[cisco-voip] CCMSysUser and CCMPWDChanger (was: CTIFW user setup/properties)

[Ryan Ratliff]

You are on the right path.  That user is used for applications like 
Extension Mobility, and evidentally Web Dialer as well.
CCMPwdChanger should change the password everywhere I believe.  If 
you'd like to do it by hand you can use the passwordutils utility to 
encrypt the password and put it into the registry by hand.

Useage (from a command line):
c:\dcdsrvr\bin\passwordutils.exe <unencrypted password>

It will return the encrypted password that you then put into the 
registry.

While you're setting the one for CCMSysUser I'd go ahead and do 
CCMAdministrator as well.

Note that we use a different encryption mechanism with CM 4.0 for ldap 
so passwordutils won't work.


-Ryan
On Dec 1, 2004, at 12:38 PM, Dave Strzemienski ((Digiconasp)) wrote:

> Thanks for the reply.  As you suggested, there are no failure audits, 
> or any
> reference what-so-ever, to user ctifw.  I did, however, find reference 
> to
> user CCMSysUser in the event viewer on my publisher when I try to 
> start the
> webdialer.  Error is as follows:
> ----------------------------
> Source: Cisco CTIManager
> Category: None
> Event ID: 3
> Error: kCtiProviderOpenFailure - CTI application failed to open 
> provider
>   CTIconnectionId: 32
>   Login User Id: CCMSysUser
>   UNKNOWN_PARAMNAME:ReasonCode: 2362179680
>   IPAddress: 10.1.1.2
>   App ID: Cisco CTIManager
>   Cluster ID: StandAloneCluster
>   Node ID: 10.1.1.2
> Explanation: Application is unable to open provider.
> Recommended Action: Check the reason code and correct the problem. 
> Restart
> CTIManager if problem persists..
> ----------------------------
>
> When I checked the registry on publisher for that user, I found that 
> the
> value in key
> HKLM\SOFTWARE\Cisco Systems, Inc.\Directory
> Configuration\AppUsers\CCMSysUser\Password
> is *blank*
> The user does exist in Active Directory on my domain controllers.
>
> As I understand it, I should be able to run CCMPWDChanger on the 
> publisher,
> but I have a couple of questions/concerns.
> 1. Does the CCMPWDChanger write the password for CCMSysUser into the
> registry key or do I need to copy it in manually?
> 2. Theoretically, are all features that rely on CCMSysUser 
> authentication
> currently broken since the Password value in the registry is blank?  In
> other words, should I be able to change this password without breaking
> anything else like the Corporate Directory (which is currently 
> working) on
> my 7940s & 7960s?
>
> Lastly, am I on the right track to getting webdialer working or should 
> I not
> bother making this change?
>
> Thanks for any help/advice!
> -DStrz
>
>
> From: "Ryan Ratliff"
> Sent: Wednesday, December 01, 2004 10:12 AM
>
>
>> As far as I know we stopped using the CTIFW user somewhere around CM
>> 3.2.
>>
>> Do you see any failure audits in the AD server CM is integrated with?
>> Those would point at a missing user for sure.
>>
>> A sniffer trace will show you exactly what is happening.  Filter for
>> ldap packets and it should be pretty easy to follow along.
>>
>> -Ryan
>> On Dec 1, 2004, at 10:00 AM, Dave Strzemienski ((Digiconasp)) wrote:
>>
>>> Greetings all,
>>>
>>> I have a CCM3.3(4) setup integrated with Active Directory.  I'm 
>>> having
>>> difficulty getting a couple of features to work, specifically
>>> webdialer &
>>> callback.  In the documentation that I've read...
>>> http://www.cisco.com/en/US/products/
>>> products_security_advisory09186a0080094659.shtml
>>> ...I see references to a user named ctifw (at least I think it's a
>>> user) but
>>> I can't find that user anywhere in my AD structure.  Should this user
>>> have
>>> been created by the CM install or is this a user that needs to be 
>>> setup
>>> manually?
>>> If manually, I presume the user belongs somewhere under the Cisco ou,
>>> but
>>> I'm not sure what rights or permissions the user should have.
>>>
>>> Can anyone send me a clue?
>>>
>>> Much appreciated!
>>> DStrz
>>>
>>> _______________________________________________
>>> cisco-voip mailing list
>>> cisco-voip at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>>
>>
>>
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>