[cisco-voip] CUCM LDAP Integration

[Lelio Fulgenzi]

no, we're using shared generic accounts. 

--- 
Lelio Fulgenzi, B.A. 
Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1 
(519) 824-4120 x56354 (519) 767-1060 FAX (JNHN) 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 
Cooking with unix is easy. You just sed it and forget it. 
- LFJ (with apologies to Mr. Popeil) 


----- Original Message -----
From: "Bill Riley" <bill at hitechconnection.net> 
To: "Jason' 'Fuermann" <jason.f at shsu.edu>, "Lelio Fulgenzi" <lelio at uoguelph.ca> 
Cc: cisco-voip at puck.nether.net 
Sent: Thursday, March 17, 2011 1:11:14 PM 
Subject: RE: [cisco-voip] CUCM LDAP Integration 




Do you agents not have windows accounts anyway? 





From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Fuermann, Jason 
Sent: Thursday, March 17, 2011 11:16 AM 
To: 'Lelio Fulgenzi' 
Cc: cisco-voip at puck.nether.net 
Subject: Re: [cisco-voip] CUCM LDAP Integration 



Yea, didn’t think about IPCC agents. I also pretty sure that if you have LDAP auth on then all end users have to auth through ldap, so no local passwords for those guys. 





From: Lelio Fulgenzi [mailto:lelio at uoguelph.ca] 
Sent: Thursday, March 17, 2011 10:53 AM 
To: Fuermann, Jason 
Cc: cisco-voip at puck.nether.net; Ryan Schwab 
Subject: Re: [cisco-voip] CUCM LDAP Integration 




Thanks. Having to disable/enable seems like a bit of work. Well, not so much work as it is turning off/on a system service that could cause issues. 

As far as I know, you can't use app users for everything, like IPCC phone agents. 



--- 
Lelio Fulgenzi, B.A. 
Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1 
(519) 824-4120 x56354 (519) 767-1060 FAX (JNHN) 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 
Cooking with unix is easy. You just sed it and forget it. 
- LFJ (with apologies to Mr. Popeil) 



From: "Jason Fuermann" <jason.f at shsu.edu> 
To: "Lelio Fulgenzi" <lelio at uoguelph.ca>, "Ryan Schwab" <schwaby81 at shaw.ca> 
Cc: cisco-voip at puck.nether.net 
Sent: Thursday, March 17, 2011 11:44:47 AM 
Subject: RE: [cisco-voip] CUCM LDAP Integration 



On 7.0.2, you can enable auth and not sync, and your users will never get marked for deletion. A caveat to that is you have to disable auth to add/remove users from end users. You can always create application users if you don’t want them to auth from ldap though 





From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of Lelio Fulgenzi 
Sent: Tuesday, March 15, 2011 2:24 PM 
To: Ryan Schwab 
Cc: cisco-voip at puck.nether.net 
Subject: Re: [cisco-voip] CUCM LDAP Integration 




I know I can test this, but I'm just wondering if you can enable LDAP authentication without LDAP synchronization. I'd like to be able to create local user accounts and choose between local password or LDAP password. This is something that many systems allow, just wondering if there is a workaround. 



Sent from my iPhone 



On Mar 15, 2011, at 1:30 PM, "Ryan Schwab" < schwaby81 at shaw.ca > wrote: 





Hi Tim, 



Once LDAP integration is turned on in CUCM, it will “replace” your current end users. If the userID of your CUCM end user is an exact match of the LDAP userID, it will keep this user and associated settings in place. All other users will be marked for removal. I believe the “purge” period is every 24 hours. 



Improved in CUCM 8x is LDAP filters which allows you to sync LDAP users based on defined criteria (ex: only users with ipPhone field populated). 



I believe the CUCM SRND explains this the best. If you have a test environment, try it there first. 



Hope that helps. 



-Ryan Schwab 





From: cisco-voip-bounces at puck.nether.net [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of H, Tim 
Sent: March-15-11 11:20 AM 
To: cisco-voip at puck.nether.net 
Subject: [cisco-voip] CUCM LDAP Integration 



All, 



We're looking at changing our CUCM environment to include LDAP authentication. Does this mean all of our current users go away and it imports all users from AD? I'm specifically looking at problems we could potentially have with this. We're running CUCM 7.15 and UCCX 7.01. 



Any help/documentation you all know if is appreciated. 



Thanks, 

Tim 




_______________________________________________ 
cisco-voip mailing list 
cisco-voip at puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20110317/36d23241/attachment.html>