安全密码重置后的Unity Connection复制问题
简介
本文档介绍在Unity Connection中遇到的问题，在您重置安全密码后，发布服务器和订用服务器之间的复制可能会中断，并提供了解决该问题的解决方案。
本文档有两个缺陷：Cisco Bug ID CSCth87452和CSCua09290。
问题
重置安全密码以解决问题后，无法正确设置复制。
如果从Publisher输入以下命令，您可能会看到此输出：utils dbreplication runtimestate。
PING
SERVER-NAME IP ADDRESS (msec)
----------- ------------ ------
Cisco1 192.168.2.50 0.038
Cisco2 192.168.2.51 0.273
CDR Server REPL. DBver& REPL. REPLICATION SETUP
RPC? (ID) & STATUS QUEUE TABLES LOOP? (RTMT) & details
---- -------------- ----- ------- ----- -----------------
Yes (2) Connected 0 match Yes (2) PUB Setup Completed
Yes (3) Connected 0 match N/A (3) Not Setup
请注意，“复制设置(RTMT)和详细信息”列表示问题，因为它不同时显示(2)。 此外，如果输入文件视图活动日志/cm/log/informix/ccm.log，则输出可能显示：
10:04:02 Password Validation for user [dbmon] failed!
10:04:02 Check for password aging/account lock-out.
10:04:02 listener-thread: err = -952: oserr = 0: errstr =
dbmon@Cisco2.na.cisco.corp[Cisco2]: User (dbmon@Cisco2.na.cisco.corp[Cisco2])'s
password is not correct for the database server.
10:04:06 Password Validation for user [dbauditlog] failed!
10:04:06 Check for password aging/account lock-out.
10:04:06 listener-thread: err = -952: oserr = 0: errstr =
dbauditlog@Cisco2.na.cisco.corp[Cisco2]: User (dbauditlog@Cisco2.na.cisco.corp[Cisco2])'s
password is not correct for the database server.
10:04:06 Password Validation for user [dbdbl] failed!
10:04:06 Check for password aging/account lock-out.
10:04:06 listener-thread: err = -952: oserr = 0: errstr =
dbdbl@Cisco2.na.cisco.corp[Cisco2]: User (dbdbl@Cisco2.na.cisco.corp[Cisco2])'s
password is not correct for the database server.
10:04:07 Password Validation for user [dblpm] failed!
10:04:07 Check for password aging/account lock-out.
10:04:07 listener-thread: err = -952: oserr = 0: errstr =
dblpm@Cisco2.na.cisco.corp[Cisco2]: User (dblpm@Cisco2.na.cisco.corp[Cisco2])'s
password is not correct for the database server.
解决方案
最初，您会看到数据库(DB)复制未在发布者和订用者之间建立，并且此行为与Cisco Bug IDCSCth87452和CSCua09290匹配。遗憾的是，由于根访问是解决方案的一部分，因此Cisco Technical International需要帮助中心(TAC)才能解决问题。
要解决问题，请完成以下步骤：
- 要停止思科数据库，请输入以下命令：
utils服务停止Cisco DB - 使用远程支持帐户登录到服务器并上传Python脚本。
获取SyncInformixPasswordsWithSystem.py并将其放在安全FTP(SFTP)服务器上。
要将文件从SFTP复制到Unity Connection，请输入以下命令：cd /tmp
sftp username@IPAdressSFTPServer
get SyncInformixPasswordWithSystem.py
bye - 要更改文件的访问权限，请输入以下命令：
chmod 644 /tmp/SyncInformixPasswordsWithSystem.py
- 要运行脚本，请执行以下命令：
python /tmp/SyncInformixPasswordsWithSystem.py
输出应如下所示：[root@nw084b-181 /]# python /tmp/SyncInformixPasswordsWithSystem.py
Changing password for user informix.
passwd: all authentication tokens updated successfully.
Changing password for user database.
passwd: all authentication tokens updated successfully.
Changing password for user dbuser.
passwd: all authentication tokens updated successfully.
Changing password for user dbccm. - 完成步骤4后，从管理CLI启动数据库：
utils service start A Cisco DB
- 要查看您是否仍有问题，请输入utils dbreplication runtimestate命令：
10:04:02 Password Validation for user [dbmon] failed!
10:04:02 Check for password aging/account lock-out.
10:04:02 listener-thread: err = -952: oserr = 0: errstr =
dbmon@Cisco2.na.cisco.corp[Cisco2]: User (dbmon@Cisco2.na.cisco.corp[Cisco2])'s
password is not correct for the database server.
10:04:06 Password Validation for user [dbauditlog] failed!
10:04:06 Check for password aging/account lock-out.
10:04:06 listener-thread: err = -952: oserr = 0: errstr =
dbauditlog@Cisco2.na.cisco.corp[Cisco2]: User (dbauditlog@Cisco2.na.cisco.corp[Cisco2])'s
password is not correct for the database server.
10:04:06 Password Validation for user [dbdbl] failed!
10:04:06 Check for password aging/account lock-out.
10:04:06 listener-thread: err = -952: oserr = 0: errstr =
dbdbl@Cisco2.na.cisco.corp[Cisco2]: User (dbdbl@Cisco2.na.cisco.corp[Cisco2])'s
password is not correct for the database server.
10:04:07 Password Validation for user [dblpm] failed!
10:04:07 Check for password aging/account lock-out.
