<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"Lucida Sans";
panose-1:2 11 6 2 3 5 4 2 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
pre
{mso-style-priority:99;
mso-style-link:"Preformattato HTML Carattere";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.apple-style-span
{mso-style-name:apple-style-span;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.PreformattatoHTMLCarattere
{mso-style-name:"Preformattato HTML Carattere";
mso-style-priority:99;
mso-style-link:"Preformattato HTML";
font-family:Consolas;}
span.StileMessaggioDiPostaElettronica22
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:612.0pt 792.0pt;
margin:70.85pt 2.0cm 2.0cm 2.0cm;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=IT link=blue vlink=purple style='word-wrap: break-word;-webkit-nbsp-mode: space;
-webkit-line-break: after-white-space'>
<div class=Section1>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Hi everyone. About LDAP Sync, i sit possible to sync AD user
password too? Or password must be set independently on the CUCM?<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Thank you very much.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Alessandro Bertacco<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Segoe UI","sans-serif"'>Da:</span></b><span
style='font-size:10.0pt;font-family:"Segoe UI","sans-serif"'>
cisco-voip-bounces@puck.nether.net [mailto:cisco-voip-bounces@puck.nether.net] <b>Per
conto di </b>Ryan Ratliff<br>
<b>Inviato:</b> luned́ 7 aprile 2008 15.25<br>
<b>A:</b> Ryan West<br>
<b>Cc:</b> cisco-voip@puck.nether.net<br>
<b>Oggetto:</b> Re: [cisco-voip] UserID when syncing via ldap.. Removing
certain characters?<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>When you delete the ldap integration it doesn't just delete
the users, it marks them as inactive. When you recreate the integration
it will re-sync the users and mark them active again. There is a cleanup
agent that runs around 3AM I believe that is responsible for deleting inactive
users from the database. <o:p></o:p></p>
<div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<div>
<p style='margin:0cm;margin-bottom:.0001pt'><span style='font-size:9.0pt;
font-family:"Helvetica","sans-serif"'>-Ryan</span><o:p></o:p></p>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<div>
<p class=MsoNormal>On Apr 4, 2008, at 6:09 PM, Ryan West wrote:<o:p></o:p></p>
<p class=MsoNormal><br>
<br>
<span class=apple-style-span><span style='font-size:9.0pt;font-family:"Lucida Sans","sans-serif";
color:black'><o:p></o:p></span></span></p>
<div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Mark,</span><o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span style='color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>There is no way, that I can see, to change the LDAP directory
integration fields without deleting the old ones and recreating them.
Even then, there are only three fields that can be manipulated. Those are
the TN and Middle name fields. As for the deletion of users, I believe
that is a batched job that occurs after a set period of time, something like a
day. So it won't just delete all your users immediately. I have
tested the device association part a couple of times internally and have not
lost any device associtations, so I think you're okay there.</span><span
style='color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span style='color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>I verified in the admin guide for 6.0 (1) that those options
exist. I'm sure the timeout value for the deletion cycle is listed there
as well. Since you went through the trouble of doing LDAP synchronization,
why not just authenticate your users against it too? Assuming your
managing the AD and phone system, it's one less password to manage at the end
of the day.</span><span style='color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span style='color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>-ryan</span><span style='color:black'><o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'> </span><span style='color:black'><o:p></o:p></span></p>
</div>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm;
border-width:initial;border-color:initial'>
<div>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";
color:black'>From:</span></b><span class=apple-converted-space><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'> </span></span><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'>cisco-voip-bounces@puck.nether.net
[<a href="mailto:cisco-voip-bounces@puck.nether.net">mailto:cisco-voip-bounces@puck.nether.net</a>]<span
class=apple-converted-space> </span><b>On Behalf Of<span
class=apple-converted-space> </span></b>MILLS, Mark<br>
<b>Sent:</b><span class=apple-converted-space> </span>Friday, April 04,
2008 5:56 PM<br>
<b>To:</b><span class=apple-converted-space> </span>Ryan Ratliff<br>
<b>Cc:</b><span class=apple-converted-space> </span><a
href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b><span class=apple-converted-space> </span>Re: [cisco-voip]
UserID when syncing via ldap.. Removing certain characters?</span><span
style='color:black'><o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p>
</div>
<div>
<p class=MsoNormal><span style='color:black'> <o:p></o:p></span></p>
</div>
<p style='margin-bottom:12.0pt'><span style='font-size:10.0pt;color:black'>Hi,<br>
<br>
I actually thought of that, but it seems I would need to delete the current
ldap directory intergration, and configure a new intergration, as you cant just
change the field. I am also not sure if its possible with CM6.0.1, as I
couldnt see ipPhone as an ldap attribute option in my CM 6.0.1 system?<br>
<br>
If I do this all the current end users will be deleted. When it syncs again and
the users are imported using the different ldap attribute, will CM be smart
enough to recognise the users and keep the same settings, or will they need
their device profiles and passwords etc reconfigured?<br>
<br>
Thanks,<br>
Mark<br>
<br>
<br>
<br>
-----Original Message-----<br>
From: Ryan Ratliff [<a href="mailto:rratliff@cisco.com">mailto:rratliff@cisco.com</a>]<br>
Sent: Sat 4/5/2008 12:07 AM<br>
To: MILLS, Mark<br>
Cc: <a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
Subject: Re: [cisco-voip] UserID when syncing via ldap.. Removing certain
characters?<br>
<br>
Not that I'm aware of. Would it be possible to populate the IPPhone <br>
attribute for your users with the number you wish CM to use and then <br>
map that attribute instead of telephoneNumber?<br>
<br>
-Ryan<br>
<br>
On Apr 4, 2008, at 1:07 AM, MILLS, Mark wrote:<br>
<br>
Hi,<br>
<br>
We are doing Active Directory syncing for CallManager 6 users.<br>
<br>
We use the telephoneNumber ldap attribute to map to the User ID field in<br>
CCM, but in AD want to use the full international format such as<br>
"+61(0)884807702" for numbers.<br>
<br>
This is obviously a bit horrible for users to enter via their phone, is<br>
there any way possible that we can have it selectively strip out the<br>
+61(0) part of the number when creating the synced User ID's??? Ie,
so<br>
the login for the above number would actually be 884807702 ?<br>
<br>
I have had a hunt around, and cant seem to find anything about doing<br>
this, so I am assuming its not possible? :(<br>
<br>
Thanks,<br>
Mark<br>
"Warning:<br>
The information contained in this email and any attached files is<br>
confidential to BAE Systems Australia. If you are not the intended<br>
recipient, any use, disclosure or copying of this email or any<br>
attachments is expressly prohibited. If you have received this email<br>
in error, please notify us immediately. VIRUS: Every care has been<br>
taken to ensure this email and its attachments are virus free,<br>
however, any loss or damage incurred in using this email is not the<br>
sender's responsibility. It is your responsibility to ensure virus<br>
checks are completed before installing any data sent in this email to<br>
your computer."<br>
<br>
<br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br>
<br>
</span><span style='color:black'><o:p></o:p></span></p>
<pre><span style='color:black'>"Warning:<o:p></o:p></span></pre><pre><span
style='color:black'>The information contained in this email and any attached files is<o:p></o:p></span></pre><pre><span
style='color:black'>confidential to BAE Systems Australia. If you are not the intended<o:p></o:p></span></pre><pre><span
style='color:black'>recipient, any use, disclosure or copying of this email or any<o:p></o:p></span></pre><pre><span
style='color:black'>attachments is expressly prohibited. If you have received this email<o:p></o:p></span></pre><pre><span
style='color:black'>in error, please notify us immediately. VIRUS: Every care has been<o:p></o:p></span></pre><pre><span
style='color:black'>taken to ensure this email and its attachments are virus free,<o:p></o:p></span></pre><pre><span
style='color:black'>however, any loss or damage incurred in using this email is not the<o:p></o:p></span></pre><pre><span
style='color:black'>sender's responsibility. It is your responsibility to ensure virus<o:p></o:p></span></pre><pre><span
style='color:black'>checks are completed before installing any data sent in this email to<o:p></o:p></span></pre><pre><span
style='color:black'>your computer."<o:p></o:p></span></pre><pre><span
style='color:black'> <o:p></o:p></span></pre></div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</div>
</div>
</body>
</html>