<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
When you delete the ldap integration it doesn't just delete the users, it marks them as inactive. When you recreate the integration it will re-sync the users and mark them active again. There is a cleanup agent that runs around 3AM I believe that is responsible for deleting inactive users from the database. <div><br><div><div> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">-Ryan</font></p> </div><br><div><html>On Apr 4, 2008, at 6:09 PM, Ryan West wrote:</html><br class="Apple-interchange-newline"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: 'Lucida Sans'; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div class="Section1"><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Mark,<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">There is no way, that I can see, to change the LDAP directory integration fields without deleting the old ones and recreating them. Even then, there are only three fields that can be manipulated. Those are the TN and Middle name fields. As for the deletion of users, I believe that is a batched job that occurs after a set period of time, something like a day. So it won't just delete all your users immediately. I have tested the device association part a couple of times internally and have not lost any device associtations, so I think you're okay there.<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">I verified in the admin guide for 6.0 (1) that those options exist. I'm sure the timeout value for the deletion cycle is listed there as well. Since you went through the trouble of doing LDAP synchronization, why not just authenticate your users against it too? Assuming your managing the AD and phone system, it's one less password to manage at the end of the day.<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">-ryan<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div><div style="border-right-style: none; border-bottom-style: none; border-left-style: none; border-width: initial; border-color: initial; border-top-style: solid; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding-top: 3pt; padding-right: 0in; padding-bottom: 0in; padding-left: 0in; "><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; ">From:</span></b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; "><span class="Apple-converted-space"> </span>cisco-voip-bounces@puck.nether.net [<a href="mailto:cisco-voip-bounces@puck.nether.net">mailto:cisco-voip-bounces@puck.nether.net</a>]<span class="Apple-converted-space"> </span><b>On Behalf Of<span class="Apple-converted-space"> </span></b>MILLS, Mark<br><b>Sent:</b><span class="Apple-converted-space"> </span>Friday, April 04, 2008 5:56 PM<br><b>To:</b><span class="Apple-converted-space"> </span>Ryan Ratliff<br><b>Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br><b>Subject:</b><span class="Apple-converted-space"> </span>Re: [cisco-voip] UserID when syncing via ldap.. Removing certain characters?<o:p></o:p></span></div></div></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div><p style="margin-bottom: 12pt; margin-right: 0in; margin-left: 0in; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10pt; ">Hi,<br><br>I actually thought of that, but it seems I would need to delete the current ldap directory intergration, and configure a new intergration, as you cant just change the field. I am also not sure if its possible with CM6.0.1, as I couldnt see ipPhone as an ldap attribute option in my CM 6.0.1 system?<br><br>If I do this all the current end users will be deleted. When it syncs again and the users are imported using the different ldap attribute, will CM be smart enough to recognise the users and keep the same settings, or will they need their device profiles and passwords etc reconfigured?<br><br>Thanks,<br> Mark<br><br><br><br>-----Original Message-----<br>From: Ryan Ratliff [<a href="mailto:rratliff@cisco.com" style="color: blue; text-decoration: underline; ">mailto:rratliff@cisco.com</a>]<br>Sent: Sat 4/5/2008 12:07 AM<br>To: MILLS, Mark<br>Cc: <a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>Subject: Re: [cisco-voip] UserID when syncing via ldap.. Removing certain characters?<br><br>Not that I'm aware of. Would it be possible to populate the IPPhone <br>attribute for your users with the number you wish CM to use and then <br>map that attribute instead of telephoneNumber?<br><br>-Ryan<br><br>On Apr 4, 2008, at 1:07 AM, MILLS, Mark wrote:<br><br>Hi,<br><br>We are doing Active Directory syncing for CallManager 6 users.<br><br>We use the telephoneNumber ldap attribute to map to the User ID field in<br>CCM, but in AD want to use the full international format such as<br>"+61(0)884807702" for numbers.<br><br>This is obviously a bit horrible for users to enter via their phone, is<br>there any way possible that we can have it selectively strip out the<br>+61(0) part of the number when creating the synced User ID's??? Ie, so<br>the login for the above number would actually be 884807702 ?<br><br>I have had a hunt around, and cant seem to find anything about doing<br>this, so I am assuming its not possible? :(<br><br>Thanks,<br> Mark<br>"Warning:<br>The information contained in this email and any attached files is<br>confidential to BAE Systems Australia. If you are not the intended<br>recipient, any use, disclosure or copying of this email or any<br>attachments is expressly prohibited. If you have received this email<br>in error, please notify us immediately. VIRUS: Every care has been<br>taken to ensure this email and its attachments are virus free,<br>however, any loss or damage incurred in using this email is not the<br>sender's responsibility. It is your responsibility to ensure virus<br>checks are completed before installing any data sent in this email to<br>your computer."<br><br><br>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" style="color: blue; text-decoration: underline; ">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br><br></span><o:p></o:p></p><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">"Warning:<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">The information contained in this email and any attached files is<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">confidential to BAE Systems Australia. If you are not the intended<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">recipient, any use, disclosure or copying of this email or any<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">attachments is expressly prohibited. If you have received this email<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">in error, please notify us immediately. VIRUS: Every care has been<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">taken to ensure this email and its attachments are virus free,<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">however, any loss or damage incurred in using this email is not the<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">sender's responsibility. It is your responsibility to ensure virus<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">checks are completed before installing any data sent in this email to<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; ">your computer."<o:p></o:p></pre><pre style="margin-top: 0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><o:p> </o:p></pre></div></span></div><br></div></div></body></html>