[cisco-voip] Phone Authentication URL Problems

[Ryan Ratliff]

Additionally with the 3rd gen phones there was a bug fix that caused  
the phone to not re-attach parameters to a URL when redirected.  So  
if your auth URL is pointed at the Informacast server it will only  
respond to auth requests for the informacast user.  Any other  
requests it simply sends a 302 redirect to the CCM auth page.  If  
that 302 redirect doesn't contain the full URL (including the  
parameters, ie the username/password/devicename) then the phone won't  
reattach them, causing the auth request to fail.

This behavior was changed by CSCsf07505 which went into the 8.3 loads.

Now if you are testing the authentication by manually hitting the  
http://10.X.X.XX:8080/ccmcip/authenticate.jsp? 
userid=485111&deviceName=SEP001F9E2633EA&password=XXXXXXXX URL and  
assuming 10.x.x.xx there is your CCM server then I'd double check  
that the SEP001F9E2633EA device is associated to the 485111 user.  If  
instead that URL points to your informacast server make sure the 302  
redirect you get back has the full URL and doesn't just point to  
CCMCIP/authenticate.jsp without the parameters.

-Ryan

On May 27, 2008, at 11:26 AM, Wes Sisk wrote:

so the way this works:
1. you post to the phone
2. phone takes the auth information from post and sends to its  
authentication URL
3. phone responds based on authentication response.

what is the authentication URL set to on your phone?

if you browse the phone manually, for example point your web browser to:
http://<phone_ip>/CGI/Screenshot

it should prompt for user & pass.  If the authentication URL points  
to the default value, i.e.:
http://<cm_ip>:8080/ccmcip/authenticate.jsp

then CM verifies:
1. user is associated to the phone device
2. user password is correct

Since this is an upgrade I bet your authentication url points to .asp  
instead of .jsp.

/Wes

STEVEN CASPER wrote:
>
> Since we have upgraded to Call Manager 6.1 we have been unable to  
> use our remote phone access tool from Clarus Systems. I am trying  
> to troubleshoot and am unable to authenticate to a phone via my web  
> browser as I thought I could on 4.1.3. I can use the userid and  
> password to log in and access this device with CCM User.
>
> http://10.X.X.XX:8080/ccmcip/authenticate.jsp? 
> userid=485111&deviceName=SEP001F9E2633EA&password=XXXXXXXX
>
> the link returns:
>
> UN-AUTHORIZED
>
> To further complicate matters I am using Berbee's InformaCast  
> product for paging (which is working fine) as my authentication  
> target. Any thoughts would be appreciated!
>
> Steve
> ************************************
> This email may contain privileged and/or confidential information  
> that is intended solely for the use of the addressee. If you are  
> not the intended recipient or entity, you are strictly prohibited  
> from disclosing, copying, distributing or using any of the  
> information contained in the transmission. If you received this  
> communication in error, please contact the sender immediately and  
> destroy the material in its entirety, whether electronic or hard  
> copy. This communication may contain nonpublic personal information  
> about consumers subject to the restrictions of the Gramm-Leach- 
> Bliley Act and the Sarbanes-Oxley Act. You may not directly or  
> indirectly reuse or disclose such information for any purpose other  
> than to provide the services for which you are receiving the  
> information.
> There are risks associated with the use of electronic transmission.  
> The sender of this information does not control the method of  
> transmittal or service providers and assumes no duty or obligation  
> for the security, receipt, or third party interception of this  
> transmission.
> ************************************
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://puck.nether.net/pipermail/cisco-voip/attachments/20080527/20b56778/attachment.html