<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
From a server perspective, just make sure the forward A record and reverse PTR record for the new FQDN exist BEFORE using the CLI command to run the sanity check scripts to change the domain. You can change the DNS records shortly before running the CLI command,
but not for long as it would eventually cause cluster replication issues. Make sure the reverse PTR for the old FQDN is removed/changed to point at the NEW FQDN.
<div><br>
</div>
<div>Regarding the processNode names.. no real impact to leave them as IP references (changing them to FQDN can offer some advantages and conveniences when dealing with MRA, Expressway, IM & Presence).</div>
<div><br>
</div>
<div>If you do decide to change CUCM’s server references to FQDN at some point, make sure all server nodes have a forward and reverse DNS record and make sure all phones/devices have access to DNS servers that can resolve the CUCM server’s FQDN (this step is
really important). Also, make sure to adjust/verify the Enterprise Parameter URLs for authentication and directories (though they can usually be left to use IP references without issue).</div>
<div><br>
</div>
<div>Certs are regenerated; so with public CA certs that means a new CSR and certs after the change. With self-signed certs, you just get new certs that’ll need to be re-trusted by tour browser or imported into your device’s truststore.<br>
<br>
<div dir="ltr">Sent from my iPhone</div>
<div dir="ltr"><br>
<blockquote type="cite">On Nov 11, 2019, at 18:47, Nick Britt <nickolasjbritt@gmail.com> wrote:<br>
<br>
</blockquote>
</div>
<blockquote type="cite">
<div dir="ltr">
<div dir="ltr">Sorry the ask it so change from the DNS suffix of <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fcustomername.us.com&data=02%7C01%7C%7C2609025ca7364935d96f08d767019242%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637091128749175619&sdata=PbdJpfrUqvvG7cS7uBJq0ll6fv47o0R5mj1EWkTkb4c%3D&reserved=0" originalsrc="http://customername.us.com" shash="duLt8o+dU5mEsanDZxBVQy4owkzt3L18hRs0Ck1jGecxYdVHCvngpOEfCOxzqjR7JHmwWPiMFb1QuDtLfBRpUJclUd8ye1/DoQzTjrPnBqVm/GDYVPMr8w+GDgkVOhbZ6+Wg5/cJO9WSZnJytLXV1EmaARPYCWRG7RClRVDqtaI=">
customername.us.com</a> to <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fcustomer.com&data=02%7C01%7C%7C2609025ca7364935d96f08d767019242%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637091128749175619&sdata=eIpn94qwo9a%2BYBGJs1XEJl1JAQVy5Qyb5KyzxNitE%2Fk%3D&reserved=0" originalsrc="http://customer.com" shash="fLYxqLPgjIjpWrLbhtyqT6BFfq/Q+o/XjjdoFgSUGB74UPyTx07nt1J8vtpIhZmQsa6Vzku7bfNpvEITyV3WBSj6qROwk9r8UdP+VoN+TCGBzU+arViFmDvA4Dc5eZAFNpJmOHz2xM2+rBrWmMCXuISopEi00Rxqk6jRkGAeST4=">
customer.com</a>.
<div><br>
</div>
<div>Also the users from <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fcustomername.us.com&data=02%7C01%7C%7C2609025ca7364935d96f08d767019242%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637091128749185630&sdata=UdD3B4rmbmUnK03CRqmlmBToeKW9Fk3DZywPFf79Ygg%3D&reserved=0" originalsrc="http://customername.us.com" shash="HeKNikaEiikcjwDB15ScgAKcNO0CoJi1lXl6MojPCH6RqfK77AoobzlRj/fsh10P7fCOT6F0uY0X2f2IRb/F0A9FalYZzw2voLVhukHwOxR4IFKSdH6TVaIllX6+V9tBMzW0hTk1dGVMckxMad+B/RmIt7rKna0gJZxT1HQEj9E=">
customername.us.com</a> have been moved into a <a href="https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fcustomername.com&data=02%7C01%7C%7C2609025ca7364935d96f08d767019242%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637091128749195642&sdata=kJeOUvsQs1AZ5xYP7IipTdqAga%2FXGa13gpJRc0QFK8A%3D&reserved=0" originalsrc="http://customername.com" shash="AqkYb3C3t+nf0UfU/VyIxW6z7CN+D2WAXNdTjB8/O0BlAv8o981FQUzSBts8I659jTb9Ta2CYQqEjUI1tyb4BZ5/x3ZmZF6PWLvgkY4vssBKk+G3u1BLBOzPnQrkwth9i9vMfCCTRhXRZec+O73tVqySAgW7/oHhCgxS6pAK0aU=">
customername.com</a> OU on different LDAP servers with the same usernames.
