I have CM 4.1.3 and I'm integrated with AD 2003.  Everything works great

 

I have setup MLA so that we can log in with our AD user and passwords.
Everything works.

 

I can use ccmadministrator to log in.  Everything works.

 

Took down the AD Server that we did the integration with for an upgrade
and right now, I can't use either Domain username or CCMadministrator.
I understand the domain password not working, but what's up with the
ccmadministrator?  I thought that was separate for this very reason.

 

The BARS, and ART pages come up fine so It's got to be AD related.

 

Scott

 

[ Post a follow-up to this message ]

PS.  Once the AD server came back up all works fine.

 

But the Question remains, Why couldn't I log in with CCMAdministrator?

 

________________________________

From: cisco-voip-bounces@puck.nether.net
[mailto:cisco-voip-bounces@puck.nether.net] On Behalf Of Voll, Scott
Sent: Tuesday, June 14, 2005 4:03 PM
To: cisco VoIP List
Subject: [cisco-voip] MLA -- AD

 

I have CM 4.1.3 and I'm integrated with AD 2003.  Everything works great

 

I have setup MLA so that we can log in with our AD user and passwords.
Everything works.

 

I can use ccmadministrator to log in.  Everything works.

 

Took down the AD Server that we did the integration with for an upgrade
and right now, I can't use either Domain username or CCMadministrator.
I understand the domain password not working, but what's up with the
ccmadministrator?  I thought that was separate for this very reason.

 

The BARS, and ART pages come up fine so It's got to be AD related.

 

Scott

 

[ Post a follow-up to this message ]

________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[ Post a follow-up to this message ]

in 4.1, CCMAdministrator authentication was moved out of registry keys =

and into directory. Agreed in 3.x and 4.0 it was in the registry.

/Wes

Voll, Scott wrote:

> PS. Once the AD server came back up all works fine.
>
> But the Question remains, Why couldn=92t I log in with CCMAdministrator?
>
> ------------------------------------------------------------------------
>
> *From:* cisco-voip-bounces@puck.nether.net =

> [mailto:cisco-voip-bounces@puck.nether.net] *On Behalf Of *Voll, Scott
> *Sent:* Tuesday, June 14, 2005 4:03 PM
> *To:* cisco VoIP List
> *Subject:* [cisco-voip] MLA -- AD
>
> I have CM 4.1.3 and I=92m integrated with AD 2003. Everything works great
>
> I have setup MLA so that we can log in with our AD user and passwords. =

> Everything works.
>
> I can use ccmadministrator to log in. Everything works.
>
> Took down the AD Server that we did the integration with for an =

> upgrade and right now, I can=92t use either Domain username or =

> CCMadministrator. I understand the domain password not working, but =

> what=92s up with the ccmadministrator? I thought that was separate for =

> this very reason.
>
> The BARS, and ART pages come up fine so It=92s got to be AD related.
>
> Scott
>
>------------------------------------------------------------------------
>
> ________________________________________
_______
>cisco-voip mailing list
>cisco-voip@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-voip
>  =

>

[ Post a follow-up to this message ]

so does this mean that with any directory integration (either LDAP or AD), i
f the directory server is down, you can't login to the callmanager?
----- Original Message ----- 
From: Wes Sisk 
To: Voll, Scott 
Cc: cisco VoIP List 
Sent: Tuesday, June 14, 2005 9:34 PM
Subject: Re: [cisco-voip] MLA -- AD


in 4.1, CCMAdministrator authentication was moved out of registry keys 
and into directory. Agreed in 3.x and 4.0 it was in the registry.

/Wes

Voll, Scott wrote:

> PS. Once the AD server came back up all works fine.
>
> But the Question remains, Why couldn’t I log in with CCMAdministrator?
>
> ------------------------------------------------------------------------
>
> *From:* cisco-voip-bounces@puck.nether.net 
> [mailto:cisco-voip-bounces@puck.nether.net] *On Behalf Of *Voll, Scott
> *Sent:* Tuesday, June 14, 2005 4:03 PM
> *To:* cisco VoIP List
> *Subject:* [cisco-voip] MLA -- AD
>
> I have CM 4.1.3 and I’m integrated with AD 2003. Everything works great
>
> I have setup MLA so that we can log in with our AD user and passwords. 
> Everything works.
>
> I can use ccmadministrator to log in. Everything works.
>
> Took down the AD Server that we did the integration with for an 
> upgrade and right now, I can’t use either Domain username or 
> CCMadministrator. I understand the domain password not working, but 
> what’s up with the ccmadministrator? I thought that was separate for 
> this very reason.
>
> The BARS, and ART pages come up fine so It’s got to be AD related.
>
> Scott
>
>------------------------------------------------------------------------
>
> ________________________________________
_______
>cisco-voip mailing list
>cisco-voip@puck.nether.net
>https://puck.nether.net/mailman/listinfo/cisco-voip
>  
>
 ________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[ Post a follow-up to this message ]

Scott,

Can you check your registry at HKLM\Software\Cisco Systems, =

Inc.\Directory Configuration\AppUsers\CCMAdministrator and see if the =

Password field has a value?  If it has a value run passwordutils =

against what you think the CCMAdministrator password should be and see =

if they match.

I just tested my 4.1 server and even with DCD stopped I can still login =

with CCMAdministrator.  I also verified that when you enable MLA and =

set the CCMAdministrator password it updates both registry entries =

(DCDPW and Password).

-Ryan
On Jun 14, 2005, at 7:12 PM, Voll, Scott wrote:

PS.=A0 Once the AD server came back up all works fine.
=A0
But the Question remains, Why couldn=92t I log in with CCMAdministrator?
=A0

From: cisco-voip-bounces@puck.nether.net =

[mailto:cisco-voip-bounces@puck.nether.net] On Behalf Of Voll, Scott
Sent: Tuesday, June 14, 2005 4:03 PM
To: cisco VoIP List
Subject: [cisco-voip] MLA -- AD
=A0
I have CM 4.1.3 and I=92m integrated with AD 2003.=A0 Everything works great
=A0
I have setup MLA so that we can log in with our AD user and passwords.=A0 =

Everything works.
=A0
I can use ccmadministrator to log in.=A0 Everything works.
=A0
Took down the AD Server that we did the integration with for an upgrade =

and right now, I can=92t use either Domain username or CCMadministrator.=A0 
=

I understand the domain password not working, but what=92s up with the =

ccmadministrator?=A0 I thought that was separate for this very reason.
=A0
The BARS, and ART pages come up fine so It=92s got to be AD related.
=A0
Scott
=A0
 ________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[ Post a follow-up to this message ]

Ok scratch that, on my server it looks like IIS had cached my =

credentials.  After restarting IIS (or if you wait long enough for them =

to time out) with DCD down I cannot login as CCMAdministrator.

The workaround would be to go into SQL EM to the CCM030X database, =

MLAParameters table and set EnableMLA to 'F'.  Then bounce IIS again =

and login as Administrator.

-Ryan
On Jun 15, 2005, at 10:25 AM, Ryan Ratliff wrote:

Scott,

Can you check your registry at HKLM\Software\Cisco Systems,
Inc.\Directory Configuration\AppUsers\CCMAdministrator and see if the
Password field has a value?  If it has a value run passwordutils
against what you think the CCMAdministrator password should be and see
if they match.

I just tested my 4.1 server and even with DCD stopped I can still login
with CCMAdministrator.  I also verified that when you enable MLA and
set the CCMAdministrator password it updates both registry entries
(DCDPW and Password).

-Ryan
On Jun 14, 2005, at 7:12 PM, Voll, Scott wrote:

PS.=A0 Once the AD server came back up all works fine.
=A0
But the Question remains, Why couldn=92t I log in with CCMAdministrator?
=A0

From: cisco-voip-bounces@puck.nether.net
[mailto:cisco-voip-bounces@puck.nether.net] On Behalf Of Voll, Scott
Sent: Tuesday, June 14, 2005 4:03 PM
To: cisco VoIP List
Subject: [cisco-voip] MLA -- AD
=A0
I have CM 4.1.3 and I=92m integrated with AD 2003.=A0 Everything works great
=A0
I have setup MLA so that we can log in with our AD user and passwords.=A0
Everything works.
=A0
I can use ccmadministrator to log in.=A0 Everything works.
=A0
Took down the AD Server that we did the integration with for an upgrade
and right now, I can=92t use either Domain username or CCMadministrator.=A0
I understand the domain password not working, but what=92s up with the
ccmadministrator?=A0 I thought that was separate for this very reason.
=A0
The BARS, and ART pages come up fine so It=92s got to be AD related.
=A0
Scott
=A0
 ________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


 ________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[ Post a follow-up to this message ]

CSCsa87015 was filed for this back in May.  Hasn't been fixed yet.

