<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
The password is not sync'd, but you can configure LDAP Authentication which will pass off all authentication to AD. I believe CM will store a hash of the password locally but not the actual password itself.<div><br><div> <p style="margin: 0.0px 0.0px 0.0px 0.0px"><font face="Helvetica" size="3" style="font: 12.0px Helvetica">-Ryan</font></p> </div><br><div><html>On Apr 9, 2008, at 5:52 AM, Alessandro Bertacco wrote:</html><br class="Apple-interchange-newline"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: 'Lucida Sans'; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div class="Section1"><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Hi everyone. About LDAP Sync, i sit possible to sync AD user password too? Or password must be set independently on the CUCM?<o:p></o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Thank you very much.<o:p></o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Alessandro Bertacco<o:p></o:p></span></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span lang="EN-US" style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "><o:p> </o:p></span></div><div><div style="border-right-style: none; border-bottom-style: none; border-left-style: none; border-width: initial; border-color: initial; border-top-style: solid; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; padding-top: 3pt; padding-right: 0cm; padding-bottom: 0cm; padding-left: 0cm; "><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 10pt; font-family: 'Segoe UI', sans-serif; ">Da:</span></b><span style="font-size: 10pt; font-family: 'Segoe UI', sans-serif; "><span class="Apple-converted-space"> </span>cisco-voip-bounces@puck.nether.net [<a href="mailto:cisco-voip-bounces@puck.nether.net">mailto:cisco-voip-bounces@puck.nether.net</a>]<span class="Apple-converted-space"> </span><b>Per conto di<span class="Apple-converted-space"> </span></b>Ryan Ratliff<br><b>Inviato:</b><span class="Apple-converted-space"> </span>lunedì 7 aprile 2008 15.25<br><b>A:</b><span class="Apple-converted-space"> </span>Ryan West<br><b>Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br><b>Oggetto:</b><span class="Apple-converted-space"> </span>Re: [cisco-voip] UserID when syncing via ldap.. Removing certain characters?<o:p></o:p></span></div></div></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">When you delete the ldap integration it doesn't just delete the users, it marks them as inactive. When you recreate the integration it will re-sync the users and mark them active again. There is a cleanup agent that runs around 3AM I believe that is responsible for deleting inactive users from the database. <o:p></o:p></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div><div><div><div style="margin-top: 0cm; margin-bottom: 0.0001pt; margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 9pt; font-family: Helvetica, sans-serif; ">-Ryan</span><o:p></o:p></div></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; ">On Apr 4, 2008, at 6:09 PM, Ryan West wrote:<o:p></o:p></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><br><br><span class="apple-style-span"><span style="font-size: 9pt; font-family: 'Lucida Sans', sans-serif; color: black; "><o:p></o:p></span></span></div><div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">Mark,</span><o:p></o:p></div></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "> </span><span style="color: black; "><o:p></o:p></span></div></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">There is no way, that I can see, to change the LDAP directory integration fields without deleting the old ones and recreating them. Even then, there are only three fields that can be manipulated. Those are the TN and Middle name fields. As for the deletion of users, I believe that is a batched job that occurs after a set period of time, something like a day. So it won't just delete all your users immediately. I have tested the device association part a couple of times internally and have not lost any device associtations, so I think you're okay there.</span><span style="color: black; "><o:p></o:p></span></div></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "> </span><span style="color: black; "><o:p></o:p></span></div></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">I verified in the admin guide for 6.0 (1) that those options exist. I'm sure the timeout value for the deletion cycle is listed there as well. Since you went through the trouble of doing LDAP synchronization, why not just authenticate your users against it too? Assuming your managing the AD and phone system, it's one less password to manage at the end of the day.</span><span style="color: black; "><o:p></o:p></span></div></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "> </span><span style="color: black; "><o:p></o:p></span></div></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); ">-ryan</span><span style="color: black; "><o:p></o:p></span></div></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 11pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125); "> </span><span style="color: black; "><o:p></o:p></span></div></div><div><div style="border-right-style: none; border-bottom-style: none; border-left-style: none; border-width: initial; border-color: initial; border-top-style: solid; padding-top: 3pt; padding-right: 0cm; padding-bottom: 0cm; padding-left: 0cm; border-width: initial; border-color: initial; "><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; color: black; ">From:</span></b><span class="apple-converted-space"><span style="font-size: 10pt; font-family: Tahoma, sans-serif; color: black; "> </span></span><span style="font-size: 10pt; font-family: Tahoma, sans-serif; color: black; "><a href="mailto:cisco-voip-bounces@puck.nether.net">cisco-voip-bounces@puck.nether.net</a> [<a href="mailto:cisco-voip-bounces@puck.nether.net" style="color: blue; text-decoration: underline; ">mailto:cisco-voip-bounces@puck.nether.net</a>]<span class="apple-converted-space"> </span><b>On Behalf Of<span class="apple-converted-space"> </span></b>MILLS, Mark<br><b>Sent:</b><span class="apple-converted-space"> </span>Friday, April 04, 2008 5:56 PM<br><b>To:</b><span class="apple-converted-space"> </span>Ryan Ratliff<br><b>Cc:</b><span class="apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline; ">cisco-voip@puck.nether.net</a><br><b>Subject:</b><span class="apple-converted-space"> </span>Re: [cisco-voip] UserID when syncing via ldap.. Removing certain characters?</span><span style="color: black; "><o:p></o:p></span></div></div></div></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="color: black; "> <o:p></o:p></span></div></div><div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="color: black; "> <o:p></o:p></span></div></div><p style="margin-bottom: 12pt; margin-right: 0cm; margin-left: 0cm; font-size: 12pt; font-family: 'Times New Roman', serif; "><span style="font-size: 10pt; color: black; ">Hi,<br><br>I actually thought of that, but it seems I would need to delete the current ldap directory intergration, and configure a new intergration, as you cant just change the field. I am also not sure if its possible with CM6.0.1, as I couldnt see ipPhone as an ldap attribute option in my CM 6.0.1 system?<br><br>If I do this all the current end users will be deleted. When it syncs again and the users are imported using the different ldap attribute, will CM be smart enough to recognise the users and keep the same settings, or will they need their device profiles and passwords etc reconfigured?<br><br>Thanks,<br> Mark<br><br><br><br>-----Original Message-----<br>From: Ryan Ratliff [<a href="mailto:rratliff@cisco.com" style="color: blue; text-decoration: underline; ">mailto:rratliff@cisco.com</a>]<br>Sent: Sat 4/5/2008 12:07 AM<br>To: MILLS, Mark<br>Cc:<span class="Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline; ">cisco-voip@puck.nether.net</a><br>Subject: Re: [cisco-voip] UserID when syncing via ldap.. Removing certain characters?<br><br>Not that I'm aware of. Would it be possible to populate the IPPhone <br>attribute for your users with the number you wish CM to use and then <br>map that attribute instead of telephoneNumber?<br><br>-Ryan<br><br>On Apr 4, 2008, at 1:07 AM, MILLS, Mark wrote:<br><br>Hi,<br><br>We are doing Active Directory syncing for CallManager 6 users.<br><br>We use the telephoneNumber ldap attribute to map to the User ID field in<br>CCM, but in AD want to use the full international format such as<br>"+61(0)884807702" for numbers.<br><br>This is obviously a bit horrible for users to enter via their phone, is<br>there any way possible that we can have it selectively strip out the<br>+61(0) part of the number when creating the synced User ID's??? Ie, so<br>the login for the above number would actually be 884807702 ?<br><br>I have had a hunt around, and cant seem to find anything about doing<br>this, so I am assuming its not possible? :(<br><br>Thanks,<br> Mark<br>"Warning:<br>The information contained in this email and any attached files is<br>confidential to BAE Systems Australia. If you are not the intended<br>recipient, any use, disclosure or copying of this email or any<br>attachments is expressly prohibited. If you have received this email<br>in error, please notify us immediately. VIRUS: Every care has been<br>taken to ensure this email and its attachments are virus free,<br>however, any loss or damage incurred in using this email is not the<br>sender's responsibility. It is your responsibility to ensure virus<br>checks are completed before installing any data sent in this email to<br>your computer."<br><br><br>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline; ">cisco-voip@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" style="color: blue; text-decoration: underline; ">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br><br><br></span><span style="color: black; "><o:p></o:p></span></p><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; ">"Warning:<o:p></o:p></span></pre><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; ">The information contained in this email and any attached files is<o:p></o:p></span></pre><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; ">confidential to BAE Systems Australia. If you are not the intended<o:p></o:p></span></pre><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; ">recipient, any use, disclosure or copying of this email or any<o:p></o:p></span></pre><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; ">attachments is expressly prohibited. If you have received this email<o:p></o:p></span></pre><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; ">in error, please notify us immediately. VIRUS: Every care has been<o:p></o:p></span></pre><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; ">taken to ensure this email and its attachments are virus free,<o:p></o:p></span></pre><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; ">however, any loss or damage incurred in using this email is not the<o:p></o:p></span></pre><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; ">sender's responsibility. It is your responsibility to ensure virus<o:p></o:p></span></pre><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; ">checks are completed before installing any data sent in this email to<o:p></o:p></span></pre><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; ">your computer."<o:p></o:p></span></pre><pre style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 10pt; font-family: 'Courier New'; "><span style="color: black; "> <o:p></o:p></span></pre></div></div><div style="margin-top: 0cm; margin-right: 0cm; margin-left: 0cm; margin-bottom: 0.0001pt; font-size: 12pt; font-family: 'Times New Roman', serif; "><o:p> </o:p></div></div></div></div></span></div><br></div></body></html>