OK, so that was unpleasant... I went back to UCCX 7.0(1)SR5 and checked the AXL provider and it was using a weird account; also the existing (old) appadmin was only listing a user I wasn't aware of...<div><br></div><div>
I fixed these two, re-ran PUT, rebuilt UCCX 8.5.1SU2 and the restore worked fine...<br><br><div class="gmail_quote">On Tue, Jul 10, 2012 at 8:01 AM, Buchanan, James <span dir="ltr"><<a href="mailto:jbuchanan@presidio.com" target="_blank">jbuchanan@presidio.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">My experience in this migration is that phase 2 required the use of the username and password configured in UCCX as an administrator. If for some reason it cannot talk to UCM due to either a version incompatibility or other issue, it won't let you login.<br>
<br>
James Buchanan| UC Technology Manager | Presidio South | Presidio Networked Solutions<br>
12 Cadillac Dr Ste 130 Brentwood, TN 37027 | <a href="mailto:jbuchanan@presidio.com">jbuchanan@presidio.com</a><br>
D: <a href="tel:615-866-5729" value="+16158665729">615-866-5729</a> | F:<a href="tel:615-866-5781" value="+16158665781">615-866-5781</a> <a href="http://www.presidio.com" target="_blank">www.presidio.com</a><br>
<div><div class="h5"><br>
<br>
-----Original Message-----<br>
From: <a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a> [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a>] On Behalf Of Ryan LaFountain (rlafount)<br>
Sent: Tuesday, July 10, 2012 7:55 AM<br>
To: Jonathan Charles; <a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
Subject: Re: [cisco-voip] Upgrade from UCCX 7.0(1)SR5 to UCCX 8.5.1.11002-22<br>
<br>
Hi Jonathan,<br>
<br>
Unfortunately, I don't think there is a way to verify that Phase II has been completed from the CLI. You can look at the MCVD logs to see if the import is still running, but I would troubleshoot why you can't login first.<br>
<br>
Phase I of the import should've configured UCCX to use the same AXL provider as was in your 7.x cluster. The AppAdmin administrator should've been the same too. After Phase I was done, the Application User you specified during the install is no longer authorized to login to AppAdmin.<br>
<br>
So, it could be the following:<br>
<br>
1. UCCX can't contact the AXL provider server.<br>
<br>
2. UCCX can't authenticate using the AXL provider user. I think it is this because of the error message you're getting.<br>
<br>
3. UCCX can't authenticate the AppAdmin administrator specified.<br>
<br>
If you attempt to login, and pull the MADM logs 'file list activelog /uccx/log/MADM' LIB_AXL is enabled in these by default, so you should be able to see what is happening between UCCX and CUCM.<br>
<br>
If the authentication of the AXL provider user is actually failing, it means that the password is incorrect for the AXL provider, the Application User is missing in CUCM or the user doesn't have AXL API rights. The logs should show you what username UCCX is attempting to use for the AXL provider, but the password will be hidden.<br>
<br>
Thank you,<br>
<br>
Ryan LaFountain<br>
Unified Contact Center<br>
Cisco Services<br>
Direct: <a href="tel:%2B1%20919%20392%209898" value="+19193929898">+1 919 392 9898</a><br>
Email: <a href="mailto:rlafount@cisco.com">rlafount@cisco.com</a><br>
Hours: M F 9:00am 5:00pm<br>
<br>
<br>
<br>
<br>
On 7/10/12 7:02 AM, "Jonathan Charles" <<a href="mailto:jonvoip@gmail.com">jonvoip@gmail.com</a>> wrote:<br>
<br>
><br>
><br>
><br>
>After importing the data, and phase 1 completes, the 8.5.1 server logs<br>
>you off the setup and sends you to appadmin where you are supposed to<br>
>login and monitor the remainder of the restore using a pre-upgrade<br>
>username and password; however, you cannot login any more using any<br>
>appadmin account.<br>
><br>
><br>
>in fact, it appears all of the accounts disappear... the clean install<br>
>appadmin account and the old appadmin accounts from the backup:<br>
><br>
><br>
>admin:show uccx appadmin administrators Command successful.<br>
>admin:<br>
><br>
><br>
><br>
>It also says to not reboot until the restore is complete... we are<br>
>going on 10 hours now, with no signs of life from this thing...<br>
><br>
><br>
><br>
><br>
>How can you monitor if the restore is working without being able to<br>
>login to appadmin?<br>
><br>
><br>
>Creating new accounts via the command line also has no effect:<br>
><br>
><br>
><br>
>admin:set uccx appadmin administrator crsadmin Successfully set user as<br>
>AppAdmin Administrator Command successful.<br>
>admin:<br>
><br>
><br>
><br>
>And all attempts to login to appadmin get this error:<br>
><br>
><br>
>AXL Authentication failed.Please try again.<br>
><br>
><br>
><br>
><br>
><br>
>I have confirmed the axl provider is the live CCM.<br>
><br>
><br>
>admin:show uccx provider ip axl<br>
> Cisco Unified Communications Manager IP is 10.10.33.8<br>
><br>
><br>
> Command successful.<br>
>admin:<br>
><br>
><br>
><br>
>What else can I check before calling TAC?<br>
><br>
><br>
><br>
><br>
><br>
><br>
>Jonathan<br>
<br>
<br>
</div></div>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
This message w/attachments (message) is intended solely for the use of the intended recipient and may contain information that is privileged, confidential or proprietary. If you are not an intended recipient, please notify the sender, and then please delete and destroy all copies and attachments. Please be advised that any review or dissemination of, or the taking of any action in reliance on, the information contained in or attached to this message is prohibited.<br>
<br>
</blockquote></div><br></div>