[cisco-voip] CM 4.3 user auth problem with AD integration

[Andrius Kislas]

Hi,

I have a few problems in one systems that has similar symptoms. Maybe 
some of you have faced this before.

I have CallManager 4.3 cluster with 2 nodes. It is integrated with 
Microsoft Active Directory. A CheckPoint firewall stands between them. 
Most of the time CallManager works just fine. But sometimes a bunch of 
problems appears:
- CallBack stops working. In CTI logs I can see that CM says "Fail" when 
CCMSysUser tries to open CTI provider. This failure keeps on repeating.
- I get "bad user or password" in my CTI JTAPI software when it tries to 
open CTI provider.
- When I go to CM users page, I have to wait very long until I get a 
list of users.

If I look at Windows Domain Controller Security Event logs, I see only 
successful authentications, no failures. It seems authentication breaks 
somewhere before Win DC. If CTI software works without restart, it 
doesn't break. So the problem is somewhat about authentication.

The fix for the problem is to restart CTI service.

Has anyone seen such behavior? What can be wrong?

Andrius