07-19-2012 09:14 AM - edited 03-17-2019 02:29 PM
My one problem is that I can not seem to get my iPad to register to my company VCS Controller or Expressway.
I figure if I get the Controller working the rest will follow.
I have been doing Authentication on my TMS server and this works fine for my MOVI clients
Added a new Group in my Directory for the JabberTablet devices.
I created a new user for the ipad and it looks like it has all the information that is in the documentation.
Right now I am getting a "The username or password is invalid or the user account is inactive" error message.
Attached are the logs.
If anyone can see something obvious, let me know.
07-22-2012 04:22 PM
Well, got tired of not hearing from anyone.
Put a monitor session on the port that has TMS and tried to register my iPad. NO PACKETS
Then moved and put a monitor on the port for the VCS Control and tried again to register from the iPad.
Success Packets that are all ignored by the VCS Controller.
It seems that the iPad tries to set the session up using TLS pakets and never tries to try just TCP or UDP.
We did not want to bother with the hassle of getting a certificate, but is that the only way to do things, I guess we will have to do that.
Seems like the software should have been smart enough to try other methods to register.
But that is just me.
08-02-2012 06:58 AM
Can someone shed some light on this please? I have VCS-C and VCS-E identically configured. The VCS-C sitting on my network and the VCS-E sitting in front of the firewall. I can register and use Jabber on my Ipad when connected via the interent and coming in through the VCS-E.
When I am on my LAN I can not authenticated. The Jabber log produces this error at the end????
Thu Aug 2 14:39:41 2012
: TAF: SIP : Incoming SIP message: ---------------------------------------------
NOTIFY sip:rod.blackie1@10.118.7.5:52344;transport=tls SIP/2.0
Via: SIP/2.0/TLS 10.118.6.22:5061;egress-zone=DefaultZone;branch=z9hG4bKf505a98dba76d1916ba255d60f87d2ed710863.006602f8b287864e5201afc95762347a;proxy-call-id=8363ad7c-dca7-11e1-87b9-0010f31a4464;rport
Via: SIP/2.0/TCP 127.0.0.1:22400;branch=z9hG4bK3ba3d1b49fb866374f798e45970ef5b0;received=127.0.0.1;ingress-zone=DefaultZone
Call-ID: 9b579fe299a8c0fd@127.0.0.1
CSeq: 1 NOTIFY
Contact: "Provisioning Service"
From: <>>provisioning@nuvia.co.uk>;tag=e1e430e3
To: <>>rod.blackie1@nuvia.co.uk>;tag=705b6436f835cb41
Max-Forwards: 69
Record-Route: <10.118.6.22:5061>10.118.6.22:5061>
Record-Route: <127.0.0.1:5060>127.0.0.1:5060>
Event: ua-profile;clientid="5e5874f8-e764-4449-a831-a5ef6cc4794b";model=jabbertablet;vendor=tandberg.com;profile-type=user;connectivity=0;version=1.0.0.0
P-Asserted-Identity: <>>provisioning@nuvia.co.uk>
Subscription-State: terminated
X-TAATag: 8363ae58-dca7-11e1-bb72-0010f31a4464
Content-Type: text/xml
Content-Length: 430
Thu Aug 2 14:39:41 2012
: TAF: Provisioning : Provisioning succeeded - configuration:
Thu Aug 2 14:39:41 2012
: TAF:on_login_progress 1 : nuvia.co.uk
Thu Aug 2 14:39:41 2012
: TAF: SIP : SIPTRNSP_resolveResponseDest: secure channel enforced!
Thu Aug 2 14:39:41 2012
: TAF: SIP : Outgoing SIP message: ---------------------------------------------
SIP/2.0 200 OK
Via: SIP/2.0/TLS 10.118.6.22:5061;egress-zone=DefaultZone;branch=z9hG4bKf505a98dba76d1916ba255d60f87d2ed710863.006602f8b287864e5201afc95762347a;proxy-call-id=8363ad7c-dca7-11e1-87b9-0010f31a4464;received=10.118.6.22;rport=5061
Via: SIP/2.0/TCP 127.0.0.1:22400;branch=z9hG4bK3ba3d1b49fb866374f798e45970ef5b0;received=127.0.0.1;ingress-zone=DefaultZone
Call-ID: 9b579fe299a8c0fd@127.0.0.1
CSeq: 1 NOTIFY
From: <>>provisioning@nuvia.co.uk>;tag=e1e430e3
To: <>>rod.blackie1@nuvia.co.uk>;tag=705b6436f835cb41
Server: TANDBERG/774 (MCX 4.5.0.0)
Content-Length: 0
Thu Aug 2 14:39:41 2012
: TAF: ICE : ICE is disabled, TurnServer is 'not provided', TurnAuthUsername is 'rod.blackie1', TurnAuthPassword is 'XXX', Force Turn Relay is 'OFF'
Thu Aug 2 14:39:41 2012
: TAF: SIP : Setting SipReg FSM in active (outbound index: 1).
