<div dir="ltr"><div>This leads me to another question. When I do a nslookup using the DNS servers the phone uses the name resolves fine. </div><div> </div><div>Does setting the phone's domain name make a difference in it's DNS lookup?</div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Oct 9, 2013 at 9:49 AM, Erick Wellnitz <span dir="ltr"><<a href="mailto:ewellnitzvoip@gmail.com" target="_blank">ewellnitzvoip@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Well, I think we have a replication issue.</div><div> </div><div>DB and Replication Services: ALL RUNNING</div>
<div>Cluster Replication State: BROADCAST SYNC Completed on 3 servers at: 2012-03-05- 18-58<br>
Last Sync Result: SYNC COMPLETED 530 tables sync'ed out of 530<br> Sync Errors: NO ERRORS</div><div>DB Version: ccm8_5_1_13900_5<br>Number of replicated tables: 530</div><div>Cluster Detailed View from PUB (4 Servers):</div>
<div> PING REPLICATION REPL. DBver& R EPL. REPLICATION SETUP<br>
SERVER-NAME IP ADDRESS (msec) RPC? STATUS QUEUE TABLES L OOP? (RTMT) & details<br>
----------- ------------ ------ ---- ----------- ----- -------- ---- -----------------<br>
ASI-LNX-UCMP-1 10.129.146.20 0.032 Yes Connected 0 match Y es (2) PUB Setup Completed<br>
ASI-LNX-UCMS-1 10.129.146.21 0.248 Yes Connected 148 match Y es (2) Setup Completed<br>
ASI-LNX-UCMS-2 10.129.146.22 0.259 Yes Connected 148 match Y es (2) Setup Completed<br>
ASI-LNX-UCMS-3 10.130.146.20 1.24 Yes Connected 148 match Y es (2) Setup Completed<br>
</div><div> </div><div>All of our other clusters show 0 for Repl. Queue</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Oct 8, 2013 at 4:25 PM, Brian Meade (brmeade) <span dir="ltr"><<a href="mailto:brmeade@cisco.com" target="_blank">brmeade@cisco.com</a>></span> wrote:<br>
<blockquote style="margin:0px 0px 0px 0.8ex;padding-left:1ex;border-left-color:rgb(204,204,204);border-left-width:1px;border-left-style:solid" class="gmail_quote">
<div lang="EN-US" vlink="purple" link="blue">
<div>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Eric,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Just checked your packet capture and see the 404 you’re talking about from the home cluster. It’s indeed for the SEP<MAC>.cnf.cml.sgn file that’s having the
problem.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Can you use a TFTP client to try downloading other signed files from that home cluster?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">From your mini-config, it looks like the 2 TFTP servers it gets is XXX-XXX-UCMP-1 and 10.12x.xx.22.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">I then see a failed DNS lookup for ASI-LNX-UCMP-1 so it uses the 10.12x.xx.22 address. I wonder if there’s any sort of replication issues that may be causing
the 404 Not Found.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Can you check “utils dbreplication runtimestate” on the publisher of the home cluster?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Thanks,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Brian<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-family:"Tahoma","sans-serif";font-size:10pt">From:</span></b><span style="font-family:"Tahoma","sans-serif";font-size:10pt"> Erick Wellnitz [mailto:<a href="mailto:ewellnitzvoip@gmail.com" target="_blank">ewellnitzvoip@gmail.com</a>]
<br>
<b>Sent:</b> Tuesday, October 08, 2013 4:27 PM<br>
<b>To:</b> Brian Meade (brmeade)<br>
<b>Cc:</b> Ryan Ratliff (rratliff); cisco-voip<br>
<b>Subject:</b> Re: [cisco-voip] 'interesting' EMCC behavior<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">No, as soon as I get the 404 not found response in regards to the .sgn config file the logout is initiated.<u></u><u></u></p>
</div>
<div>
<p style="margin-bottom:12pt" class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On Tue, Oct 8, 2013 at 3:16 PM, Brian Meade (brmeade) <<a href="mailto:brmeade@cisco.com" target="_blank">brmeade@cisco.com</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Erick,</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Does the user ever show up in the Remotely Logged-In Device Report on the home cluster?</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Brian Meade</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"> </span><u></u><u></u></p>
<p class="MsoNormal"><b><span style="font-family:"Tahoma","sans-serif";font-size:10pt">From:</span></b><span style="font-family:"Tahoma","sans-serif";font-size:10pt"> Erick Wellnitz [mailto:<a href="mailto:ewellnitzvoip@gmail.com" target="_blank">ewellnitzvoip@gmail.com</a>]
<br>
<b>Sent:</b> Tuesday, October 08, 2013 4:03 PM<br>
<b>To:</b> Ryan Ratliff (rratliff)<br>
<b>Cc:</b> Brian Meade (brmeade); cisco-voip<br>
<b>Subject:</b> Re: [cisco-voip] 'interesting' EMCC behavior</span><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">I may have found something but I'm not sure.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">In the packet capture, I see that the request for SEPXXXXXXXXXXXX.cnf.xml.sgn is sent to the user's cluster but is not found. At that point the logout is initiated.<u></u><u></u></p>
</div>
</div>
<div>
<p style="margin-bottom:12pt" class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">On Mon, Oct 7, 2013 at 10:51 AM, Erick Wellnitz <<a href="mailto:ewellnitzvoip@gmail.com" target="_blank">ewellnitzvoip@gmail.com</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">And this:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p><span lang="EN">7730: WRN 09:00:37.155813 SECD: WARN:getTLInfoFromFile: ** phone has no TL file /flash0/sec/ctl//CTLFile.tlv</span><u></u><u></u></p>
</div>
</div>
<div>
<p style="margin-bottom:12pt" class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">On Mon, Oct 7, 2013 at 10:48 AM, Erick Wellnitz <<a href="mailto:ewellnitzvoip@gmail.com" target="_blank">ewellnitzvoip@gmail.com</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">The only 'abnormal' thing I see is this:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p><span lang="EN">7739: WRN 09:00:37.178303 SECD: WARN:getTLInfoFromFile: TL signer's issuer name too big, may truncate</span><u></u><u></u></p>
</div>
</div>
<div>
<p style="margin-bottom:12pt" class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">On Fri, Oct 4, 2013 at 6:26 PM, Ryan Ratliff (rratliff) <<a href="mailto:rratliff@cisco.com" target="_blank">rratliff@cisco.com</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">I it's easier get the console logs there will likely be something there to go off. <br>
<br>
Sent from my iPhone<u></u><u></u></p>
</div>
<div>
<p style="margin-bottom:12pt" class="MsoNormal"><br>
On Oct 4, 2013, at 5:10 PM, "Erick Wellnitz" <<a href="mailto:ewellnitzvoip@gmail.com" target="_blank">ewellnitzvoip@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="margin-top:5pt;margin-bottom:5pt">
<div>
<div>
<div>
<p class="MsoNormal">The profile logs in, phone resets, profile gets logged out, phone resets and displays 'extension mobility unavailable.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">We believe it is somehow related to DNS because when we register a phone to one of the 9.1 clusters in the other location login works as expected. I haven't had a chance to do
a packet capture yet.<u></u><u></u></p>
</div>
</div>
<div>
<p style="margin-bottom:12pt" class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">On Fri, Oct 4, 2013 at 4:00 PM, Ryan Ratliff (rratliff) <<a href="mailto:rratliff@cisco.com" target="_blank">rratliff@cisco.com</a>> wrote:<u></u><u></u></p>
<div>
<p class="MsoNormal">By the way what's the error code that the phone displays? EM has been better than most about having useful errors, even if they are subject to the secret decoder ring.
<u></u><u></u></p>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">-Ryan
<u></u><u></u></p>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">On Oct 4, 2013, at 4:10 PM, Erick Wellnitz <<a href="mailto:ewellnitzvoip@gmail.com" target="_blank">ewellnitzvoip@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">Yes, it is also the primary tftp server.<u></u><u></u></p>
</div>
<div>
<p style="margin-bottom:12pt" class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">On Fri, Oct 4, 2013 at 12:57 PM, Ryan Ratliff (rratliff) <<a href="mailto:rratliff@cisco.com" target="_blank">rratliff@cisco.com</a>> wrote:<u></u><u></u></p>
<div>
<p class="MsoNormal">System->Server values don't impact certificates. They will impact what the phone gets in config files so if you aren't using DNS this will be an issue. Is that pub also the TFTP
server that is going to show up in the mini-config? <u></u><u></u></p>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">-Ryan
<u></u><u></u></p>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">On Oct 4, 2013, at 1:13 PM, Erick Wellnitz <<a href="mailto:ewellnitzvoip@gmail.com" target="_blank">ewellnitzvoip@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">I always forget about doing a packet capture on the phone.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">I'm thinking it is cert related because on this one cluster the Publisher is set up under servers using it's hostname instead of IP while all the others are using IP.
