[cisco-voip] ccmuser password and PIN migrate from Ver 4.1 to 7.1

[Ryan Ratliff]

If you are currently integrated with AD for ldap then there is no need to migrate passwords as CUCM doesn't know about them to begin with.  Your current ldap authentication is done by AD, and if you configure it post-upgrade the same AD will doing authentication then.

The only time you would need to set default passwords for your users if you don't want to do ldap sync or auth in 7.x.  

-Ryan

On Mar 15, 2010, at 11:10 AM, Manoj Kalpage wrote:

Thanks Ryan,
 
This means, As DMA tool doesn't migrate AD password information. If I want to have existing password, only solution is to continue using current AD server???
 
So, I don't have much choice except setup one intitial password for all ccmusers and send it to all employee DL but our security  folks don't like it.
I don't think it is practical to create 4,000 different initial passwords for each users and send them seperatley by using 4,000 e-mails.
 

 
On Mon, Mar 15, 2010 at 11:58 PM, Ryan Ratliff <rratliff at cisco.com> wrote:
It is pretty trivial in CUCM 7 to disable the ldap authentication.  The big issue for your uses will be the lack of password sync from AD to CUCM so when you disable ldap auth their old passwords will not work.

-Ryan

On Mar 15, 2010, at 10:53 AM, Manoj Kalpage wrote:

Adam,
George,
 
Thank you for the reply. We have dedicated Exchange+AD server for CUCM cluster and Unity but as we moving to Unity connection 7.1 we will decommissioning our AD server. is there any way I can temporary use AD for LDAP authentication and decommission it later?
 
Regards,
MK 

On Mon, Mar 15, 2010 at 11:34 PM, <george.hendrix at l-3com.com> wrote:
I’m pretty sure you will also have to sever the AD integration on the 4.1 cluster prior to migration.

 
As Adam said, the User PIN and password at set the same for each user during CUCM 7.1 installation.  The link below covers post installation tasks regarding active directory integration.

 
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/upgrade/7_1_2/upgrd712.html

 
 
Bill Hendrix

<image001.jpg>

george.hendrix at l-3com.com

W: 813-281-3109  C: 813-205-0979

STRATIS Service Desk: 1-800-871-9983

 
From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Adam Frankel
Sent: Monday, March 15, 2010 10:06 AM
To: Manoj Kalpage
Cc: Cisco Voip
Subject: Re: [cisco-voip] ccmuser password and PIN migrate from Ver 4.1 to 7.1

 
In CUCM 7.x when you configure the LDAP Authentication portion, the CUCM will be sending Authentication requests to your AD, so the password will still be coming from AD.

The PIN will get updated to a set number during the installation of 7.x

Regards,


Adam 



------------Original Message--------------
From: Manoj Kalpage <manoj.kalpage at gmail.com>
Sent: Mon, Mar 15, 2010 9:59:19 Am
To: Cisco Voip <cisco-voip at puck.nether.net>
CC: 
Subject: [cisco-voip] ccmuser password and PIN migrate from Ver 4.1 to 7.1

Hi All,

We have CUCM 4.1 with Active directory integration and ccmuser password manage in active directory. My consultant said that we cannot migrate ccmuser password and PIN to Ver 7.1. We found that DMA tool doesn't carry ccmuser and PIN information to Ver 7.1. Just wondering whether there is any workaround for this.

-- 
Best Regards,
MK


 


 
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip
  



-- 
Best Regards,
Manoj
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip




-- 
Best Regards,
Manoj

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20100316/2b67e8aa/attachment.html>