<html><head><base href="x-msg://85/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">My search foo, and terminology, are off this morning but I believe ldap sync pulls in some form of unique identifier for the user other than just samaccountname.<div><br></div><div>The only references i've found so far are:</div><div><a href="http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/8x/directry.html#wp1069361">http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/8x/directry.html#wp1069361</a></div><div><br></div><div>data dictionary:</div><div>2.3.138.33 uniqueidentifier (FI-1959) <br>Type: string [64] (Indexed) <br>Default Value: EMPTY <br>Remarks: It will be ObjectGUID from ActiveDirectory or ciscoatUniqueIdentifier for ND/iPLanet <br><br></div><div><br></div><div>At one point there was a big concern about the possibility of renaming a user and inheriting user data. It's fuzzy but something like this:</div><div>agent1 is ldap user and has user data in cucm</div><div>agent1 gets deleted from enterprise directory</div><div>a new agent1 is created</div><div>if we only match on username( or samaccountname or uid) then the new agent1 will have access to all cucm user data associated with old agent1.</div><div><br></div><div>In summary, i believe what you observed is proper behavior. I cannot find the documentation for it. Maybe someone else on the list has a pointer. If not, a TAC case would get a complete investigation and doc bugs filed as necessary.</div><div><br></div><div>Regards,</div><div>Wes</div><div><br></div><div><br></div><div><br><div><div>On Feb 13, 2012, at 8:11 AM, <<a href="mailto:James.Brown@barclayswealth.com">James.Brown@barclayswealth.com</a>> <<a href="mailto:James.Brown@barclayswealth.com">James.Brown@barclayswealth.com</a>> wrote:</div><br class="Apple-interchange-newline"><div lang="EN-US" link="blue" vlink="purple"><div><font color="#0000ff" size="2" face="Arial"><span class="868140513-13022012">We authenticate based on the SamAccountName, so I wasn't aware the CUCM considered either the SID or the GUID ( A helpful explanation of the two is here:<a href="http://technet.microsoft.com/en-us/library/cc961625.aspx" style="color: blue; text-decoration: underline; ">http://technet.microsoft.com/en-us/library/cc961625.aspx</a>). In our case, both the SIDs and GUIDs have changed since this is a completely new AD domain.</span></font></div><div><font color="#0000ff" size="2" face="Arial"><span class="868140513-13022012"></span></font> </div><div><font color="#0000ff" size="2" face="Arial"><span class="868140513-13022012">Regards</span></font></div><div><font color="#0000ff" size="2" face="Arial"><span class="868140513-13022012"></span></font> </div><div><font color="#0000ff" size="2" face="Arial"><span class="868140513-13022012">James.</span></font></div><div><font color="#0000ff" size="2" face="Arial"><span class="868140513-13022012"></span></font> </div><div dir="ltr" align="left"><hr tabindex="-1"></div><div dir="ltr" align="left"><font size="2" face="Tahoma"><b>From:</b><span class="Apple-converted-space"> </span>Jason Aarons (AM) [mailto:jason.aarons@dimensiondata.com]<span class="Apple-converted-space"> </span><br><b>Sent:</b><span class="Apple-converted-space"> </span>13 February 2012 13:03<br><b>To:</b><span class="Apple-converted-space"> </span>Wes Sisk; Brown, James : Barclays Wealth<br><b>Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline; ">cisco-voip@puck.nether.net</a><br><b>Subject:</b><span class="Apple-converted-space"> </span>RE: [cisco-voip] EM LogOff After Garbage Collector<br></font><br></div><div></div><div class="WordSection1" style="page: WordSection1; "><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: 'Times New Roman', serif; font-size: 12pt; "><span style="font-family: Calibri, sans-serif; color: rgb(31, 73, 125); font-size: 11pt; ">Wes, wouldn’t ccm ldap sync be tied back to SID vs GUID?<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: 'Times New Roman', serif; font-size: 12pt; "><span style="font-family: Calibri, sans-serif; color: rgb(31, 73, 125); font-size: 11pt; "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: 'Times New Roman', serif; font-size: 12pt; "><span style="font-family: Calibri, sans-serif; color: rgb(31, 73, 125); font-size: 11pt; ">In Windows, If you delete user jbrown in AD, just because you create another user named jbrown they won’t have the same SIDs and are two different accounts. You just see the friendly name but things are tied back to SID.<o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: 'Times New Roman', serif; font-size: 12pt; "><span style="font-family: Calibri, sans-serif; color: rgb(31, 73, 125); font-size: 11pt; "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: 'Times New Roman', serif; font-size: 12pt; "><span style="font-family: Calibri, sans-serif; color: rgb(31, 73, 125); font-size: 11pt; "><o:p> </o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: 'Times New Roman', serif; font-size: 12pt; "><span style="font-family: Calibri, sans-serif; color: rgb(31, 73, 125); font-size: 11pt; "><a href="http://en.wikipedia.org/wiki/Security_Identifier" style="color: blue; text-decoration: underline; ">http://en.wikipedia.org/wiki/Security_Identifier</a><o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: 'Times New Roman', serif; font-size: 12pt; "><span style="font-family: Calibri, sans-serif; color: rgb(31, 73, 125); font-size: 11pt; "><a href="http://en.wikipedia.org/wiki/GUID" style="color: blue; text-decoration: underline; ">http://en.wikipedia.org/wiki/GUID</a><o:p></o:p></span></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: 'Times New Roman', serif; font-size: 12pt; "><span style="font-family: Calibri, sans-serif; color: rgb(31, 73, 125); font-size: 11pt; "><o:p> </o:p></span></div><div><div style="border-bottom-width: medium; border-bottom-style: none; border-bottom-color: initial; border-left-width: medium; border-left-style: none; border-left-color: initial; padding-bottom: 0in; padding-left: 0in; padding-right: 0in; border-top-color: rgb(181, 196, 223); border-top-width: 1pt; border-top-style: solid; border-right-width: medium; border-right-style: none; border-right-color: initial; padding-top: 3pt; "><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: 'Times New Roman', serif; font-size: 12pt; "><b><span style="font-family: Tahoma, sans-serif; font-size: 10pt; ">From:</span></b><span style="font-family: Tahoma, sans-serif; font-size: 10pt; "><span class="Apple-converted-space"> </span><a href="mailto:cisco-voip-bounces@puck.nether.net" style="color: blue; text-decoration: underline; ">cisco-voip-bounces@puck.nether.net</a><span class="Apple-converted-space"> </span>[mailto:cisco-voip-bounces@puck.nether.net]<span class="Apple-converted-space"> </span><b>On Behalf Of<span class="Apple-converted-space"> </span></b>Wes Sisk<br><b>Sent:</b><span class="Apple-converted-space"> </span>Monday, February 13, 2012 7:47 AM<br><b>To:</b><span class="Apple-converted-space"> </span><<a href="mailto:James.Brown@barclayswealth.com" style="color: blue; text-decoration: underline; ">James.Brown@barclayswealth.com</a>><br><b>Cc:</b><span class="Apple-converted-space"> </span><a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline; ">cisco-voip@puck.nether.net</a><br><b>Subject:</b><span class="Apple-converted-space"> </span>Re: [cisco-voip] EM LogOff After Garbage Collector<o:p></o:p></span></div></div></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: 'Times New Roman', serif; font-size: 12pt; "><o:p> </o:p></div><div style="margin-top: 0in; margin-right: 0in; margin-bottom: 0pt; margin-left: 0in; font-family: 'Times New Roman', serif; font-size: 12pt; "><font color="#0000ff" size="2" face="Arial"></font><br><br>Did the user GUIDs change during the domain migration?<br><br>On Feb 13, 2012, at 5:22 AM, <<a href="mailto:James.Brown@barclayswealth.com" style="color: blue; text-decoration: underline; ">James.Brown@barclayswealth.com</a>> <<a href="mailto:James.Brown@barclayswealth.com" style="color: blue; text-decoration: underline; ">James.Brown@barclayswealth.com</a>> wrote:<span class="Apple-converted-space"> </span><br><br>All,<br><br>We carried out a domain migration on one of our clusters this weekend and to my surprise, when the garbage collector ran to delete the inactive accounts, it appears to have triggered an EM log out of all the phones.<br><br>Does anyone know if this is the expected behaviour? We had intended to keep everyone logged in using their old details to prevent confusion first thing on Monday morning.<br><br>Regards<br><br>James.<br>Barclays Wealth is the wealth management division of Barclays Bank PLC. This email may relate to or be sent from other members of the Barclays Group.<br><br>The availability of products and services may be limited by the applicable laws and regulations in certain jurisdictions. The Barclays Group does not normally accept or offer business instructions via internet email. Any action that you might take upon this message might be at your own risk.<br><br>This email and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this email in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this email or its attachments.<br><br>Internet communications are not guaranteed to be secure or without viruses. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this email may be monitored by the Barclays Group for operational or business reasons.<br><br>Any opinion or other information in this email or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group.<br><br>Barclays Bank PLC. Registered in England and Wales (registered no. 1026167).<br>Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom.<br><br>Barclays Bank PLC is authorised and regulated by the Financial Services Authority.<br><br>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline; ">cisco-voip@puck.nether.net</a><span class="Apple-converted-space"> </span><br><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank" style="color: blue; text-decoration: underline; ">https://puck.nether.net/mailman/listinfo/cisco-voip</a><span class="Apple-converted-space"> </span><br><br><br><br>_______________________________________________<br>cisco-voip mailing list<br><a href="mailto:cisco-voip@puck.nether.net" style="color: blue; text-decoration: underline; ">cisco-voip@puck.nether.net</a><span class="Apple-converted-space"> </span><br><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank" style="color: blue; text-decoration: underline; ">https://puck.nether.net/mailman/listinfo/cisco-voip</a><span class="Apple-converted-space"> </span><br><br><br><span style="color: white; ">itevomcid</span><o:p></o:p></div></div></div></div><br></div></body></html>