CUCM 6.13 - Login to PAB returns PD Error to IP Phone

Version 1
    This document was generated from CDN thread

    Created by: Keith Lunn on 20-08-2009 12:58:50 PM
    We have upgraded 3 clusters from CUCM 4.13 to 6.13 and we have noticed some issues with logging into the Personal Address Book.
    With CUCM 6.13, we replaced the factory Directories URL in Enterprise Parameters.
    The reason we did this is because we have our own Corporate Directory lookup system (ASP and IIS based - that works perfectly).
     
    The original factory Directories URL was:
     
    <a>http://10.28.21.66:8080/ccmcip/xmldirectory.jsp</a>]
     
    Example browser output from factory url:
     
    <?xml version="1.0" ?>
    <CiscoIPPhoneMenu>
      <Prompt>Select a directory</Prompt>
    <MenuItem>
      <Name>Personal Directory</Name>
      <URL>http://10.28.21.66:8080/ccmpd/pdCheckLogin.do?name=undefined</URL>
      </MenuItem>
    <MenuItem>
      <Name>Corporate Directory</Name>
      <URL>http://10.28.21.66:8080/ccmcip/xmldirectoryinput.jsp</URL>
      </MenuItem>
      </CiscoIPPhoneMenu>
     
     
     
    We replaced this factory URL with:
     
    <a>http://ucommweb:9999/CorpDir/CorpDir.asp?c=Alpha</a>]
     
    Example browser output:
     
    <CiscoIPPhoneMenu>
      <Prompt>Select a directory</Prompt>
    <MenuItem>
      <Name>Personal Directory</Name>
      <URL>http://10.28.21.66:8080/ccmpd/pdCheckLogin.do?name=#DEVICENAME#</URL>
      </MenuItem>
    <MenuItem>
      <Name>Corporate Directory</Name>
      <URL>http://10.201.132.193:9999/CorpDir/CorpDirInp.asp?c=Alpha</URL>
      </MenuItem>
      </CiscoIPPhoneMenu>
     
     
    Now the Corporate Directory URL to our custom lookup function ¿ works perfectly.
     
    With accessing the Personal Address Book, we have had some problems.
     
    PAB Problem # 1:
    The first attempt at using this URL for access the PAB was set as:
    <URL>http://10.28.21.66:8080/ccmpd/pdCheckLogin.do?name=undefined</URL>
    -Exactly the way we saw the factory Directories URL set it.
     
    Using the URL in this form we saw that we could login into the PAB, but as soon as we pressed the EXIT softkey or exited from the Directories menu, and then tried to re-enter the Directories menu by pressing the Directories button, we had to repeat our login all over again ¿ everytime we go to access the PAB, we had to keep logging back in.
    So, I changed the URL setting for PAB to be:
    <URL>http://10.28.21.66:8080/ccmpd/pdCheckLogin.do?name=#DEVICENAME#</URL>
    This seems to have resolved the issue of having to log back into the PAB everytime you use it; so lets say we have resolved this issue, at least for some phones. (this hasn¿t worked for all phones and we don¿t know why)
     
     
    PAB Problem # 2:
    On some phones we are seeing <strong style="mso-bidi-font-weight: normal;">a login error for PAB. The user enters their credentials and the phone receives the message ¿<strong style="mso-bidi-font-weight: normal;">Cisco PD error¿ at top of phone screen and ¿PD error¿ at bottom of phone screen. We have seen this on a 7960, 7960 and a 7970, so we don¿t believe that this is a phone firmware issue and the issue is not seen consistently.
    We have verified the user credentials too. Example: we can login to Extension Mobility using the PIN all ok. Therefore, we do not believe that this is caused by bad credentials.
     
    How do we debug this PD Error? Are there logs that we can look at or traces which record the conversation between the phone and the PD app?
    I will also attach a pcap between one 7970 and the Publisher which is experiencing the login error message too.
     
    PAB Problem # 3:
     
    We cannot find any documentation that gives us details concerning the Personal Address Book and Fast Dials. The web pages for the End User options do not have any HELP page with them either. We are looking for documentation on these 2 apps (PD, FD).
     
     
    Some further experiments:
    To further test the 7970 which cannot log into the Personal Directories, I created a Phone Service for PAB in ccmadmin. (URL= http://cmhq12pa1:8080/ccmpd/login.do?name=#DEVICENAME#&service=pab]) I created the parameters for userid and PIN and in the User Options page for the phone, I hardcoded the userid and PIN credentials.
    On the 7970, I pressed the Services button and I did see the entry for PAB as expected. I selected the PAB entry and it logged in correctly and accessed PAD as expected.
     
    The next test was to re-check the Personal Directories login that was failing. On the 7970, I pressed the Directories button, then selected Personal Directory.
    I entered the proper user and PIN and pressed submit. Now, the phone actually logs in OK instead of getting a ¿PD Error¿!! ¿ how strange ¿ I don¿t know what all of a sudden it has different behavior now. However, all is not well, because as soon as you press the EXIT softkey and leave the PAB, you cannot return to the Personal Directory without logging back in ¿ you keep getting prompted for credentials to login every time you access the Person Directory ¿ so something else is till wrong.
     
     
    Does anyone have any ideas or comments or suggestions? I would really appreciate any help at all!!

    Thanks,
    Keith

    Subject: RE: CUCM 6.13 - Login to PAB returns PD Error to IP Phone
    Replied by: Keith Lunn on 25-08-2009 01:24:26 PM
    Using Wireshark, a PCAP revealed that when you press the Directories button, the CIP executes the Enterprise Directories URL and adds two query paramerts ("locale", "name") to the URL as in:

    GET /ccmcip/xmldirectory.jsp?locale=English_United_States&name=SEP0017593F52C4 HTTP/1.1

    The key here is that the CIP passes it's device identifier/MAC via the "name" parm.
    The solution was to extract the value of the "name" parm and use it to create the Person Directory URL in the XML sent back to the phone. Previously, We were using this macro #DEVICENAME# in the PD URL and it was not being replaced correctly under Directores. (#DEVICENAME# seems to work fine with other IP Phones Services but not with the Directories button).
    A minor change to our ASP page fixed this:
    var deviceName = Request.QueryString("name");
    <CiscoIPPhoneMenu>
    <Prompt>Select a directory</Prompt>
    <MenuItem>
    <Name>Personal Directory</Name>
    <URL>http://<% =ccmPublisherIP%>:8080/ccmpd/pdCheckLogin.do?name=<% =deviceName%></URL>
    </MenuItem>
    <MenuItem>
    <Name>Corporate Directory</Name>
    <URL>http://10.201.132.193:<% =serverPort%>/CorpDir/CorpDirInp.asp?c=<%=clusterID%></URL>
    </MenuItem>
    </CiscoIPPhoneMenu>
    Many thanks to David Staudt for his assistance!!!!!!!

    Subject: RE: CUCM 6.13 - Login to PAB returns PD Error to IP Phone
    Replied by: Samuel John on 02-09-2009 09:12:20 AM
    Hi,
     
    Could you tell me which web server you used to host the ASP File was it IIS and what is the extension name for the file on the server is it .asp, one other thing is do we need to set any security permissions on the Website?