This document describes the Administrator login failure problem after
the installation of Cisco IP Contact Center (IPCC) Express 3.0(3a) in an IPCC
Express environment, as well as the workaround.
Note: The problem described in this document is resolved in IPCC Express
version 3.1(1). Refer to this DDTS for details:
Externally found severe defect: Verified (V)
CRS administrator unable to login after CallManager 3.3(2) upgrade
Cisco recommends that you have knowledge of these topics:
Cisco IPCC Express
The information in this document is based on these software and
Cisco IPCC Express version 3.0(3a)
Cisco CallManager 3.2(2c) with Service Pack F and
Cisco CallManager 3.3(2) with All Service Packs
Data Connection (DC) Directory
The information in this document was created from the devices in a
specific lab environment. All of the devices used in this document started with
a cleared (default) configuration. If your network is live, make sure that you
understand the potential impact of any command.
Technical Tips Conventions for more information on document
After the initial Application Administration Configuration, assigned
administrators fail to login on the Application Administration page.
The Cisco IPCC Express initial installation process completes the user
maintenance step, in which user accounts created in Cisco CallManager are added
to the Administrator group. These user accounts can replace the initial login
of Administrator. In IPCC Express 3.0(3a), the default search
attribute behavior is changed. This version checks to see if the attribute is
empty or not. The default value for DC Directory is "mail".
When there is an attempt to login, the failure process appears as
Enter this URL in the Address field of Microsoft Internet Explorer
or the Location field of Netscape on the client PC in order to access the
Application Administration main menu:
Note: The servername is either the host name or the
IP address of the application server.
The Authentication window opens, as shown in Figure 1.
Figure 1: Authentication
Enter the Cisco IPCC Express administrator name and password in the
Click Log On. Due to login authorization failure,
the "Unauthorized" message appears, as shown in Figure
Figure 2: Unauthorized
In order to fix the problem, a Lightweight Directory Access Protocol
(LDAP) directory attribute must be added. Follow these step-by-step
Select Start > Programs >
DC Directory Administrator on the Cisco CallManager
Figure 3: Launching DC Directory
Log on to DC Directory Admin, the Step 1 of 2
dialogue box opens.
Figure 4: Log on to DC Directory Admin - Step 1 of
Click Next. The Logon to DC Directory Admin
- Step 2 of 2 dialogue box opens, Figure
Figure 5: Log on to DC Directory Admin - Step 2 of
Login as the Directory Manager. The DC Directory Admin window opens,
as shown in Figure 6.
Figure 6: DC Directory Admin
Expand Directory > cisco.com
Click systemProfile on the left. The DC Directory
Admin window refreshes, as shown in Figure
Figure 7: DC Directory Admin
Double-click System Profile on the right. The System
Profile dialogue box appears, as shown in Figure
Figure 8: System Profile
Click the CCM Configuration tab. If the content of
the User Search Attribute field is empty or is not mail, click
Modify. The System Profile dialogue box refreshes, as shown in
Figure 9: System Profile
Enter mail in the User Search Attribute
Access the Application Administration login in order to confirm the