Field Notice: FN - 72440 - XSI Subscriptions Could Be Rejected with "Unauthorized Request" Response - AP382053 - Software Upgrade Recommended

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision	Publish Date	Comments
1.0	30-Aug-22	Initial Release

Products Affected

Affected OS Type	Affected Software Product	Affected Release	Affected Release Number	Comments
NON-IOS	Application Patches	22.0	22.0.2022.01, 22.0.2022.02, 22.0.2022.03, 22.0.2022.04, 22.0.2022.05, 22.0.2022.06, 22.0.2022.07	Cisco BroadWorks Release 22
NON-IOS	Application Patches	23.0	23.0.2022.01, 23.0.2022.02, 23.0.2022.03, 23.0.2022.04, 23.0.2022.05, 23.0.2022.06, 23.0.2022.07	Cisco BroadWorks Release 23
NON-IOS	Application Patches	24.0	24.0.2022.01, 24.0.2022.02, 24.0.2022.03, 24.0.2022.04, 24.0.2022.05, 24.0.2022.06, 24.0.2022.07	Cisco BroadWorks Release 24

Defect Information

Defect ID	Headline
CSCwc40775	OCIC subscriptions - UserID should take priority over BLF URI

Problem Description

After patch AP382053 is applied, the Xtended Services Interface (XSI) subscriptions could be rejected.

Background

After patch AP382053 is applied and the Enhanced XSI Mechanism is activated, the Open Client Interface-Call Control (OCI-C) subscription could be rejected with this response:

Unauthorized request oci:errorCode 100004

Problem Symptom

When patch AP382053 is applied and the new feature, Enhanced XSI Mechanism is activated (Feature ID 101642), these two problems can occur:

1. A ClassCastException can occur and this signature can be seen in the logs:

   java.lang.ClassCastException:
   com.broadsoft.protocols.ocic.OCICEventsUtilityDb$GetAdminUserIdByUIDQuery cannot be cast to
   com.broadsoft.protocols.ocic.OCICEventsUtilityDb$GetUserFromBlfUriQuery

2. If the Busy Lamp Field (BLF) Uniform Resource Identifier (URI) uses the same URI as an existing user, the OCI-C subscription could be rejected with oci:ErrorResponse (Unauthorized request oci:errorCode 100004).

Workaround/Solution

For the first problem described in the Problem Symptom section, install the corrective application server (AS) patch AP383459, which is available on the Cisco Software Download page:

• Release 22.0: AP.as.22.0.1123.ap383459
• Release 23.0: AP.as.23.0.1075.ap383459
• Release 24.0: AP.as.24.0.944.ap383459

For the second problem described in the Problem Symptom section, install the corrective AS patch AP383520, which is available on the Cisco Software Download page:

• Release 22.0: AP.as.22.0.1123.ap383520
• Release 23.0: AP.as.23.0.1075.ap383520
• Release 24.0: AP.as.24.0.944.ap383520

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

• Open a service request on Cisco.com
• By email or telephone

Receive Email Notification For New Field Notices

My Notifications—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.