[cisco-voip] CUCM requirements for AD account import - anything else other than SN=* (non-empty) ?

[Lelio Fulgenzi]

OK. My reconcile was off by more…. The numbers were off by one.

This stems from getting errors from unity trying to sync more than one account with the same email address. We have a process issue that needs to be corrected, but it takes time each time this crops up.

When I searched for the two problem accounts in CUCM, they didn’t exist at all. So CUCM doesn’t seem to throw an error, it just ignores it.

*scratches head*

Going to go ahead with the filter as is on CUCM and see the results, then apply to Unity. (all in dev servers first).

Wish me luck!

From: Anthony Holloway <avholloway+cisco-voip at gmail.com>
Sent: Thursday, January 30, 2020 5:08 PM
To: Lelio Fulgenzi <lelio at uoguelph.ca>
Cc: voyp list, cisco-voip (cisco-voip at puck.nether.net) <cisco-voip at puck.nether.net>
Subject: Re: [cisco-voip] CUCM requirements for AD account import - anything else other than SN=* (non-empty) ?

I think you understand it correctly.  Unless we're both wrong.

Are you using the same filter in both CUCM as the LDAP browser (can you share it?)?  Same search base?  Same user to BIND with?  Same AD or GC server?  Same Port?  Same TLS setting?

Do you know which user account is the anomaly?

On Thu, Jan 30, 2020 at 3:34 PM Lelio Fulgenzi <lelio at uoguelph.ca<mailto:lelio at uoguelph.ca>> wrote:

OK - I'm trying to reconcile accounts being imported into CUCM before I modify the filter we're using.

I've used the base filter suggested, plus I've added the (sn=*) to ensure we get only accounts with non-empty last names.

However, my reconciliation is off by 1 (including taking into account inactive LDAP accounts).

CUCM: 86,636
LDAP Browser: 86,637

I could just write it off as an anomaly, but I've sync'ed multiple times and ran the LDAP search multiple times, and I'm pretty sure no one is making changes.

Anyone aware of any other criteria CUCM puts on to the import process?
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
https://puck.nether.net/mailman/listinfo/cisco-voip
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20200130/0b803ef0/attachment.htm>