<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">If you are currently integrated with AD for ldap then there is no need to migrate passwords as CUCM doesn't know about them to begin with. Your current ldap authentication is done by AD, and if you configure it post-upgrade the same AD will doing authentication then.<div><br></div><div>The only time you would need to set default passwords for your users if you don't want to do ldap sync or auth in 7.x. </div><div><br></div><div><div>
<span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div>-Ryan</div></span>
</div>
<br><div><div>On Mar 15, 2010, at 11:10 AM, Manoj Kalpage wrote:</div><br class="Apple-interchange-newline"><div>Thanks Ryan,</div>
<div> </div>
<div>This means, As DMA tool doesn't migrate AD password information. If I want to have existing password, only solution is to continue using current AD server???</div>
<div> </div>
<div>So, I don't have much choice except setup one intitial password for all ccmusers and send it to all employee DL but our security folks don't like it. </div>
<div>I don't think it is practical to create 4,000 different initial passwords for each users and send them seperatley by using 4,000 e-mails.</div>
<div> </div>
<div><br> </div>
<div class="gmail_quote">On Mon, Mar 15, 2010 at 11:58 PM, Ryan Ratliff <span dir="ltr"><<a href="mailto:rratliff@cisco.com">rratliff@cisco.com</a>></span> wrote:<br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">
<div style="WORD-WRAP: break-word">It is pretty trivial in CUCM 7 to disable the ldap authentication. The big issue for your uses will be the lack of password sync from AD to CUCM so when you disable ldap auth their old passwords will not work.
<div><br>
<div><span style="TEXT-TRANSFORM: none; TEXT-INDENT: 0px; BORDER-COLLAPSE: separate; FONT: medium Helvetica; WHITE-SPACE: normal; LETTER-SPACING: normal; COLOR: rgb(0,0,0); WORD-SPACING: 0px">
<div>-Ryan</div></span></div><br>
<div>
<div class="im">
<div>On Mar 15, 2010, at 10:53 AM, Manoj Kalpage wrote:</div><br>
<div>Adam, </div>
<div>George,</div>
<div> </div>
<div>Thank you for the reply. We have dedicated Exchange+AD server for CUCM cluster and Unity but as we moving to Unity connection 7.1 we will decommissioning our AD server. is there any way I can temporary use AD for LDAP authentication and decommission it later?</div>
<div> </div>
<div>Regards,</div>
<div>MK <br><br></div></div>
<div class="gmail_quote">
<div class="im">On Mon, Mar 15, 2010 at 11:34 PM, <span dir="ltr"><<a href="mailto:george.hendrix@l-3com.com" target="_blank">george.hendrix@l-3com.com</a>></span> wrote:<br></div>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">
<div lang="EN-US" vlink="purple" link="blue" bgcolor="white">
<div>
<div class="im"><p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 11pt">I’m pretty sure you will also have to sever the AD integration on the 4.1 cluster prior to migration.</span></p>
<div><span style="COLOR: #1f497d; FONT-SIZE: 11pt"> </span><br></div><p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 11pt">As Adam said, the User PIN and password at set the same for each user during CUCM 7.1 installation. The link below covers post installation tasks regarding active directory integration.</span></p>
<div><span style="COLOR: #1f497d; FONT-SIZE: 11pt"> </span><br></div><p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 11pt"><a href="http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/upgrade/7_1_2/upgrd712.html" target="_blank">http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/upgrade/7_1_2/upgrd712.html</a></span></p>
<div><span style="COLOR: #1f497d; FONT-SIZE: 11pt"> </span><br></div>
<div><span style="COLOR: #1f497d; FONT-SIZE: 11pt"> </span><br></div></div>
<div><p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 10pt">Bill Hendrix</span><span style="COLOR: #1f497d"></span></p><p class="MsoNormal"><span style="COLOR: red; FONT-SIZE: 11pt"><span><image001.jpg></span></span><span style="COLOR: #1f497d"></span></p>
<div>
<div></div>
<div class="h5"><p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 10pt"><a href="mailto:george.hendrix@l-3com.com" target="_blank">george.hendrix@l-3com.com</a></span></p><p class="MsoNormal"><span style="COLOR: blue">W: 813-281-3109 C: 813-205-0979</span></p><p class="MsoNormal"><span style="COLOR: blue">STRATIS Service Desk: 1-800-871-9983</span><span style="COLOR: #1f497d; FONT-SIZE: 11pt"> </span></p></div></div></div>
<div>
<div></div>
<div class="h5">
<div><span style="COLOR: #1f497d; FONT-SIZE: 11pt"> </span><br></div>
<div>
<div style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><p class="MsoNormal"><b><span style="COLOR: windowtext; FONT-SIZE: 10pt">From:</span></b><span style="COLOR: windowtext; FONT-SIZE: 10pt"> <a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a> [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>] <b>On Behalf Of </b>Adam Frankel<br>
<b>Sent:</b> Monday, March 15, 2010 10:06 AM<br><b>To:</b> Manoj Kalpage<br><b>Cc:</b> Cisco Voip<br><b>Subject:</b> Re: [cisco-voip] ccmuser password and PIN migrate from Ver 4.1 to 7.1</span></p></div></div>
<div>
<div></div>
<div>
<div> <br></div><p class="MsoNormal"><span style="FONT-SIZE: 10pt">In CUCM 7.x when you configure the LDAP Authentication portion, the CUCM will be sending Authentication requests to your AD, so the password will still be coming from AD.<br>
<br>The PIN will get updated to a set number during the installation of 7.x<br><br>Regards,<br><br></span><span></span></p><pre>Adam </pre><p class="MsoNormal"><span><br><br><br><span>------------Original Message--------------</span><br><span>From: Manoj Kalpage <a href="mailto:manoj.kalpage@gmail.com" target="_blank"><manoj.kalpage@gmail.com></a></span><br>
<span>Sent: Mon, Mar 15, 2010 9:59:19 Am</span><br><span>To: Cisco Voip <a href="mailto:cisco-voip@puck.nether.net" target="_blank"><cisco-voip@puck.nether.net></a></span><br><span>CC: </span><br><span>Subject: [cisco-voip] ccmuser password and PIN migrate from Ver 4.1 to 7.1</span> </span></p><p class="MsoNormal"><span>Hi All,<br><br>We have CUCM 4.1 with Active directory integration and ccmuser password manage in active directory. My consultant said that we cannot migrate ccmuser password and PIN to Ver 7.1. We found that DMA tool doesn't carry ccmuser and PIN information to Ver 7.1. Just wondering whether there is any workaround for this.<br clear="all">
<br>-- <br>Best Regards,<br>MK<br><br></span></p><pre> </pre><pre style="TEXT-ALIGN: center"><hr align="center" size="4" width="90%">
</pre><pre> </pre><pre>_______________________________________________</pre><pre>cisco-voip mailing list</pre><pre><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a></pre><pre><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a></pre>
<pre> </pre></div></div></div></div></div></div></blockquote></div>
<div>
<div></div>
<div class="h5"><br><br clear="all"><br>-- <br>Best Regards,<br>Manoj<br>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br></div></div></div><br></div></div></blockquote></div><br><br clear="all"><br>-- <br>
Best Regards,<br>Manoj<br>
</div><br></div></body></html>