can enable the SIP option Ping on the SIP Trunk profile, so you have a view of the SIP Trunk status:

Then you need to configure the UC Services:

You can also use an IP address.

Add the configured Service to the UC Profile:

And last but not least, you need to configer the user to use the IM&P service:

On the IM&P side, you can use the troubleshooting page to finde any Errors.

On the System --> Presence Topology page you should see now the servers and the users:

Please let me know, if that helps you or where you have an issue.

Cheers Daniel

collinks2 · ‎09-08-2017

I am having issues with jabber 11.9.i downgraded to 11.8 and I was able to
log in internally. Also, my jabber 11.9 for MRA has logged on now. I don't
why jabber 11.9 refused to log in internally. It logged in yesterday for
the first time.

fuhdan · ‎09-08-2017

OK. So jabber 11.8 is working internally and via MRA. right? But jabber 11.9 is not working at all.

What ist the error message you get, if you try to login internally? Can you post a jabber Problem Report?

collinks2 · ‎09-08-2017

jabber 11.9 is working for MRA but not internally. Jabber 11.8 was working internally before (have not tested it for mra but it was working for MRA before i upgraded to 11.9) but stopped after i have modified jabber-config.xml file.take a look at my jabber-config.xml file

<?xml version="1.0" encoding="utf-8"?>
<config version="1.0">
<Policies>
   <TelemetryCustomerID>fuoict.com</TelemetryCustomerID>
   <EnableCallPickup>true</EnableCallPickup>
   <EnableGroupCallPickup>true</EnableGroupCallPickup>
   <EnableOtherGroupPickup>true</EnableOtherGroupPickup>
   <EnableHuntGroup>true</EnableHuntGroup>
   <PreventDeclineOnHuntCall>true</PreventDeclineOnHuntCall>
   <ServiceDiscoveryExcludedServices>CUCM</ServiceDiscoveryExcludedServices>
   <VoiceServicesDomain>fuoict.com</VoiceServicesDomain>
   <EnableSIPURIDialling>true</EnableSIPURIDialling>
</Policies>
<Questionnaire>
   <WhichClient>Android,Windows</WhichClient>
   <WhichDeploymentModel>On-Prem</WhichDeploymentModel>
   <WhichProductMode>Full UC</WhichProductMode>
   <WhichCUCMVersion>UseServiceProfile</WhichCUCMVersion>
   <WhichCalendarIntegration>Outlook</WhichCalendarIntegration>
   <WhichDirectory>UDS</WhichDirectory>
</Questionnaire>
<Directory>
   <DirectoryServerType>UDS</DirectoryServerType>
   <UdsPhotoUriWithToken>http://www.photo/cucm-lab.fuoict.com/path/%%uid%%.jpg</UdsPhotoUriWithToken>
</Directory>
<Options>
   <CalendarIntegrationType>1</CalendarIntegrationType>
</Options>
</config>