[cisco-voip] Jabber / CTI and DNS/LDAP

[Brian Meade]

I've also seen the CTI login timeout is pretty aggressive requiring me to
re-order LDAP servers before.

On Wed, Mar 8, 2017 at 9:14 AM, Pawlowski, Adam <ajp26 at buffalo.edu> wrote:

> Good morning all,
>
> Over the last couple of days we had the wonderful joy of running some of
> our services in HA failover - and others we had to do without. Amongst
> those we lost our primary DNS server, and just about everything Cisco UC
> actually performed without skipping a beat. What we noted was sign in to
> application admin and Jabber was very slow. Deskphone control didn't work
> at all - it would just sit there spinning then eventually fail with what
> seems to be a generic error code.
>
> Eventually after surfing around for a while we figured out that the CTI
> control mechanism must authenticate using your user credentials when you're
> trying to control the phone. That triggers a call out to LDAP which must
> also trigger a DNS lookup for some reason. While this may eventually
> succeed, the action in Jabber times out. I'm not sure there's any way to
> adjust it. In our lab I tried removing a down GC from the LDAP auth
> configuration, and restarting the CTI manager, neither had any effect. What
> I was able to do was run "set network dns rotate" - and rebooted the UCM
> (before I found a doc saying you should only have to reboot Tomcat) which
> seemed to help.
>
> My question is - has anyone run into this before , as it would seem like
> setting that rotate option, or lowering the timeout/retries from default
> for DNS , would then be required for Jabber to actually function correctly
> when the primary DNS server is off-line. This wouldn't be the first time
> that some sort of resiliency mechanism required tweaks to timers or DNS to
> make sure it was viable, nor would it be the first time I've completely
> overlooked something.
>
> Anyone else run into this? Thoughts? Appreciated as always.
>
> Regards,
>
> Adam Pawlowski
> SUNYAB NCS
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20170308/ad2c8151/attachment.html>