[cisco-voip] Unity not sending some messages to Exchange?

Fri Aug 18 15:23:30 EDT 2006

The logs didn't mention permissions because I just used the default settings 
for diagnostic logging; after fixing that, permissions showed up as the 
problem.  My Exchange guy did a radical overhaul of the mail stores last 
week, and that apparently confused Unity.  Neither one of us thought to 
re-run the permissions wizard after the store reorg, but it certainly had to 
be done.  Even that didn't help, though.  For some reason subscriber 
accounts in AD lacked some rights that I didn't fully understand, that are 
set when the Unity account is first created, apparently.  When we set those 
rights on our test account, it worked right away, so we set them on all 
accounts, and -- it didn't help.  We fussed over that for a while, and I 
broke for lunch.  When I got back, our test accounts worked OK, but there 
are still some accounts that fail.  I'm going to chalk it up to *$%^! AD 
directory replication for now, until I can go over all this with my 
AD/Exchange guy on Monday.  We may be out of the woods, but then again, 
maybe not.

Thanks to all who helped,

mike

> Date: Fri, 18 Aug 2006 07:36:16 -0400
> From: "Mike Armstrong" <mfa at crec.ifas.ufl.edu>
> Subject: Re: [cisco-voip] Unity not sending some messages to Exchange?
> To: "Frutin, Amy" <AFrutin at apcapital.com>
> Cc: cisco-voip at puck.nether.net
> Message-ID: <004301c6c2ba$8484d040$400cfb0a at crec.ifas.ufl.edu>
> Content-Type: text/plain; charset="iso-8859-1"
>
> No mention of permissions in our diagnostic logs.
>
> Mike
>  ----- Original Message ----- 
>  From: Frutin, Amy
>  To: mfa at ufl.edu
>  Cc: cisco-voip at puck.nether.net
>  Sent: Thursday, August 17, 2006 6:08 PM
>  Subject: Re: [cisco-voip] Unity not sending some messages to Exchange?
>
>
>  We ran into an issue with messages not being delivered after applying 
> some Exchange hotfixes (KB912442, KB916803) - it only affected certain 
> subscribers and those users did have AD accounts that belonged to 
> administrative groups.  The errors we were seeing in the AvCsMgr logs 
> indicated that it was a permissions issue:
>
>
>
> 
> 13:03:35:750,AvDiagnostics_MC,1433,6000,1,DB8CE0DC0DE8456F9985ACC56BB0C217,AlCommon,10,CAvMALExMessage,HandleErrorDetails,You 
> do not have the permission to send the message on behalf of the specified 
> user.,e:\Views\cs_CU4.0.4.221\un_Doh1\MalMapi\MALEx\AvMALExMessage.cpp,2479
>
>
>
>  We re-ran the Permissions Wizard, which was a newer version (not older 
> than 2.1.0.25 as mentioned in this TechNote 
> http://www.cisco.com/en/US/products/sw/voicesw/ps2237/products_tech_note09186a00806c3575.shtml) 
> but it didn't seem to fix anything.  Our Exchange admin did temporarily 
> remove KB912442 which seemed to resolve the issue, but we had been 
> planning to upgrade to Unity 4.2 anyways, so we went ahead with that; he 
> re-applied the patch, we re-ran the 4.2(1) Permissions Wizard, and 
> everything has been OK since then.  There was some discussion on the voice 
> forums indicating that you didn't have to remove the patch, just set the 
> necessary permissions for the message store account; we didn't try that, 
> but it sounds like it could be a solution. 
> http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=IP%20Communications%20and%20Video&topic=Unified%20Communications&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1ddb771c/8#selected_message
>
>
>
> ------------------------------------------------------------------------------
>
>
>  CONFIDENTIALITY STATEMENT
>
>  This communication and any attachments are CONFIDENTIAL and may be 
> protected by one or more legal privileges. It is intended solely for the 
> use of the addressee identified above. If you are not the intended 
> recipient, any use, disclosure, copying or distribution of this 
> communication is UNAUTHORIZED. Neither this information block, the typed 
> name of the sender, nor anything else in this message is intended to 
> constitute an electronic signature unless a specific statement to the 
> contrary is included in this message. If you have received this 
> communication in error, please immediately contact me and delete this 
> communication from your computer. Thank you.
>
>
>
> ------------------------------------------------------------------------------
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: 
> https://puck.nether.net/pipermail/cisco-voip/attachments/20060818/db2d312a/attachment-0001.html
>
> ------------------------------
>
> Message: 5
> Date: Fri, 18 Aug 2006 08:15:27 -0400
> From: "Matt Slaga \(US\)" <Matt.Slaga at us.didata.com>
> Subject: Re: [cisco-voip] Callmanager implementation over Internet
> To: "Manoj Kalpage" <manoj.kalpage at gmail.com>,
> <cisco-voip at puck.nether.net>
> Message-ID:
> <C1FE15183DA37645BC0633BC604E44F002DC4E8A at USNAEXCH.na.didata.local>
> Content-Type: text/plain; charset="us-ascii"
>
> You can use the SCCP proxy by Metreos to accomplish this and still
> remain secure.
>
>
>
> I have implemented a callmanager/unity directly on the internet in the
> past for a company in your same situation.  Their server had more worms
> in viruses in 1 week than I've seen in my whole life (even with CSA &
> AV, they were able to take control of the server through a buffer
> overflow we think and disabled these services).  Perhaps CCM5 would be
> better suited for this purpose, or you could use your pix to only allow
> the necessary ports.
>
>
>
>
>
>
>
> ________________________________
>
> From: cisco-voip-bounces at puck.nether.net
> [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Manoj Kalpage
> Sent: Friday, August 18, 2006 4:23 AM
> To: cisco-voip at puck.nether.net
> Subject: [cisco-voip] Callmanager implementation over Internet
>
>
>
> Hi All,
> We have Call Manager and Unity hosted in Data Centre. All our clients
> have VPN connection to Data Centre. I am using PIX 515 at Data Centre
> and PIX501 at clients side. All are working perfect except voice quality
> issue some times. Since this is PBXL hosting service and security is not
> that much concern, I am wondering I can setup phones to acess CCM and
> Unity over the internet using gloabl IP address on Cisco IP Phones. Has
> anyone every implemented CallManager and Unity over internet? Your
> comment and advice would be greatly appreciated.
>
> Best regards,
> Manoj
>
>
>
>
> -----------------------------------------
> Disclaimer:
>
> This e-mail communication and any attachments may contain
> confidential and privileged information and is for use by the
> designated addressee(s) named above only.  If you are not the
> intended addressee, you are hereby notified that you have received
> this communication in error and that any use or reproduction of
> this email or its contents is strictly prohibited and may be
> unlawful.  If you have received this communication in error, please
> notify us immediately by replying to this message and deleting it
> from your computer. Thank you.
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: 
> https://puck.nether.net/pipermail/cisco-voip/attachments/20060818/c354f12f/attachment.html
>
> ------------------------------
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
>
> End of cisco-voip Digest, Vol 42, Issue 123
> ******************************************* 