[cisco-voip] Directory Filtering question

[Ryan West]

Andrew,

I was able to use just the filter listed below, but when I use the following filter no users are matches, can you see what I might be missing.

(&(objectclass=user)(!(objectclass=Computer))(!(UserAccountControl:1.2.840.113556.1.4.803:=2))(|(ipPhone=1*)(ipPhone=2*)(ipPhone=3*)(ipPhone=4*)(ipPhone=5*)(ipPhone=6*)(ipPhone=7*)(ipPhone=8*)(ipPhone=9*)(ipPhone=0*)))

Thanks!

-ryan

-----Original Message-----
From: Andrew Short [mailto:Andrew.Short at cdw.com]
Sent: Thursday, April 17, 2008 3:56 PM
To: Ryan West; cisco-voip at puck.nether.net
Subject: RE: [cisco-voip] Directory Filtering question

I've done this and also found (ipPhone=*) to go wanting.  In our case
the customer was very good about massaging the AD data and I was able to
use this instead:

(|(ipPhone=1*)(ipPhone=2*)(ipPhone=3*)(ipPhone=4*)(ipPhone=5*)(ipPhone=6
*)(ipPhone=7*)(ipPhone=8*)(ipPhone=9*)(ipPhone=0*))

This plus the default filter almost fills your 255 char limit, but if
it's all you need it's fantastic.


-----Original Message-----
From: cisco-voip-bounces at puck.nether.net
[mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Ryan West
Sent: Thursday, April 17, 2008 3:48 PM
To: cisco-voip at puck.nether.net
Subject: [cisco-voip] Directory Filtering question

Hello,

Does anyone have an example of a filter that has been tested that looks
for an attribute, such as the ipPhone field contains data, and then
returns only those records.  This is possible using some filters that
come with Active Directory Users and Computers.  I am very close, but I
can't seem to the filter right.

Here is an ugly one that come straight from AD:

(&(&(|(&(objectCategory=person)(objectSid=*)(!samAccountType
:1.2.840.113556.1.4.804:=3))(&(objectCategory=person)(!objectSid=*))
(&(objectCategory=group)(groupType:1.2.840.113556.1.4.804:=14)))(obj
ectCategory=user)(ipPhone=*)))

A simpler version, using the information in the axltoolkit, is start
with the base configuration of:

(&(objectclass=user)(!(objectclass=Computer))(!(UserAccountControl:1.2.8
40.113556.1.4. 803:=2)))

and add (ipPhone=*) to the end to make:

(&(objectclass=user)(!(objectclass=Computer))(!(UserAccountControl:1.2.8
40.113556.1.4. 803:=2))(ipPhone=*))

This should work, however, in either of the two cases it returns the
same userlist that has some information I do want to sync.  Do I need to
wipe our my LDAP database before resyncing, or would the users (assuming
they were no longer syncing) just drop off after a period of time?

Any help on this would be greatly appriciated.


Thanks,

-ryan
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip