[cisco-voip] CUCM 8.6 with AD: User appears in End users, but cannot login

[Lelio Fulgenzi]

Anything that prevents authentication would affect services. So, the few that I can think of: 

    • passwords set to expire (change on next login) 
    • accounts set to expire (calendar entry) 
    • accounts with no last name (before/after first import) 



The third really affects the ability of the LDAP sync to import the account. 

--- 
Lelio Fulgenzi, B.A. 
Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1 
(519) 824-4120 x56354 (519) 767-1060 FAX (ANNU) 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 
Cooking with unix is easy. You just sed it and forget it. 
- LFJ (with apologies to Mr. Popeil) 


----- Original Message -----
From: "Scott Voll" <svoll.voip at gmail.com> 
To: "Patrick Mowry" <pmowry at getgds.com> 
Cc: cisco-voip at puck.nether.net 
Sent: Tuesday, January 31, 2012 9:33:42 AM 
Subject: Re: [cisco-voip] CUCM 8.6 with AD: User appears in End users, but cannot login 

I don't believe AD has anything to do with it..... all the permissions are added in the end user settings in CM. 


Scott 


On Mon, Jan 30, 2012 at 12:43 PM, Patrick Mowry < pmowry at getgds.com > wrote: 


Issue resolved. Accounts were flagged as must change password @ next login and we do not have rights to log in to their machines. Clearing the flag cleared the problem. 

But if there is a list of minimum rights/attributes in AD for UC applications to log in I would still like to know. 







On Jan 30, 2012, at 1:34 PM, "Patrick Mowry" < pmowry at getgds.com > wrote: 

> Hello, 
> 
> I have a CUCM 8.6 system using Active Directory for LDAP. The customer 
> has created AD accounts for us to use for testing Ccx and CUPs. They are 
> able to log in to UC applications with their AD credentials just fine, but 
> not with the accounts created for us. Our accounts have very limited 
> rights. I'm unable to find the minimum settings in AD to allow logins to 
> work. Can you point me in the right direction? 
> 
> Once again, AD integration works for most users, but contractor accounts 
> appear in End Users, but cannot log in. 
> 
> Thanks, 
> 
> -Patrick 
> 

_______________________________________________ 
cisco-voip mailing list 
cisco-voip at puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-voip 


_______________________________________________ 
cisco-voip mailing list 
cisco-voip at puck.nether.net 
https://puck.nether.net/mailman/listinfo/cisco-voip 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20120131/57b3684d/attachment.html>