Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Cisco Unified Communications Manager LDAP Integration Question

Posted on 2015-01-21
6
Medium Priority
?
235 Views
Last Modified: 2015-01-21
We use CUCM 7.1 and have been integrated to AD via LDAP Sync for years. The LDAP User Search Base is specific - like this..

OU=USERS, OU=ACME, DC=COYOTE, DC=LOCAL

The Sys admins started migrating over some users to another OU in order to accommodate migration to Exchange 2013. Let's call it..

OU=EX13USERS, OU=ACME, DC=COYOTE, DC=LOCAL

The problem is that on the CIsco phone (7945G) - if I press Corporate Directory I can no longer find anyone in the EX13USERS OU 0- only those still in OU USERS.

If I tried to sync from a point higher in the tree say  OU=ACME, DC=COYOTE, DC=LOCAL - would that succeed in importing all users from all OU's below it? Or any way to sync from two or more separate specific OU's e.g.
OU=EX13USERS, OU=ACME, DC=COYOTE, DC=LOCAL  ..AND.. OU=USERS, OU=ACME, DC=COYOTE, DC=LOCAL

Thank you.
0
Comment
Question by:amigan_99
  • 3
  • 3
6 Comments
 
LVL 20

Accepted Solution

by:
José Méndez earned 2000 total points
ID: 40562623
Yes you can create 2 different LDAP directories and point each one to a different OU, although if you point directly to  OU=ACME, DC=COYOTE, DC=LOCAL (which contains EX13USERS and USERS) then Callmanager will search within the OUs inside ACME and sync those accounts.

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/srnd/8x/uc8x/directry.html#wp1045381

This is not desirable if there are other OUs within ACME that do not contain telephony users. If this is the case, 2 different LDAP directories in Callmanager pointing to different OUs is the preferred method.
0
 
LVL 1

Author Closing Comment

by:amigan_99
ID: 40562633
Excellent news. Thank you again!
0
 
LVL 1

Author Comment

by:amigan_99
ID: 40562643
Say a a follow-on if I may..

If I create another LDAP Directory (System/LDAP/LDAP Dir) for syncing - should I also create another
LDAP Authentication (System/LDAP/LDAP Authentication) instance as well? The current LDAP Auth specifies the same LDAP User Search Base as the LDAP Directory entry.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 20

Expert Comment

by:José Méndez
ID: 40562705
You can only have 1 LDAP authentication agreement, that one should point to a DC that knows how to authenticate any user/password passed to Callmanager. In your case, point it to the upper OU that contains the affected inner OUs.
0
 
LVL 1

Author Comment

by:amigan_99
ID: 40562721
Cool - thanks again.
0
 
LVL 20

Expert Comment

by:José Méndez
ID: 40562741
Welcome mate
0

Featured Post

Learn Veeam advantages over legacy backup

Every day, more and more legacy backup customers switch to Veeam. Technologies designed for the client-server era cannot restore any IT service running in the hybrid cloud within seconds. Learn top Veeam advantages over legacy backup and get Veeam for the price of your renewal

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The point of this post is to give you a copy/paste installation solution to setting up Asterisk 1.6 on Ubuntu 9.04 (or similar) server. # Setup the system apt-get install subversion apt-get install make apt-get install linux-source kernel-p…
Hey there Heard about jingle, the add on for XMPP that enables point to point audio between two XMPP clients. No server config necessary. Actually quite a cool feature. However, how good is it if you can not use those voice capabilities to do a P…
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
Want to learn how to record your desktop screen without having to use an outside camera. Click on this video and learn how to use the cool google extension called "Screencastify"! Step 1: Open a new google tab Step 2: Go to the left hand upper corn…
Suggested Courses

876 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question