Re: [cisco-voip] Jabber 11.8 issue

[Anthony Holloway]

I have seen a very weird issue with only 1 or 2 users in an enterprise with
close to 2,000 users.

For some reason, if you login with your JID, Jabber checks for your mail
alias as a user ID first, and if none found, reverts back to the JID.  I
might be explaining the process technically incorrect, but that's the gist
of it.

Why is this a problem?  Well, if your email alias matches another user's
JID, then you cannot login.

*Logs when your email alias matches someone else's JID (Keep in mind
aholloway is my email alias and my JID is 45633):*
12:24:30.333 | debug| TokenAuthUtils::executeUserFromIMaddressQuery: IMDB
(userid) query successful: [SELECT pkid, userid FROM validendusers WHERE
userid='aholloway';]
12:24:30.333 | error| TokenAuthUtils::executeUserFromIMaddressQuery: imaddress
and userid queries returned conflicting rows. Returning error

*Logs when your email alias does not match someone else's JID (aholloway is
email alias and JID is 45633):*
11:47:51.505 | debug| TokenAuthUtils::executeUserFromIMaddressQuery: IMDB
(userid) query successful: [SELECT pkid, userid FROM validendusers WHERE
userid='aholloway';]
11:47:51.505 | debug| TokenAuthUtils::executeUserFromIMaddressQuery: imaddress
query returned row but not userid.
11:47:51.505 | debug| TokenAuthUtils::executeUserFromIMaddressQuery: userid
set as [45633]

The environment was using employee numbers as User IDs for employees, while
using First Initial + Last Name (aholloway) for contractors.  So, if user
Andrew Holloway, with email ahollo...@company.com, and with employee ID
1234 logged into jabber with 1234 as their JID, Jabber would look up
aholloway in that SQL query you see up above, and find the contractor
Anthony Holloway with email ahollow...@company.com and user ID aholloway.
Boom.  Login failed.

Do I agree with any of that?  Nope.  But, it happens.

For what it's worth, they're using flexible JID, by using Directory URI as
the IM Address scheme, which we sync from AD mail attribute.

On Thu, Oct 19, 2017 at 11:15 AM Florian Kroessbacher <
florian.kroessbac...@gmail.com> wrote:

> Maby your IM and Prsence server are out of sync, and the user getd no one
> time password
>
> --
>
> Florian Krößbacher
>
> florian.kroessbac...@gmail.com
>
> 
> 
> 
>
> Am 19. Okt. 2017, 18:11 +0200 schrieb norm.nichol...@kitchener.ca:
>
> I have a user getting this error:
>
>
>
>
>
> [image: image001.png]
>
>
>
> And she is the only Jabber user getting it. I have reset everything
> associated with the CSF but no joy.
>
>
>
>
>
> Any assistance would be appreciated
>
>
>
>
>
>
>
>
>
> Thanks
>
>
>
>
>
>
>
>
>
>
>
> *Norm Nicholson*
>
> *Telecom Analyst*
>
> *City of Kitchener*
>
> *(519) 741-2200 x 7000 <(519)%20741-2200;7000>*
>
>
>
>
>
> ___
> cisco-voip mailing list
> cisco-voip@puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Jabber 11.8 issue

[Matthew Huff]

Another item to check:

o) If you are using CUCM for service discovery (have a SRV record for 
_cisco-uds._tcp.), then in order to do discovery the user account in 
CUCM has to be a member of the "Standard CCM End User" access group in order to 
be able to access the XML configuration file to discover the jabber server.


Matthew Huff | 1 Manhattanville Rd 
Director of Operations   | Purchase, NY 10577
OTA Management LLC   | Phone: 914-460-4039
aim: matthewbhuff| Fax:   914-694-5669

-Original Message-
From: cisco-voip [mailto:cisco-voip-boun...@puck.nether.net] On Behalf Of 
Pawlowski, Adam
Sent: Friday, October 20, 2017 1:03 PM
To: cisco-voip@puck.nether.net
Subject: Re: [cisco-voip] Jabber 11.8 issue

Norm,

I went through some materials and had documented the causes for that message 
(which show up in a PRT) as best I can. 

"Cannot communicate with server" in my notes always boils down to the 
workstation not actually being able to reach the server for whatever reason. 
Either whatever SRV record it sees is pointing it somewhere it cannot go, or 
the other option is the " ServiceDiscoveryNoNetworkConnectivity " error wherein 
Jabber believes that it has no network connectivity. I haven't seen that one on 
sign in but have seen it on resume on Mac before.

Jabber also generates this message if you set the minimum version in the IM and 
Presence server to something like "11.8.4" but the Mac version never made it 
past 11.8.1 - if the version isn't allowed it says this.

I don't believe it says this if you don't check the "Home Cluster" box 
somewhere in the end user for the user to have a home cluster but it will throw 
an error for that as well. 

Regards,

Adam Pawlowski
Network and Classroom Services
University at Buffalo
716.645.8489


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Jabber 11.8 issue

[Pawlowski, Adam]

Norm,

I went through some materials and had documented the causes for that message 
(which show up in a PRT) as best I can. 

"Cannot communicate with server" in my notes always boils down to the 
workstation not actually being able to reach the server for whatever reason. 
Either whatever SRV record it sees is pointing it somewhere it cannot go, or 
the other option is the " ServiceDiscoveryNoNetworkConnectivity " error wherein 
Jabber believes that it has no network connectivity. I haven't seen that one on 
sign in but have seen it on resume on Mac before.

Jabber also generates this message if you set the minimum version in the IM and 
Presence server to something like "11.8.4" but the Mac version never made it 
past 11.8.1 - if the version isn't allowed it says this.

I don't believe it says this if you don't check the "Home Cluster" box 
somewhere in the end user for the user to have a home cluster but it will throw 
an error for that as well. 

Regards,

Adam Pawlowski
Network and Classroom Services
University at Buffalo
716.645.8489


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

Re: [cisco-voip] Jabber 11.8 issue

[Florian Kroessbacher]

Maby your IM and Prsence server are out of sync, and the user getd no one time 
password

--
Florian Krößbacher
florian.kroessbac...@gmail.com


Am 19. Okt. 2017, 18:11 +0200 schrieb norm.nichol...@kitchener.ca:
> I have a user getting this error:
>
>
>
> And she is the only Jabber user getting it. I have reset everything 
> associated with the CSF but no joy.
>
>
> Any assistance would be appreciated
>
>
>
>
> Thanks
>
>
>
>
>
> Norm Nicholson
> Telecom Analyst
> City of Kitchener
> (519) 741-2200 x 7000
>
>
___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[cisco-voip] Jabber 11.8 issue

[norm.nicholson]

I have a user getting this error:


[cid:image001.png@01D348D3.6412CF50]

And she is the only Jabber user getting it. I have reset everything associated 
with the CSF but no joy.


Any assistance would be appreciated




Thanks





Norm Nicholson
Telecom Analyst
City of Kitchener
(519) 741-2200 x 7000


___
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip