We are using AD LDS to combine 2 forests to be able to authenticate with our Cisco phone system for Jabber etc
User synchronization and authentication works for all applications except the CTI Manager (for remotely controlling our phones)
I have pulled logs and it looks like LDAP may be the issue here. Any insight would be fantastic
CTI Provider Open Request
00130482.002 |13:46:01.526 |AppInfo |CTIManager::CtiManager::providerOpenRequest(): PROVIDER_OPEN_REQUEST received -- Connection Id=5 TcpHandle=[1:200:13:128] PeerIPAddr=10.10.0.207 PeerPort=50018 User name= CtiHandler=[1:200:22:124]
00130482.003 |13:46:01.526 |AppInfo |CTIManager::CtiManager::providerOpenRequest(): Provider Open Initiated -- Connection Id=5 TcpHandle=[1:200:13:128] PeerIPAddr=10.10.0.207 PeerPort=50018 User name=myusername CtiHandler=[1:200:22:124]
00130482.004 |13:46:01.526 |AppInfo |CTIManager::CtiManager::providerOpenRequest(): Total CTI connections=6 Logins in progress=0
00130482.005 |13:46:01.526 |AppInfo |CTIManager: CtiLoginQueue::findSubQueue(): proirity=0 subQueue index=2
00130482.006 |13:46:01.526 |AppInfo |CTIManager::providerOpenRequest(): Login Queued -- TcpHandle=[1:200:13:128] Connection Id=5 Priority=0 Login queue entries=1 Logins In Progress=0
00130482.007 |13:46:01.526 |AppInfo |MX_DEBUG: CTIManager: Login throttling timer started for 100 milliseconds
00130483.000 |13:46:01.526 |SdlSig |CtiQbeGenericMessage |init_complete_await_provopen |CTIHandler(1,200,22,124)
|CtiManager(1,200,21,1) |1,200,13,128.3^*^* |*TraceFlagOverrode
00130483.001 |13:46:01.526 |AppInfo |CQBEParser::ParseQbeMessage: PDU#=3
00130483.002 |13:46:01.526 |AppInfo |[CTI-APP] [CTIHandler::processIncomingMessage] CTI ProviderOpenRequest ( seq#=2 provider=UCProvider login=myusername heartbeat=60 timer=10 priority=0 lightWeightProviderOpen=0
AuthType=0 RequestOldFetch=0 EncryptedSSODataSize=0)
00130484.000 |13:46:01.527 |SdlSig |CtiProviderOpenReq
CTI Login Request
00130489.000 |13:46:01.637 |SdlSig |CtiLoginCheckReq |ready
|Directory(1,200,23,1) |CTIHandler(1,200,22,124) |1,200,13,128.3^*^*
|[T:N-H:0,N:0,L:0,V:0,Z:0,D:0] Login=myusername Seq#=2 Auth Style=0 3rd Party Certificate=0 mOcsp_url= mIssuerName= EncryptedSingleSignOnData Size=0
00130489.001 |13:46:01.637 |AppInfo |CtiLoginCheckReq::authenticateByUserName
00130489.002 |13:46:01.637 |AppInfo |CCMAsymmetricEncryption::DecryptText Enter
00130489.003 |13:46:01.639 |AppInfo |CCMAsymmetricEncryption::DecryptText Exit
00130489.004 |13:46:01.639 |AppInfo |Decrypted Key Status success - [52]
00130489.005 |13:46:01.639 |AppInfo |Nonce =0a21820f-4941-4730-bd5d-7d177147b84f
00130489.006 |13:46:01.639 |AppInfo |Nonce validation success
00130489.007 |13:46:01.639 |AppInfo |CCMSymmetricEncryption::DecryptText:enter
00130489.008 |13:46:01.639 |AppInfo |CCMEncryption::DecryptText (Exit) (Success))
00130489.009 |13:46:01.639 |AppInfo |Decrypted Password Status success - [8]
00130489.010 |13:46:01.639 |AppInfo |AuthenticationImpl::login:enter
00130489.011 |13:46:01.639 |AppInfo |AuthenticationImpl::retrieveCredential:enter
00130489.012 |13:46:01.639 |AppInfo |userid is myusername
00130489.013 |13:46:01.639 |AppInfo |AuthenticationImpl::login - no encryptedpassword Credential, look for password
00130489.014 |13:46:01.639 |AppInfo |AuthenticationImpl::login (Auth with password. Calling authenticateUserWithPassword)
00130489.015 |13:46:01.639 |AppInfo |authenticationDB::authenticateUserWithPassword():enter
00130489.016 |13:46:01.639 |AppInfo |Credential Length is: 8
00130489.017 |13:46:01.639 |AppInfo |authenticationConnector::getReadDSN:enter
00130489.018 |13:46:01.639 |AppInfo |authenticationConnector ReadDSN is:DSN=ccm2;uid=dbims
00130489.019 |13:46:01.639 |AppInfo |authenticationConnector WriteDSN is:DSN=ccm;uid=dbims
00130489.020 |13:46:01.723 |AppInfo |Setting Fields
00130489.021 |13:46:01.723 |AppInfo |userType is: 1
00130489.022 |13:46:01.723 |AppInfo |timeOfLockout is: 0
00130489.023 |13:46:01.723 |AppInfo |timeHackedLockout is: 0
00130489.024 |13:46:01.723 |AppInfo |hackCount is: 0
00130489.025 |13:46:01.723 |AppInfo |daysToExpiry is: 0
00130489.026 |13:46:01.723 |AppInfo |doesNotExpire is: 0
00130489.027 |13:46:01.723 |AppInfo |useExpiryWarning is: 0
00130489.028 |13:46:01.723 |AppInfo |isInactive is: 0
00130489.029 |13:46:01.723 |AppInfo |userMustChange is: 0
00130489.030 |13:46:01.723 |AppInfo |endUserStatus is: 1
00130489.031 |13:46:01.723 |AppInfo |imsInfo is: 1
00130489.032 |13:46:01.723 |AppInfo |lastSuccessfulLoginTime is: 1422470174
00130489.033 |13:46:01.754 |AppInfo |XXXXXX Check 1
LDAP Authentication
00130489.034 |13:46:01.755 |AppInfo |authenticationDB::login (Authenticating using LDAP)
00130489.035 |13:46:01.755 |AppInfo |authenticationLDAP.cpp::authenticateUserWithPassword():enter
00130489.036 |13:46:01.755 |AppInfo |LDAP userid is 'myusername'
00130489.037 |13:46:01.755 |AppInfo |authenticationUtils::escapeLDAPSpecialCharsForFilter():enter
00130489.038 |13:46:01.755 |AppInfo |
After Escaping for LDAP special Characters for Filter = myusername
00130489.039 |13:46:01.755 |AppInfo |authenticationUtils::escapeLDAPSpecialCharsForFilter():exit
00130489.040 |13:46:01.755 |AppInfo |LDAP not initialized...connecting...
00130489.041 |13:46:01.755 |AppInfo |authenticationLDAP::connect():enter
00130489.042 |13:46:01.755 |AppInfo |authenticationLDAP::Authenticate():enter
00130489.043 |13:46:01.755 |AppInfo |Authenticating with SSL enabled (ldaps://MYDOMAIN.local:50001)
00130489.044 |13:46:01.755 |AppInfo |LDAP initialize with SSL Return Code (0)
00130489.045 |13:46:01.755 |AppInfo |setting LDAP option LDAP_OPT_X_TLS_HARD
00130489.046 |13:46:01.755 |AppInfo |authenticationLDAPConfig::getLDAPConnectionTimeout():enter
00130489.047 |13:46:01.756 |AppInfo |ldapConnectionTimeout = 5
00130489.048 |13:46:01.756 |AppInfo |authenticationLDAPConfig::getLDAPConnectionTimeout():enter
00130489.049 |13:46:01.758 |AppInfo |ldapConnectionTimeout = 5
00130489.050 |13:46:01.758 |AppInfo |LDAP set LDAP_OPT_NETWORK_TIMEOUT option set to 5 seconds
00130489.051 |13:46:01.758 |AppInfo |Setting the REBIND function
00130489.052 |13:46:01.761 |AppInfo |LDAP authentication bind failed. LDAP code: -1
00130489.053 |13:46:01.761 |AppInfo |Connection # (0): failed (-1) ((null))
00130489.054 |13:46:01.761 |AppInfo |Details ::
00130489.055 |13:46:01.761 |AppInfo |MYDOMAIN.local 50001
00130489.056 |13:46:01.761 |AppInfo |------------------------------------------------------------------------
00130489.057 |13:46:01.761 |AppInfo |Available Servers (1)
00130489.058 |13:46:01.761 |AppInfo |authenticationLDAP::Authenticate():exit AUTH_NOT_INITIALIZED
00130489.059 |13:46:01.761 |AppInfo |authenticationLDAP.cpp: Error on authentication. LDAP error code: -1
00130489.060 |13:46:01.761 |AppInfo |authenticationLDAP::connect():Exit on Error
00130489.061 |13:46:01.761 |AppInfo |LDAP Connect: Returned from connect with rc: -1
00130489.062 |13:46:01.761 |AppInfo |Failure to initialize (connect) to LDAP server.
00130489.063 |13:46:01.761 |AppInfo |authenticationLDAP::authenticateUserWithPassword():Exit on LDAP error: -1
00130489.064 |13:46:01.761 |AppInfo |authenticationDB::login (Done Authenticating using LDAP)
00130489.065 |13:46:01.761 |AppInfo |authenticationDB::login (LDAP FAILED) (-1)
00130489.066 |13:46:01.762 |AppInfo |AuthenticationImpl::setResults:enter
00130489.067 |13:46:01.762 |AppInfo |AuthenticationImpl::setResults retCode= -1