07-10-2012 02:39 PM - edited 03-14-2019 10:11 AM
Hi Guys
Someone has a procedure for integration between CUCM 8.6/UCCX 8.5 and LDAP?
TIA
Cristian.
07-11-2012 01:25 PM
Hey Guys
Help please.!!
07-11-2012 06:59 PM
UCCX integrates into CUCM via AXL only, and has not direct connection to LDAP. This is different from say CUC or CUPS, which do connect to LDAP directly.
And the CUCM LDAP instructions can be found in the Admin Guide.
Just so you know, all local accounts on CUCM, which do not have a matching LDAP account, will be marked for deletion. The only local accounts you can have in CUCM are application users, not End Users. So if this is a production box, be sure you know that.
Good luck and happy integrating!
Anthony Holloway
Please use the star ratings to help drive great content to the top of searches.
07-12-2012 06:55 AM
Thanks Anthony
If I performed a integraton between CUCM and LDAP, will be lost the agent user´s account but the uccx admin remain active?
What uccx account I´ll configure in the LDAP before to performed the integration?.
I need a procedure to perform this integration and management keep of the uccx.
TIA
Cristian
07-12-2012 07:30 AM
If for example your UCCX admin account was named: uccxadmin, then before you created the LDAP integration, you need to make sure that you have an account within LDAP with that same name: uccxadmin.
If you do, then the account will remain. If you do not, then the account will be marked for deletion.
Since you are on UCCX 8x, if you mess this up, and need to assign a new administrator, you will need CLI access to your UCCX and run the following command:
set uccx appadmin administrator
Anthony Holloway
Please use the star ratings to help drive great content to the top of searches.
07-12-2012 08:10 AM
Dear Anthony
Then, this will be the procedure for the integration:
1.- Configure the uccxadmin and the agent´s accounts in the LDAP
2.- Performed the integration between CUCM 8.8 and LDAP
3.- Then, check the access to uccx using uccxadmin
4.- Check the login of the agent
5.- Finish
Somethin else?
TIA
Cristian
07-12-2012 09:15 AM
Yes, that looks right. Don't forget you need to setup LDAP Authentication and LDAP Directory for UCCX to work.
Another thing to note: CAD logins are case sensitive, whereas CUCM CCMAdmin and UCCX AppAdmin are not.
So if in your LDAP, the Agent username is: Agent1, then that's exactly how it needs to be typed into CAD.
Anthony Holloway
Please use the star ratings to help drive great content to the top of searches.
07-12-2012 09:27 AM
Dear Anthony
Then, adding, I performed the integration between CUCM 8.8 and LDAP + integration between UCCX 8.5 and LDAP, right?
TIA
Cristian
07-12-2012 09:30 AM
Not quite. UCCX does not integrate to LDAP. UCCX integrates to CUCM via AXL.
So the LDAP authentication request looks like this:
CAD -> UCCX -> CUCM -> LDAP
And the response:
LDAP -> CUCM -> UCCX -> CAD
CUCM is like a "middle man" between UCCX and LDAP.
Anthony Holloway
Please use the star ratings to help drive great content to the top of searches.
07-18-2012 09:44 AM
Dear Anthony
For the Supervisor account , this must be configure within LDAP?
TIA
Cristian
07-19-2012 12:55 AM
Hi Christian
All the user accounts in CCX (aside from the platform administrator and the 'application administrator' account you define when building the server) must come from LDAP - that includes agents, supervisors, and administrators.
They must be 'End Users', so must be in LDAP if LDAP sync is enabled. You then grant them Supervisor rights as normal.
Principal Engineer at Logicalis UK
Please rate helpful posts...
08-27-2012 08:39 PM
Hi Aaron -
Old post here, but figure Id ask.
I loaded the UCCX with "administrator" with OS "uccxadmin" for the Application login.
Im assuming I should set the UCCX Administrator username something other than "uccxadmin" correct?
I feel like i have stumbled upon usernames that are same in OS and App and they do not work. (must be different)
Thanks and hope all is well!
09-04-2012 12:43 AM
Hi Tommer
Yes, the 'user' administrator (i.e. not the one you enter during the linux build) should be different to the other users.
Personally I don't like the practice people have of making the platform/OS admin and the 'application' administrator the same username - they aren't the same account and there is no password sync between them. Also the app administrator is replicated in the cluster, whereas the local one can be set uniquely per server.
UCCX is odd in that it requires that third 'end user' admin - as I say, you would want that to be a different username, as if you use the same username you will end up with an application user and an end user with the same username. That will confuse things if it doesn't break them!
Aaron
07-24-2012 09:54 AM
Dear Anthony
The user axl_admin is a End User. This must be configure within LDAP or I´ve to configure like App User within CUCM??
TIA
Cristian.
07-24-2012 10:46 AM
cristian.munoz wrote:
Dear Anthony
The user axl_admin is a End User. This must be configure within LDAP or I´ve to configure like App User within CUCM??
TIA
Cristian.
That must exist in LDAP.
Anthony Holloway
Please use the star ratings to help drive great content to the top of searches.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide