07-22-2014 03:15 AM - edited 03-17-2019 04:21 PM
Hi Support Community
It looks straight forward to change the AXL URL but then we discovered the below from the Meeting Place configuration guide :
" user updates, imports, and deletions are not supported from a redundant Cisco Unified Communications Manager, even if it is integrated with the same LDAP directory as the primary Cisco Unified Communications Manager. This is because Directory Service user updates are tied to a field that is unique to each Cisco Unified Communications Manager server."
So we need to know how we go about changing the directory service configuration to point to another CUCM cluster for authentication and synchronization whilst keeping Meeting Place users and meetings in the Database unchanged.
Any help will be greatly appreciated.
Thanks, Carl Ratcliffe
Solved! Go to Solution.
07-31-2014 07:12 AM
Hi Carl,
I've just received a final update. If you want to point your Directory Integration to a different CUCM server that is holding the same user database and runs AXL service, you should be able to just change the AXL URL on MP and point to this new server. After this change is made and saved, we recommend restarting services on MeetingPlace (SSH to the server with mpxadmin account, changing to 'root', and running 'mpx_sys restart' command). Once the services are restarted and system comes back up, go to User Configuration > Directory Service > Directory Service Configuration and perform a Full Sync (make sure that Profile Number setting under Profile Number Configuration section is set to New users only in order to avoid any profile # change if any of the user profiles in CUCM was updated in the meantime)
Please, let me know of any questions you might have.
Thank you.
-Dejan
07-24-2014 10:59 AM
Hi Carl,
I've been working with MeetingPlace for a long time, but honestly, haven't encountered this scenario. This statement in the documentation sounds very serious and restrictive, but I am sure I had customers that changed URL to point to different CUCM servers for AXL and had no issues with updates and syncs. Still, if documentation states this, there might be something there. I will see if I can check on our end if the wording is missing some additional conditions or we really cannot do this.
I will post any updates as soon as I get them.
-Dejan
07-24-2014 11:57 AM
07-25-2014 06:12 AM
Hi Dejan
I have been looking at the help documents located on the Meeting Place server and the below extract seems to indicate you can make a change to the AXL URL. This help file states you when you are required to perform a full sync with CUCM and it says "when you modify the AXL URL" which reads to me that you can change the URL you just need to perform a full sync where as normally it will be a scheduled partial sync only which isnt going to update existing users.
See attached screen shot.
Therefore is the previous extract from documentation just relating to failover meaning you shouldn’t allow a normal scheduled sync to take place in failover as its only partially synchronising as opposed to a full synchronisation when you change the AXL URL ?
Thanks, Carl Ratcliffe
07-25-2014 06:18 AM
Hi Carl,
Per my experience, I would say change of AXL URL and full sync is all that is needed. But the first referenced document is so specific that we need to check why this was noted and if it can really break something. I would really hate to tell you that based on my experience you should just change the AXL URL and sync, and then something breaks and you have to rebuild and restore, etc.
We are checking internally these two statements and we'll see if we can test this in our or engineering lab. We will let you know as soon as we have an update. I would say by early next week.
-Dejan
07-27-2014 02:26 PM
07-28-2014 04:27 AM
Hi Carl,
That is the current status of our investigation. We need to identify the resources that tested this in QA and based on what this statement was made. TAC can base the answers on documentation available, and if we strictly followed it, what you wanted wouldn't be supported/possible. However, since per our experience it doesn't really sound correct, we want to verify this and if needed update the documentation to avoid this confusion. When is the deadline you need to do this?
Thank you.
-Dejan
07-28-2014 08:35 AM
07-31-2014 05:32 AM
Hi Carl,
Just to let you know, we are finishing up some tests and should have a definitive answer by tomorrow the latest.
-Dejan
07-31-2014 07:12 AM
Hi Carl,
I've just received a final update. If you want to point your Directory Integration to a different CUCM server that is holding the same user database and runs AXL service, you should be able to just change the AXL URL on MP and point to this new server. After this change is made and saved, we recommend restarting services on MeetingPlace (SSH to the server with mpxadmin account, changing to 'root', and running 'mpx_sys restart' command). Once the services are restarted and system comes back up, go to User Configuration > Directory Service > Directory Service Configuration and perform a Full Sync (make sure that Profile Number setting under Profile Number Configuration section is set to New users only in order to avoid any profile # change if any of the user profiles in CUCM was updated in the meantime)
Please, let me know of any questions you might have.
Thank you.
-Dejan
07-31-2014 11:17 AM
08-05-2014 07:11 AM
Hi Dejan
I have been on annual leave from work and have been communicating to you via the support community so have not had access to my work emails and only just found out on my return that you were also the engineer Cisco passed my TAC case to so thanks on both counts.
I cannot complete the work for 3 weeks due to change control procedures however i have a few queries if i could ask your expert knowledge :
1 - We already run L0 L1 and L2 backups, when completing this work and in the worst case scenario that we lose all user profiles are these backups the best way to restore or am i better exporting user profile and meeting information that can be re-imported seen as this is the only real data affected by this procedure ?
2- If a user is removed via the sync do the scheduled meetings also get deleted or do they remain and accessible ?
Thanks, Carl Ratcliffe
08-05-2014 07:33 AM
Hi Carl,
Restore from backups is the best approach if any corruption of data occurs. Export/import of users won't preserve the Unique User ID that the system ties to meetings. With Export/Import, you can preserve the user name and profile #, but the system won't be able to tie the user to already scheduled meetings. So, best approach is with Backup/Restore.
If a user is deleted, the meetings will still stay on WebEx site but won't be accessible unless Join before host was allowed during scheduling of meeting, or an Alternate host is configured to allow another user to start the meeting.
I hope this helps.
-Dejan
08-26-2014 04:45 AM
Hi Dejan
A change is scheduled for this coming Saturday to complete the work.
I just have a query regarding high availability. We have 2 Meeting Place servers operating in Active and Standby. When we make the recommended changes should we do this on the active then standby or is it better to do it on the standby server first then at least we can check AXL is working as it should before we make any changes on the active server as the AXL chnage is not a replicated parameter so needs to be manually configured on both the active and standby.
I can also point my outlook client to the standby server IP instead of the virtual IP to confirm that i can authenticate.
Thanks, Carl Ratcliffe
08-26-2014 05:03 AM
Hi Carl,
Making changes to Standby server without making that server an ACTIVE server won't allow you to test anything. Most of the services are stopped on the STANDBY server including Directory Service.
I advise you to follow the standard procedure and implement the changes to ACTIVE server first and then STANDBY. In any way, changes on STANDBY server won't take any effect until that server is made ACTIVE (in case of Primary server failure and manual failover to Secondary server).
Kind regards,
-Dejan
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: