11-19-2010 07:40 AM - edited 03-16-2019 02:01 AM
Hi Everyone
We would like that any one who accesses the cisco call manager , it should ask for credentials like it is used for Network devices ( Routers /Switches)
so that one keeps track of any changes being made on it
Can we add Cisco Call Manager Server to Cisco ACS Server
11-19-2010 07:51 AM
CUCM already asks you for a user/pwd for admin pages and ccmuser. If you don't have those you can't log in
CUCM does not integrate to any other authentication mechanisms for login.
HTH
java
If this helps, please rate
www.cisco.com/go/pdihelpdesk
11-19-2010 08:03 AM
Java is correct (+5 J-man) but I would like to clarify that you can have CUCM authenticate users against an external LDAP repository. You would lose centralized accounting on the ACS server, but it is likely that the ACS is also using LDAP for credential authentication. Which may get you a little closer.
So, Authentication can be done locally on the CUCM or via a backend LDAP repository. Authorization and Accounting are done on the CUCM. The CUCM provides very granular authorization controls. The accounting is provided by the auditing features embedded in later versions of CUCM.
http://www.netcraftsmen.net/resources/blogs/audit-logs-on-cucm.html
HTH.
Regards,
Bill
Please remember to rate helpful responses and identify
07-09-2024 04:16 PM
Hi Java and Bell,
How can we enable accounting on CUCM version 12.5?
we have enabled the SSO on logging-in on CUCM
also i cannot access the link you provided @William Bell
07-10-2024 06:18 AM
Here is an updated link to the William Bell blogpost:
https://netcraftsmen.com/audit-logs-on-cisco-unified-communications-manager-cucm/
Maren
03-16-2017 04:08 AM
Hi Jaime,
If CUCM can not use AAA, then is there any option to check which user has changed any changes to configuration.
03-16-2017 06:44 AM
Yes, this has been asked plenty of times before
http://docwiki.cisco.com/wiki/CUCM_FAQ#Can_I_review_who_is_making_changes_in_CUCM.3F.3F
03-16-2017 07:09 AM
Jaime,
You can use ldap authentication for cucm administration now, is that not correct? It doesn't allow all features that are related to system administration, but the day-to-day admin stuff can definitely be allowed for ldap users.
03-16-2017 07:12 AM
You have been able to add LDAP users to the CUCM admin group for quite a long time, that only enables access to the system, what a user can do, is based on roles and groups.
12-07-2018 05:44 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide