[cisco-voip] Unity Connection , LDAP User Integration for existing

[Pawlowski, Adam]

Good morning all,

	I have a question about consistent behavior between Unity Connection and the UCM when it comes to LDAP integration. When DirSync runs on the UCM, it will pick up any users that have the same userID as the sync'd object's mapped attribute. This works pretty well, especially if I hit the sync off-cycle while our identity management system is re-populating group assignments. A user who drops out of sync will be recovered on the next pass. Unity Connection doesn't seem to work the same way. Users who de-sync (we use a unix group to manage appointments, so transient people who are re-appointed sometimes drop off that group, and back in) stay desynced.

	Right now I've written a convoluted script to poll users from the UnityDirDB who are not synchronized, validate their group membership against LDAP, then use CUPI to set their status back to synchronized to clean this up. Is there a better way?

Regards,

Adam Pawlowski
Network Analyst
University at Buffalo