<div><br>
</div>
<div>The servers are configured with a DNS domain and DNS servers but they process node ID is the IP address of the servers (without the suffix)</div>
<div><br>
</div>
<div>Does that make sense?</div>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Mon, Nov 11, 2019 at 3:26 PM Ryan Huff <<a href="mailto:ryanhuff@outlook.com">ryanhuff@outlook.com</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="auto">what are you trying to do? Do you need to add a domain name to UC servers that currently do not have a domain name?<br>
<br>
<div dir="ltr">Sent from my iPhone</div>
<div dir="ltr"><br>
<blockquote type="cite">On Nov 11, 2019, at 18:21, Nick Britt <<a href="mailto:nickolasjbritt@gmail.com" target="_blank">nickolasjbritt@gmail.com</a>> wrote:<br>
<br>
</blockquote>
</div>
<blockquote type="cite">
<div dir="ltr">
<div dir="ltr">
<div>A customer has had a domain name, this includes the DNS and the active directory integration. I am trying to pull together the necessary steps for each application. <br>
</div>
<div><br>
</div>
<div>Below is what I have deduced from the documentation so far</div>
<div><br>
</div>
<div><b>Change Domain name CUCM, Pub and Sub</b></div>
<div><br>
</div>
<div>The CUCM processNode name is the IP address (System - > Server) changing the domain name will have no effect on the CTL/ITL files as phones only reference the IP currently. </div>
<div>Remove each server from PLM and add back in post-change</div>
<div>Security certs will need to be re-signed by the root CA</div>
<div>Each domain name and DNS change will need to be completed independently and db replication status to be checked before moving onto subscriber. </div>
<div>Current Active directory authentication and LDAP authentication will be moved from one server to another. The usernames are the same between the the Active Directory domains so the device associations should remain when the LDAP integration is change between
one AD domain to another. </div>
<div><br>
</div>
<div><span style="font-weight:bold">Change Domain name IMP, Pub and Sub</span></div>
<div><br>
</div>
<div>Security certs will need to be re-signed by the root CA</div>
<div>Each domain name and DNS change will need to be completed independently and db replication status to be checked before moving onto subscriber. </div>
<div><br>
</div>
<div><b>CUC</b></div>
<div>Security certs will need to be re-signed by the root CA</div>
<div>Each domain name and DNS change will need to be completed independently and db replication status to be checked before moving onto subscriber. </div>
<div>LDAP is used to manually "import" user name/extension then the users are added manually</div>
<div>SMTP is used for voicemail to mail integration instead of unified messaging so no changes needed as the mail server details remains the same. </div>
<div><br>
</div>
<div>I've also seen reports of mgcp sccp gw's unregistering if relying on DNS but the IP is used for each MGCP registration. </div>
<div><br>
</div>
<div>I would appreciate a heads up if you have encountered any issues with similar changes. </div>
<div><br>
</div>
-- <br>
<div dir="ltr">- Nick<br>
</div>
</div>
<span>_______________________________________________</span><br>
<span>cisco-voip mailing list</span><br>
<span><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a></span><br>
<span><a href="https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7C%7C2609025ca7364935d96f08d767019242%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637091128749205647&sdata=PWGp2aWmgaOLOwtFD6qx9U3KVdlfrQG9cTxxQzDKnss%3D&reserved=0" originalsrc="https://puck.nether.net/mailman/listinfo/cisco-voip" shash="p07H1CpTR3Db5IEr2RIwg1agnfWgivrG3sTPp+qHkw9otfI+7wUecDi5T29Z95zmDRi0mwBXF90fR0UcJdJNm+Gg4aVEURv22lvDrdva5dP3tRjPUseIXhj+GopOTbcXJvxHGyvLzvvPqgcHgEKbqDzk6rGnekwFLOnGOno7SNg=" target="_blank">https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=02%7C01%7C%7C1c991cdfa1ba4d1a875408d766fde4db%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637091112956630527&sdata=Fl%2B6R%2F1feUBCLif%2Ft1TUCSKkEgMoZlbzfy3jz87ORhg%3D&reserved=0</a></span><br>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br clear="all">
<div><br>
</div>
-- <br>
<div dir="ltr" class="gmail_signature">- Nick<br>
</div>
</div>
</blockquote>
</div>
</body>
</html>