<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16939" name=GENERATOR></HEAD>
<BODY style="FONT-SIZE: small; FONT-FAMILY: Arial" text=#000000 bgColor=#ffffff>
<DIV dir=ltr align=left><SPAN class=096091913-04112009><FONT color=#0000ff
size=2>Hello Adam,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=096091913-04112009><FONT color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=096091913-04112009><FONT color=#0000ff
size=2>The configured port is 636 (LDAP over SSL). Strangely even a simple
CCMUser login takes about 10 seconds to complete. The difference is that the
CCMUser login is successful and the CAD is not. I also see that the AXL service
takes more than 10 seconds to process information from the LDAP
Server:</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=096091913-04112009><FONT color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=096091913-04112009><FONT color=#0000ff
size=2>+++++++++++++<BR>-ENV:Header/><SOAP-ENV:Body><doAuthenticateUser><userid>XXXXX</userid
><BR><password>*********</password></doAuthenticateUser></SOAP-ENV:Body>
</SOAP-ENV:Envelope><BR>2009-11-04 10:35:43,723 INFO
[http-8443-Processor18] axl.Handler - Handler initializing<BR>2009-11-04
10:35:54,423 INFO [http-8443-Processor18] axl.AXLRouter
-<SOAP-ENV:Envelope xmlns:SOAP-ENV="<A
href="http://schemas.xmlsoap.org/soap/envelope/">http://schemas.xmlsoap.org/soap/envelope/</A>"<BR>SOAP-ENV:encodingStyle="<A
href='http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Header/'>http://schemas.xmlsoap.org/soap/encoding/"><SOAP-ENV:Header/</A>>
<SOAP-ENV:Body><axl:doAuthenticateUserResponse<BR>xmlns:axl="<A
href="http://www.cisco.com/AXL/API/1.0">http://www.cisco.com/AXL/API/1.0</A>"<BR>xmlns:xsi="<A
href='http://www.cisco.com/AXL/API/1.0"><return><userAuthenticated>false'>http://www.cisco.com/AXL/API/1.0"><return><userAuthenticated>false</A><BR></userAuthenticated><code>1</code></return></axl:doAuthenticate
UserResponse > </SOAP-ENV:Body></SOAP-ENV:Envelope><BR>2009-11-04
10:35:54,424 INFO [http-8443-Processor18] axl.AXLRouter - Request
1256920540273 was process in
<STRONG>10714ms</STRONG><BR>+++++++++++++<BR></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=096091913-04112009><FONT color=#0000ff
size=2>So it seems the AXL Service takes more than 10 seconds to complete the
operation and the CRS breaks the CAD login after 10
seconds.</DIV></FONT></SPAN>
<DIV dir=ltr align=left><SPAN class=096091913-04112009><FONT color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=096091913-04112009><FONT color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=096091913-04112009><FONT color=#0000ff
size=2>Thanks.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=096091913-04112009><FONT
color=#0000ff></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=096091913-04112009></SPAN><SPAN
class=096091913-04112009><FONT size=2><FONT
color=#0000ff>Regards,<BR><BR>Antonio Soares, CCIE #18473
(R&S)<BR>amsoares@netcabo.pt</FONT><BR></DIV></FONT></SPAN><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> Adam Frankel [mailto:afrankel@cisco.com]
<BR><B>Sent:</B> quarta-feira, 4 de Novembro de 2009 13:10<BR><B>To:</B> António
M. Soares<BR><B>Cc:</B> cisco-voip@puck.nether.net<BR><B>Subject:</B> Re:
[cisco-voip] UCCX - CAD Agent Login Timeout<BR></FONT><BR></DIV>
<DIV></DIV><FONT size=-1><FONT face=Arial>Not sure if you can increase the
timeout, but perhaps if you are pointing to AD GC for LDAP Authentication you
can use port 3268 instead of 389. This should reduce the authentication
time.</FONT></FONT><BR><PRE class=moz-signature cols="72">Adam </PRE><SPAN class=headerSpan
style="COLOR: rgb(0,0,0)"><BR>-----Original Message-----<BR>From: António M.
Soares <A class=moz-txt-link-rfc2396E
href="mailto:antonio.soares@convex.pt"><antonio.soares@convex.pt></A><BR>Sent:
Wed, Nov 04, 2009 2:06:31 Pm<BR>To: <A class=moz-txt-link-abbreviated
href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</A><BR>CC:
<BR>Subject: [cisco-voip] UCCX - CAD Agent Login Timeout</SPAN>
<BLOCKQUOTE
style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0px! important; BORDER-TOP: medium none; PADDING-LEFT: 0px! important; MARGIN-LEFT: 0px! important; BORDER-LEFT: medium none; MARGIN-RIGHT: 0px! important; BORDER-BOTTOM: medium none"
cite=mid:D32945ABB3DC46C0B37925EEF4B0CE2B@int.convex.pt type="cite"><PRE wrap="">Hello group,
I'm facing a problem with CAD agents login timeout. This is a new problem and the workaround is to disable the LDAP Authentication.
I see this timeout in the MIVR logs:
++++++++++++++++++++++++
3103111: Nov 04 10:35:39.694 BST %MIVR-SS_RM-7-UNK:Trying to authenticate agent XXXXX
3103149: Nov 04 10:35:49.694 BST %MIVR-LIB_AXL-4-AXL_TIMEOUT_DETECTED:AXL Timeout Detected:
Cmd=AXL-ExecutionCmd-127608.CCMUserAuthenticationSOAPAdmin:
3103150: Nov 04 10:35:49.694 BST %MIVR-SS_RM-7-UNK:Unable to authenticate user: XXXXX Exception: com.cisco.user.TimeoutException:
AXL operation timed out: ; nested exception is:
com.cisco.config.axl.TimeoutAXLException: Timeout expired
++++++++++++++++++++++++
The login fails after exactly 10 seconds so i wonder where can i increase this timeout. This would be a better workaround while we
troubleshoot the root cause.
Thanks.
Regards,
Antonio Soares, CCIE #18473 (R&S)
<A class=moz-txt-link-abbreviated href="mailto:amsoares@netcabo.pt">amsoares@netcabo.pt</A>
_______________________________________________
cisco-voip mailing list
<A class=moz-txt-link-abbreviated href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</A>
<A class=moz-txt-link-freetext href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</A>
</PRE></BLOCKQUOTE></BODY></HTML>