<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">We're going to change this once we get approval then re-export, consolidate and import.<u></u><u></u></p>
</div>
</div>
<div>
<p style="margin-bottom:12pt" class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">On Thu, Oct 3, 2013 at 4:49 PM, Brian Meade (brmeade) <<a href="mailto:brmeade@cisco.com" target="_blank">brmeade@cisco.com</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Erick,</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Can you grab a packet capture from the phone trying to log in? The packet captures seem to show
the EMCC issues very clearly. You should see after the login, the phone will download its mini-config with the new TFTP server info. You’ll then see it try to download its ITL from the other cluster. If you don’t see the phone request anything after that,
most likely it didn’t trust the signer of the ITL and it will show the “Extension Mobility is unavailable” error message.</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Usually that means you need to do a Re-Export, Consolidate, Import of the certificates.</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"> </span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">Brian Meade</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"> </span><u></u><u></u></p>
<p class="MsoNormal"><b><span style="font-family:"Tahoma","sans-serif";font-size:10pt">From:</span></b><span style="font-family:"Tahoma","sans-serif";font-size:10pt"> cisco-voip [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>]
<b>On Behalf Of </b>Erick Wellnitz<br>
<b>Sent:</b> Thursday, October 03, 2013 5:01 PM<br>
<b>To:</b> Jason Aarons (AM)<br>
<b>Cc:</b> cisco-voip<br>
<b>Subject:</b> Re: [cisco-voip] 'interesting' EMCC behavior</span><u></u><u></u></p>
<p class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">That's the odd thing. All of the traces look like it is successful but the phone (7965) resets, logs the user out and displays a message that extension mobility is not available
without an error code. I get similar behavior on the 8945 but without the message.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">I've gon through the EMCC guide a number of times and nothing sticks out as obvious.<u></u><u></u></p>
</div>
</div>
<div>
<p style="margin-bottom:12pt" class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">On Thu, Oct 3, 2013 at 3:41 PM, Jason Aarons (AM) <<a href="mailto:jason.aarons@dimensiondata.com" target="_blank">jason.aarons@dimensiondata.com</a>> wrote:<u></u><u></u></p>
<div>
<div>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt">I was using 8.6 the first time I setup EMCC to another 8.6 box.</span><u></u><u></u></p>
<p class="MsoNormal"><span style="color:rgb(31,73,125);font-family:"Calibri","sans-serif";font-size:11pt"> </span><u></u><u></u></p>
<div>
<div style="border-width:1pt medium medium;border-style:solid none none;border-color:currentColor;padding:3pt 0in 0in">
<p class="MsoNormal"><b><span style="font-family:"Calibri","sans-serif";font-size:11pt">From:</span></b><span style="font-family:"Calibri","sans-serif";font-size:11pt"> cisco-voip [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>]
<b>On Behalf Of </b>Anthony Holloway<br>
<b>Sent:</b> Thursday, October 03, 2013 3:39 PM<br>
<b>To:</b> Erick Wellnitz<br>
<b>Cc:</b> cisco-voip<br>
<b>Subject:</b> Re: [cisco-voip] 'interesting' EMCC behavior</span><u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
<p style="margin-bottom:12pt" class="MsoNormal"> <u></u><u></u></p>
<div>
<div>
<p style="margin-bottom:12pt" class="MsoNormal">I have one idea.<u></u><u></u></p>
</div>
<p class="MsoNormal">EMCC does not work very well in 8.5 because you cannot "home" a user to a cluster. Therefore, if your LDAP integrations are the same for each cluster, it would be impossible to
know which cluster the user is homed to. 9.1 on the other hand has this feature on the end user page, and thus overcomes this limitation.<u></u><u></u></p>
</div>
<div>
<p style="margin-bottom:12pt" class="MsoNormal"> <u></u><u></u></p>
<div>
<p class="MsoNormal">On Thu, Oct 3, 2013 at 1:50 PM, Erick Wellnitz <<a href="mailto:ewellnitzvoip@gmail.com" target="_blank">ewellnitzvoip@gmail.com</a>> wrote:<u></u><u></u></p>
<blockquote style="border-width:medium medium medium 1pt;border-style:none none none solid;border-color:currentColor currentColor currentColor rgb(204,204,204);margin:5pt 0in 5pt 4.8pt;padding:0in 0in 0in 6pt">
<div>
<div>
<p class="MsoNormal">I have a strange situation.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">3 Clusters. 2 on 9.1 and the other on 8.5 EMCC works except with users configured on the 8.5 cluster. The profile logs in then immediately logs out without an error message.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Any ideas would be greatly appreciated!<u></u><u></u></p>
</div>
</div>
<p style="margin-bottom:12pt" class="MsoNormal"><br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><u></u><u></u></p>
</blockquote>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<p class="MsoNormal"><br>
<br>
<span style="color:white">itevomcid</span> <u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
<p class="MsoNormal">_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><u></u><u></u></p>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</blockquote>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"> <u></u><u></u></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</blockquote></div><br></div>
</blockquote></div><br></div>