Write back to LDAP

[timuryuldashev]

Hello Community. Please help me to find this option in CUCM 15 in details. 

The Write back to LDAP option allows you to write the Primary DN chosen from Unified CM back to the LDAP server. LDAP attributes available for write back are: telephoneNumber, ipPhone, and mobile.

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/admin/15/systemConfig/cucm_b_system-configuration-guide-15/cucm_b_system-configuration-guide-14_chapter_011011.html

We recently installed CUCM 15. (UCSInstall_UCOS_15.0.1.10000-32.sha512.iso) In LDAP Directory section I cannot find the option "Write back to LDAP", that mentioned in documentation. Attached you may the screenshot. 

[timuryuldashev]

Attached

[Roger Kallberg]

I can't recall I have ever seen that option in CM. I just looked around in the systems we have and none of them have the option "Write back to LDAP" in LDAP configuration.

[timuryuldashev · Accepted solution]

User Interface Updates

To support this feature, the following menu items are updated in the Cisco Unified CM Administration user interface:

• In the System > Service Parameters Configuration page, a new service parameter Provision Jabber Device As Part Of LDAP Sync is added under “Cisco DirSync” service, to enable auto provisioning of Cisco Jabber devices.
• If the Provision Jabber Device As Part Of LDAP Sync service parameter is enabled and you have selected Microsoft Active Directory in the System > LDAP > LDAP System Configuration page, a new section Jabber Endpoint Provisioning is displayed on the LDAP Directory Settings page.

Please find the below link as a reference:

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/rel_notes/15/cucm_b_release-notes-for-cucm-imp-15.html#Cisco_Concept.dita_2f92e619-5b7c-4478-9b9f-81f474813cb1

[Roger Kallberg]

I wonder how Cisco has envisioned this working for other than single site deployments? IMHO this is a pretty unuseless feature.

[Abdelrhman Elmenyawe-]

Hello Brother,

How can you use this feature to update the LDAP AD attribute "TelephoneNumber"?, as each time i checked the box for "TelephoneNumber" it turns back to unchecked again 

[Nithin Eluvathingal]

I haven't tried this yet, and my wild guess is that the users used for LDAP sync, if it's a read-only user, I think that could be the reason.

[Abdelrhman Elmenyawe-]

Hello Nithin,

No i used another service account that had (read/write) privilege on a specific group (for test).