[Pidgin] #16844: Cannot connect to Cisco Jabber using VTG token

[Pidgin]

#16844: Cannot connect to Cisco Jabber using VTG token
------------------------+--------------------
 Reporter:  miatawnt2b  |      Owner:  deryni
     Type:  defect      |     Status:  new
Milestone:              |  Component:  XMPP
  Version:  2.10.11     |   Keywords:
------------------------+--------------------
 My company recently performed a UC upgrade for Cisco Jabber. Since I have
 not been able to connect and pidgin is failing with a sasl: No worthy
 mechs found. Below is the Debug

 {{{
 (11:52:50) jabber: jabber_actions: have pep: NO
 (11:52:50) jabber: jabber_actions: have pep: NO
 (11:52:50) account: Connecting to account jmill at technetworks.com/.
 (11:52:50) connection: Connecting. gc = 0x55bcbe9c6a80
 (11:52:50) dnsquery: Performing DNS lookup for exp-e.technetworks.com
 (11:52:50) dns: DNS child 6777 no longer exists
 (11:52:50) dns: Created new DNS child 11737, there are now 1 children.
 (11:52:50) dns: Successfully sent DNS request to child 11737
 (11:52:50) dns: Got response for 'exp-e.technetworks.com'
 (11:52:50) dnsquery: IP resolved for exp-e.technetworks.com
 (11:52:50) proxy: Attempting connection to xxx.xxx.xxx.xxx
 (11:52:50) proxy: Connecting to exp-e.technetworks.com:5222 with no proxy
 (11:52:50) proxy: Connection in progress
 (11:52:50) proxy: Connecting to exp-e.technetworks.com:5222.
 (11:52:50) proxy: Connected to exp-e.technetworks.com:5222.
 (11:52:50) jabber: Sending (jmill at technetworks.com): <?xml version='1.0'
 ?>
 (11:52:50) jabber: Sending (jmill at technetworks.com): <stream:stream
 to='technetworks.com' xmlns='jabber:client'
 xmlns:stream='http://etherx.jabber.org/streams' version='1.0'>
 (11:52:50) jabber: Recv (183): <stream:stream xmlns='jabber:client'
 xml:lang='en-US.UTF-8' xmlns:stream='http://etherx.jabber.org/streams'
 from='technetworks.com'   id='HPsvtFGUmHIilYRIOqAKHA5678' version='1.0'>
 (11:52:50) jabber: Recv (107): <stream:features><starttls
 xmlns='urn:ietf:params:xml:ns:xmpp-
 tls'><required/></starttls></stream:features>
 (11:52:50) jabber: Sending (jmill at technetworks.com): <starttls
 xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
 (11:52:50) jabber: Recv (50): <proceed xmlns='urn:ietf:params:xml:ns:xmpp-
 tls'/>
 (11:52:50) nss: SSL version 3.3 using 128-bit AES with 160-bit SHA1 MAC
 Server Auth: 2048-bit RSA, Key Exchange: 2048-bit RSA, Compression: NULL
 Cipher Suite Name: TLS_RSA_WITH_AES_128_CBC_SHA
 (11:52:50) nss: subject=CN=*.technetworks.com,O="Hye Tech Network &
 Security Solutions, LLC",L=Phoenix,ST=Arizona,C=US issuer=CN=DigiCert SHA2
 Secure Server CA,O=DigiCert Inc,C=US
 (11:52:50) nss: subject=CN=DigiCert SHA2 Secure Server CA,O=DigiCert
 Inc,C=US issuer=CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert
 Inc,C=US
 (11:52:50) nss: subject=CN=DigiCert Global Root
 CA,OU=www.digicert.com,O=DigiCert Inc,C=US issuer=CN=DigiCert Global Root
 CA,OU=www.digicert.com,O=DigiCert Inc,C=US
 (11:52:50) certificate/x509/tls_cached: Starting verify for
 exp-e.technetworks.com
 (11:52:50) certificate/x509/tls_cached: Checking for cached cert...
 (11:52:50) certificate/x509/tls_cached: ...Found cached cert
 (11:52:50) nss/x509: Loading certificate from
 /home/jmill/.purple/certificates/x509/tls_peers/exp-e.technetworks.com
 (11:52:50) certificate/x509/tls_cached: Peer cert matched cached
 (11:52:50) nss/x509: Exporting certificate to
 /home/jmill/.purple/certificates/x509/tls_peers/exp-e.technetworks.com
 (11:52:50) util: Writing file
 /home/jmill/.purple/certificates/x509/tls_peers/exp-e.technetworks.com
 (11:52:50) nss: Trusting CN=*.technetworks.com,O="Hye Tech Network &
 Security Solutions, LLC",L=Phoenix,ST=Arizona,C=US
 (11:52:50) certificate: Successfully verified certificate for
 exp-e.technetworks.com
 (11:52:50) jabber: Sending (ssl) (jmill at technetworks.com): <stream:stream
 to='technetworks.com' xmlns='jabber:client'
 xmlns:stream='http://etherx.jabber.org/streams' version='1.0'>
 (11:52:50) jabber: Recv (ssl)(183): <stream:stream xmlns='jabber:client'
 xml:lang='en-US.UTF-8' xmlns:stream='http://etherx.jabber.org/streams'
 from='technetworks.com'   id='HPsvtFGUmHIilYRIOqAKHA5678' version='1.0'>
 (11:52:50) jabber: Recv (ssl)(139): <stream:features><mechanisms
 xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><mechanism>CISCO-VTG-
 TOKEN</mechanism></mechanisms></stream:features>
 (11:52:50) sasl: Mechs found: CISCO-VTG-TOKEN
 (11:52:50) sasl: No worthy mechs found
 (11:52:50) connection: Connection error on 0x55bcbe9c6a80 (reason: 3
 description: Server does not use any supported authentication method)
 (11:52:50) jabber: jabber_actions: have pep: NO
 (11:52:50) jabber: jabber_actions: have pep: NO
 (11:52:50) account: Disconnecting account jmill at technetworks.com/
 (0x55bcbe652400)
 (11:52:50) connection: Disconnecting connection 0x55bcbe9c6a80
 (11:52:50) jabber: Sending (ssl) (jmill at technetworks.com):
 </stream:stream>
 (11:52:50) jabber: jabber_actions: have pep: NO
 (11:52:50) jabber: jabber_actions: have pep: NO
 (11:52:50) connection: Destroying connection 0x55bcbe9c6a80
 (11:52:53) util: Writing file prefs.xml to directory /home/jmill/.purple
 (11:52:53) util: Writing file /home/jmill/.purple/prefs.xml

 }}}

 Is there any other useful information I can provide to help find a
 solution?

--
Ticket URL: <https://developer.pidgin.im/ticket/16844>
Pidgin <https://pidgin.im>
Pidgin