<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>What version of CUCM and What version of AD?<br><br>Has the AD sync ever worked correctly? <br><br><ul><li>Is this a break/fix?</li><ul><li>What changed from when it was working?</li><li>Is the distinguished user the same, did that user's AD permissions change</li><li>Does the distinguished user have the delegate control privilege on the domain?</li></ul><li>Is this a new install?</li><ul><li>Were any changes made to AD after the original full sync the first time?</li><li>Has either the domain name of the CUCM cluster or the AD server changed since the first time the LDAP full sync was ran?</li><li>Does the BIND authentication work correctly?<br></li><li>Have you completely removed an existing user account and then re-synced from AD to see if that account re-appears?<br></li></ul></ul><br><br><br><div><hr id="stopSpelling">Date: Wed, 26 Nov 2014 16:09:51 +0530<br>From: sknth.n@gmail.com<br>To: shabbar_babrawala@hotmail.com<br>CC: cisco-voip@puck.nether.net<br>Subject: Re: [cisco-voip] AD Sync<br><br><div dir="ltr"><div><div>Hi Shabbar,<br><br>What is the CUCM version?<br></div><div>So the users go into Inactive mode every 6 hours? Or once everyday? If once, what time does that happen and is that during a sync?<br><br></div>Have you taken a look at the DirSync logs during the period of failure?<br></div>What about a packet capture to see if this could be an issue due to the network?<br><br>Thanks<br>Sreekanth<br></div><div class="ecxgmail_extra"><br><div class="ecxgmail_quote">On 26 November 2014 at 11:37, shabbar babrawala <span dir="ltr"><<a href="mailto:shabbar_babrawala@hotmail.com" target="_blank">shabbar_babrawala@hotmail.com</a>></span> wrote:<br><blockquote class="ecxgmail_quote" style="border-left:1px #ccc solid;padding-left:1ex;">
<div><div dir="ltr">Hi<div><br></div><div>Have a strange problem where the sync with AD has broken , everyday morning we have to keep performing a full sync as the users show inactive even though the setting is to sync every 6 hours. Have even deleted the LDAP configuration and redone but no luck. </div><div>any help is appreciated.</div><span class="ecxHOEnZb"><font color="#888888"><div><br></div><div>Shabbar</div> </font></span></div></div>
<br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br></div>
<br>_______________________________________________
cisco-voip mailing list
cisco-voip@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip</div> </div></body>
</html>