<div dir="ltr">I got a pretty good reply from Jeff on my thread:<div><a href="https://supportforums.cisco.com/message/4181654">https://supportforums.cisco.com/message/4181654</a><br></div><div><br></div><div><br></div></div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Mar 4, 2014 at 10:40 AM, Lelio Fulgenzi <span dir="ltr"><<a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div style="font-size:10pt;font-family:verdana,helvetica,sans-serif">Jason,<br><br>Can you share the forum thread link? I'd like to post a follow up question to Jeff. <br><div class=""><br>Lelio<br><br><br><div><span name="x"></span>---<br>
Lelio Fulgenzi, B.A.<br>Senior Analyst, Network Infrastructure<br>Computing and Communications Services (CCS)<br>University of Guelph<br><br><a href="tel:519%E2%80%90824%E2%80%904120%20Ext%2056354" value="+15198244120" target="_blank">519‐824‐4120 Ext 56354</a><br>
<a href="mailto:lelio@uoguelph.ca" target="_blank">lelio@uoguelph.ca</a><br><a href="http://www.uoguelph.ca/ccs" target="_blank">www.uoguelph.ca/ccs</a><br>Room 037, Animal Science and Nutrition Building<br>Guelph, Ontario, N1G 2W1<span name="x"></span><br>
</div><br><hr></div><div style="font-size:12pt;font-style:normal;font-family:Helvetica,Arial,sans-serif;text-decoration:none;font-weight:normal"><b>From: </b>"Jason Aarons (AM)" <<a href="mailto:jason.aarons@dimensiondata.com" target="_blank">jason.aarons@dimensiondata.com</a>><br>
<b>To: </b>"Charles Salisbury" <<a href="mailto:charles.salisbury@gentex.com" target="_blank">charles.salisbury@gentex.com</a>>, "Justin Steinberg" <<a href="mailto:jsteinberg@gmail.com" target="_blank">jsteinberg@gmail.com</a>>, "Bill Talley" <<a href="mailto:btalley@gmail.com" target="_blank">btalley@gmail.com</a>><br>
<b>Cc: </b>"Cisco VOIP" <<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a>><br><b>Sent: </b>Tuesday, March 4, 2014 9:59:45 AM<div><div class="h5"><br><b>Subject: </b>Re: [cisco-voip] COBRAS import PIN issue<br>
<br><div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">From the Cobras developer;</span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Yeah… if you don’t change your PINs for years and port them multiple times without changing them you will have problems… Unity and early versions of Connection and then later versions of Connection all used different hashes or PWs and PINs… nothing any client can do about that – </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Maybe a separate “everything you ever wanted to know about PINs and passwords” section could pull all that into a single section might help…</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p>
<div><div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> cisco-voip [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>] <b>On Behalf Of </b>Salisbury, Charles<br>
<b>Sent:</b> Tuesday, March 04, 2014 9:18 AM<br><b>To:</b> Justin Steinberg; Bill Talley<br><b>Cc:</b> Cisco VOIP<br><b>Subject:</b> Re: [cisco-voip] COBRAS import PIN issue</span></p></div></div><p class="MsoNormal"> </p>
<p class="MsoNormal" style="margin-bottom:12.0pt"> </p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I just did an upgrade from 7.1.5 to 9.1(2) and had this exact same issue – TAC traced it to be users that had not changed their PIN for a while.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> cisco-voip [<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">mailto:cisco-voip-bounces@puck.nether.net</a>] <b>On Behalf Of </b>Justin Steinberg<br>
<b>Sent:</b> Monday, March 03, 2014 11:13 PM<br><b>To:</b> Bill Talley<br><b>Cc:</b> Cisco VOIP<br><b>Subject:</b> Re: [cisco-voip] COBRAS import PIN issue</span></p><p class="MsoNormal"> </p><p>I ran into this issue once and tracked it down to the time when the user had last changed/set their pin. In my situation only about 20% of the users were affected. The other 80% were fine.</p>