Thu Aug 2 14:39:41 2012
: TAF:on_login_progress 1 : 86.12.153.205
Thu Aug 2 14:39:41 2012
: TAF: Signaling : Sending REGISTER for rod.blackie1@nuvia.co.uk to 86.12.153.205 using transport auto
Thu Aug 2 14:39:41 2012
: TAF: SIP : Calling SIPREG_doRegister in SIPREG_StateActivateNewValue upon SIP_REG_STATUS_INACTIVE.
Thu Aug 2 14:39:41 2012
: TAF: SIP : Dumping registration status overview:
0: 86.12.153.205:5061 - UNUSED
Thu Aug 2 14:39:41 2012
: TAF: SIP : SIPTRNSP_resolveRequestDest: secure channel enforced!
Thu Aug 2 14:39:41 2012
: TAF: SIP : SipTrnsp: IP address or maddr in URL, sending Req to '86.12.153.205:5061'
Thu Aug 2 14:39:41 2012
: TAF: SIP : SipTrnsp(si=-1) SipSockMap_allocate: allocate 0 (global -1) type=PROXY
Thu Aug 2 14:39:47 2012
: TAF: SIP : NetConnectRej socketId=0x10000
Thu Aug 2 14:39:47 2012
: TAF: SIP : NETConnectRej: Connection timed out
Thu Aug 2 14:39:47 2012
: TAF: SIP : SipTrnsp: Connect Rej on localSocket 65536
Thu Aug 2 14:39:47 2012
: TAF: SIP : Transport failed to send registration (sipexcept: 1) to 86.12.153.205:5061
Thu Aug 2 14:39:47 2012
: TAF: SIP : Dumping registration status overview:
0: 86.12.153.205:5061 - UNUSED
Thu Aug 2 14:39:47 2012
: TAF: SIP : Calling SIPREG_doRegister in SIPREG_StateActivateNewValue upon SIP_REG_STATUS_INACTIVE.
Thu Aug 2 14:39:47 2012
: TAF: SIP : Dumping registration status overview:
0: 86.12.153.205:5061 - UNUSED
1: 86.12.153.205:5060 - UNUSED
Thu Aug 2 14:39:47 2012
: TAF: SIP : SipTrnsp: IP
08-02-2012 12:14 PM
HI Rod. That address looks public to me. What I'm thinking is happening here, is that the Ipad is trying to open a connection to that address and it fails.
Wondering here, since we only have this locally, and you may need to test this and see the outcome, but if you mod the template configuration to include SIP Server (VCS Control) and Public SIP Server (VCS Expressway) in the template, and try again. Wait for it to move through the provisionign process (a couple of minutes or so) and see if you can try and log in again? Looks like to me its trying to connect to that address and its failing. Maybe give it a shot, and let us know?
Thanks.
VR
Patrick
08-03-2012 12:07 AM
Patrick
You are a star ! many thanks. It just goes to show that i pays to recheck everything when troubleshooting. My problem turned out to be as you suggested. I had accidently put the public IP in bothe the public SIP address and the SIP server address filed withing the template. The resolution was to change the SIP server address to match my internal VCS..
Thank you very much.
Rod
08-02-2012 12:02 PM
Hi Richard. Is richm@fltg trying to subscribe?
The outbound transport is TLS and VCS responds with TLS as well. After receiving the first 401 Unauthorized, iPad seems to resend the subscribe with Authorization credentials. VCS then sends 403 Forbidden.
Not sure why, maybe a credential check somewhere, or something else. If your running X7, can you run network log debug and try to subscribe again. I'd like to see this from the VCS point of view if your still interested in taking a look still. Thanks.
VR
Patrick
03-20-2013 07:34 AM
Richard,
Did you ever get an answer or fix to the issue you had? I'm running into the same thing. It's really odd. Movi works fine. Jabber for iPad can not authenticate. In fact, if I keep trying, I lock my account. So I know whatever is going up to authentication has the account correct but the password is getting corrupted. I'm LDAP integrated.
Thanks,
Dave
03-20-2013 12:19 PM
HI Dave. Your problem may be different here. When you use IPAD to register, do you have to specify DOMAIN/username to log in perhaps?
VR
Patrick
03-20-2013 05:15 PM
Hi Dave. Rethinking this, you saying your getting locked out of the account your using? Is it possible you can include a log from the VCS Control here?
I'm also curious to know the code versions running in VCS C and E, TMS etc. and is the jabber ipad template loaded on TMS and associated to your user account?
VR
Patrick
03-22-2013 08:54 AM
Hey Patrick,
VCSc and expressway are 7.2.1. TMS is 13.2.1. The jabber template I'm using is 1.0.2.0. I'll have to see about getting a log file. The template is indeed associated with my account.
Thanks,
Dave
03-22-2013 08:58 AM
HI Dave. Thanks. If you can, and if its possible, network log debug from VCS that is provisioned so we can see whats happening. Also, are you logging in as DOMAIN\username? There's a bug open when doing it this way, just wanted to be sure is all.
Thanks.
VR
Patrick
03-22-2013 10:25 AM
Yep, I did see that bug. We are not including the domain.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: