<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Verdana; font-size: 10pt; color: #000000'>Thanks. Having to disable/enable seems like a bit of work. Well, not so much work as it is turning off/on a system service that could cause issues.<br><br>As far as I know, you can't use app users for everything, like IPCC phone agents.<br><br><br><span><br><span name="x"></span>---<br>Lelio Fulgenzi, B.A.<br>Senior Analyst (CCS) * University of Guelph * Guelph, Ontario N1G 2W1<br>(519) 824-4120 x56354 (519) 767-1060 FAX (JNHN)<br>^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^<br>Cooking with unix is easy. You just sed it and forget it. <br> - LFJ (with apologies to Mr. Popeil)<br><span name="x"></span><br></span><br><hr id="zwchr"><b>From: </b>"Jason Fuermann" <jason.f@shsu.edu><br><b>To: </b>"Lelio Fulgenzi" <lelio@uoguelph.ca>, "Ryan Schwab" <schwaby81@shaw.ca><br><b>Cc: </b>cisco-voip@puck.nether.net<br><b>Sent: </b>Thursday, March 17, 2011 11:44:47 AM<br><b>Subject: </b>RE: [cisco-voip] CUCM LDAP Integration<br><br><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--><div class="WordSection1"><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">On 7.0.2, you can enable auth and not sync, and your users will never get marked for deletion. A caveat to that is you have to disable auth to add/remove users from end users. You can always create application users if you don’t want them to auth from ldap though</span></p><p class="MsoNormal"><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"> </span></p><div><div style="border-right: medium none; border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; padding: 3pt 0in 0in;"><p class="MsoNormal"><b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";">From:</span></b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";"> cisco-voip-bounces@puck.nether.net [mailto:cisco-voip-bounces@puck.nether.net] <b>On Behalf Of </b>Lelio Fulgenzi<br><b>Sent:</b> Tuesday, March 15, 2011 2:24 PM<br><b>To:</b> Ryan Schwab<br><b>Cc:</b> cisco-voip@puck.nether.net<br><b>Subject:</b> Re: [cisco-voip] CUCM LDAP Integration</span></p></div></div><p class="MsoNormal"> </p><div><p class="MsoNormal">I know I can test this, but I'm just wondering if you can enable LDAP authentication without LDAP synchronization. I'd like to be able to create local user accounts and choose between local password or LDAP password. This is something that many systems allow, just wondering if there is a workaround. </p></div><div><p class="MsoNormal"><br>Sent from my iPhone</p></div><div><p class="MsoNormal" style="margin-bottom: 12pt;"><br>On Mar 15, 2011, at 1:30 PM, "Ryan Schwab" <<a href="mailto:schwaby81@shaw.ca" target="_blank">schwaby81@shaw.ca</a>> wrote:</p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;"><div><div><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);">Hi Tim,</span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);"> </span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);">Once LDAP integration is turned on in CUCM, it will “replace” your current end users. If the userID of your CUCM end user is an exact match of the LDAP userID, it will keep this user and associated settings in place. All other users will be marked for removal. I believe the “purge” period is every 24 hours.</span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);"> </span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);">Improved in CUCM 8x is LDAP filters which allows you to sync LDAP users based on defined criteria (ex: only users with ipPhone field populated).</span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);"> </span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);">I believe the CUCM SRND explains this the best. If you have a test environment, try it there first.</span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);"> </span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);">Hope that helps.</span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);"> </span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);">-Ryan Schwab </span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);"> </span></p><div><div style="border-right: medium none; border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; padding: 3pt 0in 0in;"><p class="MsoNormal" style=""><b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";">From:</span></b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";"> <a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a> [mailto:cisco-voip-bounces@puck.nether.net] <b>On Behalf Of </b>H, Tim<br><b>Sent:</b> March-15-11 11:20 AM<br><b>To:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br><b>Subject:</b> [cisco-voip] CUCM LDAP Integration</span></p></div></div><p class="MsoNormal" style=""> </p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);">All,</span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);"> </span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);">We're looking at changing our CUCM environment to include LDAP authentication. Does this mean all of our current users go away and it imports all users from AD? I'm specifically looking at problems we could potentially have with this. We're running CUCM 7.15 and UCCX 7.01.</span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);"> </span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);">Any help/documentation you all know if is appreciated.</span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);"> </span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);">Thanks,</span></p><p class="MsoNormal" style=""><span style="color: rgb(31, 73, 125);">Tim</span></p></div></div></blockquote><blockquote style="margin-top: 5pt; margin-bottom: 5pt;"><div><p class="MsoNormal">_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a></p></div></blockquote></div></div></body></html>