[cisco-voip] CUCM LDAP Integration

[Bill Riley]

Do you agents not have windows accounts anyway? 

 

From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Fuermann, Jason
Sent: Thursday, March 17, 2011 11:16 AM
To: 'Lelio Fulgenzi'
Cc: cisco-voip at puck.nether.net
Subject: Re: [cisco-voip] CUCM LDAP Integration

 

Yea, didn’t think about IPCC agents. I also pretty sure that if you have LDAP auth on then all end users have to auth through ldap, so no local passwords for those guys. 

 

From: Lelio Fulgenzi [mailto:lelio at uoguelph.ca] 
Sent: Thursday, March 17, 2011 10:53 AM
To: Fuermann, Jason
Cc: cisco-voip at puck.nether.net; Ryan Schwab
Subject: Re: [cisco-voip] CUCM LDAP Integration

 

Thanks. Having to disable/enable seems like a bit of work. Well, not so much work as it is turning off/on a system service that could cause issues.

As far as I know, you can't use app users for everything, like IPCC phone agents.



---
Lelio Fulgenzi, B.A.
Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1
(519) 824-4120 x56354 (519) 767-1060 FAX (JNHN)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Cooking with unix is easy. You just sed it and forget it. 
                              - LFJ (with apologies to Mr. Popeil)

  _____  

From: "Jason Fuermann" <jason.f at shsu.edu>
To: "Lelio Fulgenzi" <lelio at uoguelph.ca>, "Ryan Schwab" <schwaby81 at shaw.ca>
Cc: cisco-voip at puck.nether.net
Sent: Thursday, March 17, 2011 11:44:47 AM
Subject: RE: [cisco-voip] CUCM LDAP Integration



On  7.0.2, you can enable auth and not sync, and your users will never get marked for deletion. A caveat to that is you have to disable auth to add/remove users from end users. You can always create application users if you don’t want them to auth from ldap though

 

From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Lelio Fulgenzi
Sent: Tuesday, March 15, 2011 2:24 PM
To: Ryan Schwab
Cc: cisco-voip at puck.nether.net
Subject: Re: [cisco-voip] CUCM LDAP Integration

 

I know I can test this, but I'm just wondering if you can enable LDAP authentication without LDAP synchronization. I'd like to be able to create local user accounts and choose between local password or LDAP password. This is something that many systems allow, just wondering if there is a workaround. 


Sent from my iPhone


On Mar 15, 2011, at 1:30 PM, "Ryan Schwab" <schwaby81 at shaw.ca> wrote:

Hi Tim,

 

Once LDAP integration is turned on in CUCM, it will “replace” your current end users. If the userID of your CUCM end user is an exact match of the LDAP userID, it will keep this user and associated settings in place. All other users will be marked for removal. I believe the “purge” period is every 24 hours.

 

Improved in CUCM 8x is LDAP filters which allows you to sync LDAP users based on defined criteria (ex: only users with ipPhone field populated).

 

I believe the CUCM SRND explains this the best. If you have a test environment, try it there first.

 

Hope that helps.

 

-Ryan Schwab 

 

From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of H, Tim
Sent: March-15-11 11:20 AM
To: cisco-voip at puck.nether.net
Subject: [cisco-voip] CUCM LDAP Integration

 

All,

 

We're looking at changing our CUCM environment to include LDAP authentication.  Does this mean all of our current users go away and it imports all users from AD?  I'm specifically looking at problems we could potentially have with this. We're running CUCM 7.15 and UCCX 7.01.

 

Any help/documentation you all know if is appreciated.

 

Thanks,

Tim

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20110317/19330c88/attachment.html>