[cisco-voip] CCMSysUser and CCMPWDChanger (was: CTIFW user setup/properties)

[Dave Strzemienski (Digiconasp)]

Thanks for the reply.  As you suggested, there are no failure audits, or any
reference what-so-ever, to user ctifw.  I did, however, find reference to
user CCMSysUser in the event viewer on my publisher when I try to start the
webdialer.  Error is as follows:
----------------------------
Source: Cisco CTIManager
Category: None
Event ID: 3
Error: kCtiProviderOpenFailure - CTI application failed to open provider
  CTIconnectionId: 32
  Login User Id: CCMSysUser
  UNKNOWN_PARAMNAME:ReasonCode: 2362179680
  IPAddress: 10.1.1.2
  App ID: Cisco CTIManager
  Cluster ID: StandAloneCluster
  Node ID: 10.1.1.2
Explanation: Application is unable to open provider.
Recommended Action: Check the reason code and correct the problem. Restart
CTIManager if problem persists..
----------------------------

When I checked the registry on publisher for that user, I found that the
value in key
HKLM\SOFTWARE\Cisco Systems, Inc.\Directory
Configuration\AppUsers\CCMSysUser\Password
is *blank*
The user does exist in Active Directory on my domain controllers.

As I understand it, I should be able to run CCMPWDChanger on the publisher,
but I have a couple of questions/concerns.
1. Does the CCMPWDChanger write the password for CCMSysUser into the
registry key or do I need to copy it in manually?
2. Theoretically, are all features that rely on CCMSysUser authentication
currently broken since the Password value in the registry is blank?  In
other words, should I be able to change this password without breaking
anything else like the Corporate Directory (which is currently working) on
my 7940s & 7960s?

Lastly, am I on the right track to getting webdialer working or should I not
bother making this change?

Thanks for any help/advice!
-DStrz


From: "Ryan Ratliff"
Sent: Wednesday, December 01, 2004 10:12 AM


> As far as I know we stopped using the CTIFW user somewhere around CM
> 3.2.
>
> Do you see any failure audits in the AD server CM is integrated with?
> Those would point at a missing user for sure.
>
> A sniffer trace will show you exactly what is happening.  Filter for
> ldap packets and it should be pretty easy to follow along.
>
> -Ryan
> On Dec 1, 2004, at 10:00 AM, Dave Strzemienski ((Digiconasp)) wrote:
>
> > Greetings all,
> >
> > I have a CCM3.3(4) setup integrated with Active Directory.  I'm having
> > difficulty getting a couple of features to work, specifically
> > webdialer &
> > callback.  In the documentation that I've read...
> > http://www.cisco.com/en/US/products/
> > products_security_advisory09186a0080094659.shtml
> > ...I see references to a user named ctifw (at least I think it's a
> > user) but
> > I can't find that user anywhere in my AD structure.  Should this user
> > have
> > been created by the CM install or is this a user that needs to be setup
> > manually?
> > If manually, I presume the user belongs somewhere under the Cisco ou,
> > but
> > I'm not sure what rights or permissions the user should have.
> >
> > Can anyone send me a clue?
> >
> > Much appreciated!
> > DStrz
> >
> > _______________________________________________
> > cisco-voip mailing list
> > cisco-voip at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-voip
> >
>
>