topic Creating new account for AD sync in Unified Communications Infrastructure

Creating new account for AD sync

Sean McQuade — Tue, 19 Mar 2019 12:51:00 GMT

Hi all,

We want to do an AD sync with CUCM 8.6 but don't want to use the default domain administrator account. Is there a guide as to what permissions/memberships the user needs to have on AD to be able to work properly for the integration?

Thanks

Sean

Creating new account for AD sync

Jonathan Schulenberg — Thu, 08 Nov 2012 11:27:32 GMT

It's a read-only account. Default Domain User permissions will do it but you can delegate 'read all attributes' for good measure if you want.

Please remember to rate helpful responses and identify helpful or correct answers.

Creating new account for AD sync

Sean McQuade — Thu, 08 Nov 2012 11:31:46 GMT

Hi Jonathan,

I have created a new user and managed to get it to work for the "LDAP Directory" and it connects sucessfully and syncs users, however in the "LDAP Authentication", using this user gives an "Error connecting" message, but using the domain "administrator" account works. Are there other permissions I need to use for authentication?

Thanks for your help

Sean

Creating new account for AD sync

Jonathan Schulenberg — Thu, 08 Nov 2012 11:33:49 GMT

Nope. What format is the Bind DN in? It needs to be CN=blah blah,OU=People,DC=domain,DC=com not domain\user or user@domain.com.

Please remember to rate helpful responses and identify helpful or correct answers.

Creating new account for AD sync

Sean McQuade — Thu, 08 Nov 2012 11:43:26 GMT

I have created a new user (Lab) and am trying to use this for the AD sync. When I change the user in LDAP Directory, it connects and syncs. When I change the user in Authentication, it doesn't work, but the admin account works. Screenshots attached.

Thanks

Sean

Creating new account for AD sync

Jonathan Schulenberg — Thu, 08 Nov 2012 11:50:04 GMT

The CN= is not the username. Use ADSI Edit or AD Users and Computers with Advanced mode enabled to see what the CN attribute for that user account is.

Please remember to rate helpful responses and identify helpful or correct answers.

Creating new account for AD sync

Sean McQuade — Thu, 08 Nov 2012 12:01:08 GMT

Thanks a lot Jonathan. I'm new to AD and hadn't realised the username and CN were different. The CN was "lab 1" and all is now working.

Thanks again

Sean