<p>I tracked the issue down by running a user data dump, and all the users that had reported the problem had the last pin changed time of much older than everyone else. In my case, the authentication rules on this system did not expire the pins, so some users had the same pins for years.</p>
<p>Instead of rolling back, I opted to run a bulk pin reset to the default for these users and then sent a mass email to all of them telling them that their PIN had been reset.</p><p>If you don't expire your pins this might be your problem. While I didn't try this, you could go into the current 7 system and set the password policy to force users to change their pin on the next login and let everyone update their pin before you run the upgrade again. </p>
<p>I believe the aggravating factor is that the users in question last changed their pin on an older version of connection that used a different encryption type, that is not supported by v9.</p><div><p class="MsoNormal">On Mar 3, 2014 8:57 PM, "Bill Talley" <<a href="mailto:btalley@gmail.com" target="_blank">btalley@gmail.com</a>> wrote:</p>
<p class="MsoNormal">I interpreted the issue as being from or to version 7.0 as it also<br>suggests upgrading to 7.1.3 prior (IIRC) to using COBRAS.<br><br>Sent from an Apple iOS device with very tiny touchscreen input keys.<br>
Please excude my typtos.<br><br>> On Mar 3, 2014, at 5:48 PM, Ed Leatherman <<a href="mailto:ealeatherman@gmail.com" target="_blank">ealeatherman@gmail.com</a>> wrote:<br>><br>> Hello!<br>><br>> This weekend I exported some voice mail accounts from Connection 7.0.2 and imported them into 9.1(2) using COBRAS tool.<br>
><br>> When I did this, the users were not able to sign into their mailbox, as if PIN was changed.<br>><br>> Retracing my steps, I did have this in the COBRAS log during the import:<br>> [Thread 001], [14/03/02 08:51:34], Updating subscriber phone PIN from Connection backup<br>
> [Thread 001], [14/03/02 08:51:34], (warning) unable to find mapping for MDBObjectId=051ee60c-4e21-42f6-bea4-9f845e6e96c8, ObjectType=CredentialPolicy in GetNewObjectId on DirectoryBackupDatabaseFunctions.cs<br>><br>
> Unfortunately I had did not have a whole lot of time to troubleshoot on live 9.1 server - weather emergency dictated that I swing them back the 7.0 version asap so that users could update various greetings and info prompts. Right now i'm working with the 9.1 VM in a isolated network.<br>
><br>> My hypothesis is that the old system had PIN set to not expire, and the new system has PIN set to expire in 120 days - and this somehow caused the PIN to not get updated somehow. I can't see any other difference related to credential policy. Anyone know if this is the case or why PINs might not have carried over, or if I'm barking up the wrong tree?<br>
><br>> I had read that there was some issues importing PINs into version 7.0, but exporting from 7.0 TO a version 7.1.3+ was not cited as a problem.<br>><br>> Thanks!<br>><br>><br>> --<br>> Ed Leatherman<br>
> </p></div><p> </p><p><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:#999999">THE INFORMATION CONTAINED IN THIS E-MAIL MESSAGE AND ANY ATTACHMENTS SENT FROM GENTEX CORPORATION IS GENTEX CONFIDENTIAL INFORMATION INTENDED ONLY FOR THE PERSONAL USE OF THE INDIVIDUAL OR ENTITY NAMED ABOVE. If you are not the intended recipient, you are hereby notified that any review, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately notify the sender by return e-mail, and delete this e-mail message and any attachments from your computer.</span></p>
<p> </p><div><p class="MsoNormal">_______________________________________________<br>> cisco-voip mailing list<br>> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>> <a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a></p>
</div><p class="MsoNormal"><br><br><span style="color:white">itevomcid</span> </p></div><br>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br></div></div></div><br></div></div><br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br>Ed Leatherman<br>
</div>