<div dir="ltr">Puil the DirSync logs for a couple of days and look at what happens when the users are going inactive.</div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Nov 26, 2014 at 12:12 PM, shabbar babrawala <span dir="ltr"><<a href="mailto:shabbar_babrawala@hotmail.com" target="_blank">shabbar_babrawala@hotmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div dir="ltr">Hi<div><br></div><div>Yes the Ad is virtualized and so is the CUCM manual time sync between the 2<br><br><div><hr>From: <a href="mailto:kevinp@advancedtsg.com" target="_blank">kevinp@advancedtsg.com</a><br>To: <a href="mailto:shabbar_babrawala@hotmail.com" target="_blank">shabbar_babrawala@hotmail.com</a>; <a href="mailto:ryanhuff@outlook.com" target="_blank">ryanhuff@outlook.com</a>; <a href="mailto:sknth.n@gmail.com" target="_blank">sknth.n@gmail.com</a><span class=""><br>CC: <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>Subject: RE: [cisco-voip] AD Sync<br></span>Date: Wed, 26 Nov 2014 14:56:29 +0000<div><div class="h5"><br><br>
<div>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d">Is your new 2012 AD server virtualized? How is the time synchronization between CUCM and AD?</span></p>
<p><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1f497d"> </span></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in">
<p><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> cisco-voip [mailto:<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>]
<b>On Behalf Of </b>shabbar babrawala<br>
<b>Sent:</b> Wednesday, November 26, 2014 9:43 AM<br>
<b>To:</b> Ryan Huff; Sreekanth Narayanan<br>
<b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] AD Sync</span></p>
</div>
</div>
<p> </p>
<div>
<p><span style="font-family:"Calibri",sans-serif">Hi</span></p>
<div>
<p><span style="font-family:"Calibri",sans-serif"> </span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif">Cucm 9.1 win 2012</span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif"> </span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif">It was working before on win 2003 broken after upgrade to 2012</span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif"> </span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif">Regards</span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif"> </span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif">Shabbar</span></p>
<div>
<div align="center" style="text-align:center"><span style="font-family:"Calibri",sans-serif">
<hr size="2" width="100%" align="center">
</span></div>
<p><span style="font-family:"Calibri",sans-serif">From:
<a href="mailto:ryanhuff@outlook.com" target="_blank">ryanhuff@outlook.com</a><br>
To: <a href="mailto:sknth.n@gmail.com" target="_blank">sknth.n@gmail.com</a>; <a href="mailto:shabbar_babrawala@hotmail.com" target="_blank">
shabbar_babrawala@hotmail.com</a><br>
CC: <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
Subject: RE: [cisco-voip] AD Sync<br>
Date: Wed, 26 Nov 2014 09:38:59 -0500</span></p>
<div>
<p><span style="font-family:"Calibri",sans-serif">What version of CUCM and What version of AD?<br>
<br>
Has the AD sync ever worked correctly? </span></p>
<ul>
<li>
<span style="font-family:"Calibri",sans-serif">Is this a break/fix?</span></li></ul>
<ul>
<ul>
<li>
<span style="font-family:"Calibri",sans-serif">What changed from when it was working?</span></li><li>
<span style="font-family:"Calibri",sans-serif">Is the distinguished user the same, did that user's AD permissions change</span></li><li>
<span style="font-family:"Calibri",sans-serif">Does the distinguished user have the delegate control privilege on the domain?</span></li></ul>
</ul>
<ul>
<li>
<span style="font-family:"Calibri",sans-serif">Is this a new install?</span></li></ul>
<ul>
<ul>
<li>
<span style="font-family:"Calibri",sans-serif">Were any changes made to AD after the original full sync the first time?</span></li><li>
<span style="font-family:"Calibri",sans-serif">Has either the domain name of the CUCM cluster or the AD server changed since the first time the LDAP full sync was ran?</span></li><li>
<span style="font-family:"Calibri",sans-serif">Does the BIND authentication work correctly?</span></li><li>
<span style="font-family:"Calibri",sans-serif">Have you completely removed an existing user account and then re-synced from AD to see if that account re-appears?</span></li></ul>
</ul>
<p><span style="font-family:"Calibri",sans-serif"><br>
<br>
</span></p>
<div>
<div align="center" style="text-align:center"><span style="font-family:"Calibri",sans-serif">
<hr size="2" width="100%" align="center">
</span></div>
<p><span style="font-family:"Calibri",sans-serif">Date: Wed, 26 Nov 2014 16:09:51 +0530<br>
From: <a href="mailto:sknth.n@gmail.com" target="_blank">sknth.n@gmail.com</a><br>
To: <a href="mailto:shabbar_babrawala@hotmail.com" target="_blank">shabbar_babrawala@hotmail.com</a><br>
CC: <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
Subject: Re: [cisco-voip] AD Sync</span></p>
<div>
<div>
<div>
<p><span style="font-family:"Calibri",sans-serif">Hi Shabbar,<br>
<br>
What is the CUCM version?</span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif">So the users go into Inactive mode every 6 hours? Or once everyday? If once, what time does that happen and is that during a sync?</span></p>
</div>
<p><span style="font-family:"Calibri",sans-serif">Have you taken a look at the DirSync logs during the period of failure?</span></p>
</div>
<p><span style="font-family:"Calibri",sans-serif">What about a packet capture to see if this could be an issue due to the network?<br>
<br>
Thanks<br>
Sreekanth</span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif"> </span></p>
<div>
<p><span style="font-family:"Calibri",sans-serif">On 26 November 2014 at 11:37, shabbar babrawala <<a href="mailto:shabbar_babrawala@hotmail.com" target="_blank">shabbar_babrawala@hotmail.com</a>> wrote:</span></p>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt">
<div>
<div>
<p><span style="font-family:"Calibri",sans-serif">Hi</span></p>
<div>
<p><span style="font-family:"Calibri",sans-serif"> </span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif">Have a strange problem where the sync with AD has broken , everyday morning we have to keep performing a full sync as the users show inactive even though the setting is to sync every 6 hours.
Have even deleted the LDAP configuration and redone but no luck. </span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif">any help is appreciated.</span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif;color:#888888"> </span></p>
</div>
<div>
<p><span style="font-family:"Calibri",sans-serif;color:#888888">Shabbar</span></p>
</div>
</div>
</div>
<p><span style="font-family:"Calibri",sans-serif"><br>
_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a></span></p>
</blockquote>
</div>
<p><span style="font-family:"Calibri",sans-serif"> </span></p>
</div>
<p><span style="font-family:"Calibri",sans-serif"><br>
_______________________________________________ cisco-voip mailing list <a href="mailto:cisco-voip@puck.nether.net" target="_blank">
cisco-voip@puck.nether.net</a> <a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">
https://puck.nether.net/mailman/listinfo/cisco-voip</a></span></p>
</div>
</div>
</div>
</div>
</div>
</div></div></div></div></div> </div></div>
<br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br></div>