[cisco-voip] Directory Filtering question

[Ryan West]

Hello,

Does anyone have an example of a filter that has been tested that looks for an attribute, such as the ipPhone field contains data, and then returns only those records.  This is possible using some filters that come with Active Directory Users and Computers.  I am very close, but I can't seem to the filter right.

Here is an ugly one that come straight from AD:

(&(&(|(&(objectCategory=person)(objectSid=*)(!samAccountType:1.2.840.113556.1.4.804:=3))(&(objectCategory=person)(!objectSid=*))(&(objectCategory=group)(groupType:1.2.840.113556.1.4.804:=14)))(objectCategory=user)(ipPhone=*)))

A simpler version, using the information in the axltoolkit, is start with the base configuration of:

(&(objectclass=user)(!(objectclass=Computer))(!(UserAccountControl:1.2.840.113556.1.4. 803:=2)))

and add (ipPhone=*) to the end to make:

(&(objectclass=user)(!(objectclass=Computer))(!(UserAccountControl:1.2.840.113556.1.4. 803:=2))(ipPhone=*))

This should work, however, in either of the two cases it returns the same userlist that has some information I do want to sync.  Do I need to wipe our my LDAP database before resyncing, or would the users (assuming they were no longer syncing) just drop off after a period of time?

Any help on this would be greatly appriciated.


Thanks,

-ryan