10:04:07 listener-thread: err = -952: oserr = 0: errstr =
dblpm@Cisco2.na.cisco.corp[Cisco2]: User (dblpm@Cisco2.na.cisco.corp[Cisco2])'s
password is not correct for the database server. - 要设置新的安全密码并重新启动两台服务器，请在发布者和订阅者上输入set user password security命令。在某些情况下，这可能是解决您问题的最后一步。但是，在某些情况下，复制可能仍会中断。在本例中，继续执行步骤8。
- 要检查复制是否仍然中断，请输入utils dbreplication runtimestate命令:
PING
SERVER-NAME IP ADDRESS (msec)
----------- ------------ ------
Cisco1 192.168.2.50 0.038
Cisco2 192.168.2.51 0.273
CDR Server REPL. DBver& REPL. REPLICATION SETUP
RPC? (ID) & STATUS QUEUE TABLES LOOP? (RTMT) & details
---- -------------- ----- ------- ----- -----------------
Yes (2) Connected 0 match Yes (2) PUB Setup Completed
Yes (3) Connected 0 match N/A (3) Not Setup - 输入文件视图activelog /cm/log/informix/ccm.log命令：
10:41:24 CDR CDRD_1: transaction aborted (All rows in a transaction defined with
row scope were rejected) with sql error 0 isam error 0.
10:41:24 CDR CDRD_1: failed rows spooled to
file /tmp/ris.g_Cisco1_ccm9_1_1_20000_5.g_Cisco2_ccm9_1_1_20000_5.D_1.140322_10:41:24.3
10:41:24 CDR CDRD_1: failed transaction spooled to
file /tmp/ats.g_Cisco1_ccm9_1_1_20000_5.g_Cisco2_ccm9_1_1_20000_5.D_1.140322_10:41:24.4
10:41:24 CiscoAlarmStart:Cisco1_ccm9_1_1_20000_5:ATTENTION:48:CDR: ATS and/or RIS
files spooled to disk.
:/tmp/ris.g_Cisco1_ccm9_1_1_20000_5.g_Cisco2_ccm9_1_1_20000_5.D_1.140322_10:41:24.3|
/tmp/ats.g_Cisco1_ccm9_1_1_20000_5.g_Cisco2_ccm9_1_1_20000_5.D_1.140322_10:41:24.4:CiscoAlarmEnd - 要尝试在统一通信(UC)集群上重置Cisco CallManager(CCM)数据库复制，请完成以下步骤：
- 在发布服务器和订用服务器上输入utils dbreplication stop命令。
- 在发布服务器和订用服务器上输入utils dbreplication dropadmindb命令。
- 在发布服务器和重新启动的订用服务器上输入Utils dbreplication reset all命令。不需要重新启动发布服务器。
- 最后，您可以在一段时间内输入utils dbreplication runtimestate命令，以监控复制状态的设置。
以下是您可能会看到的示例：
DB and Replication Services: ALL RUNNING
DB CLI Status: No other dbreplication CLI is running...
Cluster Replication State: BATCHING SYNC Requests from nodes at: 2014-03-22-11-27
Sync Request Progress: Received 1 node requests for DB sync
Sync Request Errors: NO ERRORS
DB Version: ccm9_1_1_20000_5
Repltimeout set to: 300s
PROCESS option set to: 1
Cluster Detailed View from Cisco1 (2 Servers):
PING
SERVER-NAME IP ADDRESS (msec)
----------- ------------ ------
Cisco1 192.168.2.50 0.028
Cisco2 192.168.2.51 0.221
CDR Server REPL. DBver& REPL. REPLICATION SETUP
RPC? (ID) & STATUS QUEUE TABLES LOOP? (RTMT) & details
---- -------------- ----- ------- ----- -----------------
Yes (2) Connected 0 match Yes (2) PUB Batching Sub Req's
Yes (3) Connected 0 match N/A (0) Setup Requested
以下是如果稍后输入命令，您可能会看到的内容：Cluster Replication State: BROADCAST SYNC Started on 1 server(s) at: 2014-03-22-11-32
Processing Table: typeconfiginputdata
Sync Progress: 275 tables sync'ed out of 603
Sync Errors: NO ERRORS
DB Version: ccm9_1_1_20000_5
Repltimeout set to: 300s
PROCESS option set to: 1
Cluster Detailed View from Cisco1 (2 Servers):
PING
SERVER-NAME IP ADDRESS (msec)
----------- ------------ ------
Cisco1 192.168.2.50 0.031
Cisco2 192.168.2.51 0.210
CDR Server REPL. DBver& REPL. REPLICATION SETUP
RPC? (ID) & STATUS QUEUE TABLES LOOP? (RTMT) & details
---- -------------- ----- ------- ----- -----------------
Yes (2) Connected 0 match Yes (2) PUB Setting Subs
Yes (3) Connected 0 match N/A (0) Setup in Progress
以下是如果稍后输入命令，您可能会看到的内容：DB and Replication Services: ALL RUNNING
DB CLI Status: No other dbreplication CLI is running...
Cluster Replication State: BROADCAST SYNC Completed on 1 servers at: 2014-03-22-11-33
Last Sync Result: SYNC COMPLETED 603 tables sync'ed out of 603
Sync Errors: NO ERRORS
DB Version: ccm9_1_1_20000_5
Repltimeout set to: 300s
PROCESS option set to: 1
Cluster Detailed View from Cisco1 (2 Servers):
PING
SERVER-NAME IP ADDRESS (msec)
----------- ------------ ------
Cisco2 192.168.2.51 0.0298
Cisco1 192.168.2.50 0.050
CDR Server REPL. DBver& REPL. REPLICATION SETUP
RPC? (ID) & STATUS QUEUE TABLES LOOP? (RTMT) & details
---- -------------- ----- ------- ----- -----------------
Yes (3) Connected 0 match Yes (2) Setup Completed
Yes (2) Connected 0 match Yes (2) PUB Setup Completed
此时，您可以看到复制已建立，因为复制表显示2。
相关信息
修订历史记录
| 版本 | 发布日期 | 备注 |
|---|---|---|
1.0 |
21-Apr-2014 |
初始版本 |
反馈