Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Cisco Unified Communications Manager LDAP Integration Question

Posted on 2015-01-21
6
Medium Priority
?
233 Views
Last Modified: 2015-01-21
We use CUCM 7.1 and have been integrated to AD via LDAP Sync for years. The LDAP User Search Base is specific - like this..

OU=USERS, OU=ACME, DC=COYOTE, DC=LOCAL

The Sys admins started migrating over some users to another OU in order to accommodate migration to Exchange 2013. Let's call it..

OU=EX13USERS, OU=ACME, DC=COYOTE, DC=LOCAL

The problem is that on the CIsco phone (7945G) - if I press Corporate Directory I can no longer find anyone in the EX13USERS OU 0- only those still in OU USERS.

If I tried to sync from a point higher in the tree say  OU=ACME, DC=COYOTE, DC=LOCAL - would that succeed in importing all users from all OU's below it? Or any way to sync from two or more separate specific OU's e.g.
OU=EX13USERS, OU=ACME, DC=COYOTE, DC=LOCAL  ..AND.. OU=USERS, OU=ACME, DC=COYOTE, DC=LOCAL

Thank you.
0
Comment
Question by:amigan_99
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 20

Accepted Solution

by:
José Méndez earned 2000 total points
ID: 40562623
Yes you can create 2 different LDAP directories and point each one to a different OU, although if you point directly to  OU=ACME, DC=COYOTE, DC=LOCAL (which contains EX13USERS and USERS) then Callmanager will search within the OUs inside ACME and sync those accounts.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/srnd/8x/uc8x/directry.html#wp1045381

This is not desirable if there are other OUs within ACME that do not contain telephony users. If this is the case, 2 different LDAP directories in Callmanager pointing to different OUs is the preferred method.
0
 
LVL 1

Author Closing Comment

by:amigan_99
ID: 40562633
Excellent news. Thank you again!
0
 
LVL 1

Author Comment

by:amigan_99
ID: 40562643
Say a a follow-on if I may..

If I create another LDAP Directory (System/LDAP/LDAP Dir) for syncing - should I also create another
LDAP Authentication (System/LDAP/LDAP Authentication) instance as well? The current LDAP Auth specifies the same LDAP User Search Base as the LDAP Directory entry.
0
Eye-catchers on the conference table

Challenge: The i-unit group was not satisfied with the audio quality during remote meetings. They were looking for a portable solution with excellent audio quality for use in their conference room but also at their client’s offices.

 
LVL 20

Expert Comment

by:José Méndez
ID: 40562705
You can only have 1 LDAP authentication agreement, that one should point to a DC that knows how to authenticate any user/password passed to Callmanager. In your case, point it to the upper OU that contains the affected inner OUs.
0
 
LVL 1

Author Comment

by:amigan_99
ID: 40562721
Cool - thanks again.
0
 
LVL 20

Expert Comment

by:José Méndez
ID: 40562741
Welcome mate
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The point of this post is to give you a copy/paste installation solution to setting up Asterisk 1.6 on Ubuntu 9.04 (or similar) server. # Setup the system apt-get install subversion apt-get install make apt-get install linux-source kernel-p…
There are no good configuration guides for HP-H3C router to LYNC on the web. :( Big statement, but we havent been able to find one yet. We did find the following document useful, but the information was not enough to use H3C router for use as a L…
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
In response to a need for security and privacy, and to continue fostering an environment members can turn to for support, solutions, and education, Experts Exchange has created anonymous question capabilities. This new feature is available to our Pr…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question