Please feel free to open a TAC case and reference this bug so we can =

show the DEs that it is impacting customers.

-Ryan
On Jun 15, 2005, at 10:25 AM, Ryan Ratliff wrote:

Scott,

Can you check your registry at HKLM\Software\Cisco Systems,
Inc.\Directory Configuration\AppUsers\CCMAdministrator and see if the
Password field has a value?  If it has a value run passwordutils
against what you think the CCMAdministrator password should be and see
if they match.

I just tested my 4.1 server and even with DCD stopped I can still login
with CCMAdministrator.  I also verified that when you enable MLA and
set the CCMAdministrator password it updates both registry entries
(DCDPW and Password).

-Ryan
On Jun 14, 2005, at 7:12 PM, Voll, Scott wrote:

PS.=A0 Once the AD server came back up all works fine.
=A0
But the Question remains, Why couldn=92t I log in with CCMAdministrator?
=A0

From: cisco-voip-bounces@puck.nether.net
[mailto:cisco-voip-bounces@puck.nether.net] On Behalf Of Voll, Scott
Sent: Tuesday, June 14, 2005 4:03 PM
To: cisco VoIP List
Subject: [cisco-voip] MLA -- AD
=A0
I have CM 4.1.3 and I=92m integrated with AD 2003.=A0 Everything works great
=A0
I have setup MLA so that we can log in with our AD user and passwords.=A0
Everything works.
=A0
I can use ccmadministrator to log in.=A0 Everything works.
=A0
Took down the AD Server that we did the integration with for an upgrade
and right now, I can=92t use either Domain username or CCMadministrator.=A0
I understand the domain password not working, but what=92s up with the
ccmadministrator?=A0 I thought that was separate for this very reason.
=A0
The BARS, and ART pages come up fine so It=92s got to be AD related.
=A0
Scott
=A0
 ________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


 ________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[ Post a follow-up to this message ]

TAC Case Opened.

-----Original Message-----
From: Ryan Ratliff [mailto:rratliff@cisco.com] =

Sent: Wednesday, June 15, 2005 7:44 AM
To: Voll, Scott
Cc: cisco VoIP List
Subject: Re: [cisco-voip] MLA -- AD

CSCsa87015 was filed for this back in May.  Hasn't been fixed yet.

Please feel free to open a TAC case and reference this bug so we can =

show the DEs that it is impacting customers.

-Ryan
On Jun 15, 2005, at 10:25 AM, Ryan Ratliff wrote:

Scott,

Can you check your registry at HKLM\Software\Cisco Systems,
Inc.\Directory Configuration\AppUsers\CCMAdministrator and see if the
Password field has a value?  If it has a value run passwordutils
against what you think the CCMAdministrator password should be and see
if they match.

I just tested my 4.1 server and even with DCD stopped I can still login
with CCMAdministrator.  I also verified that when you enable MLA and
set the CCMAdministrator password it updates both registry entries
(DCDPW and Password).

-Ryan
On Jun 14, 2005, at 7:12 PM, Voll, Scott wrote:

PS.=A0 Once the AD server came back up all works fine.
=A0
But the Question remains, Why couldn't I log in with CCMAdministrator?
=A0

From: cisco-voip-bounces@puck.nether.net
[mailto:cisco-voip-bounces@puck.nether.net] On Behalf Of Voll, Scott
Sent: Tuesday, June 14, 2005 4:03 PM
To: cisco VoIP List
Subject: [cisco-voip] MLA -- AD
=A0
I have CM 4.1.3 and I'm integrated with AD 2003.=A0 Everything works great
=A0
I have setup MLA so that we can log in with our AD user and passwords.=A0
Everything works.
=A0
I can use ccmadministrator to log in.=A0 Everything works.
=A0
Took down the AD Server that we did the integration with for an upgrade
and right now, I can't use either Domain username or CCMadministrator.=A0
I understand the domain password not working, but what's up with the
ccmadministrator?=A0 I thought that was separate for this very reason.
=A0
The BARS, and ART pages come up fine so It's got to be AD related.
=A0
Scott
=A0
 ________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


 ________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[ Post a follow-up to this message ]

________________________________________
_______
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

[ Post a follow-up to this message ]