Convert user from LDAP to local, Can UCCX app admin user login?

[KRONGKWAN SUCHONVANICH]

My customer using CUCM 8.5 and UCCX 8.5. CUCM was sync users with LDAP. UCCX app admin user as well. Customer need to un sync LDAP. I'm not sure that when we un sync user with LDAP, the exist uccx app admin user will can login to uccx?

[Maren Mahoney]

LDAP only affects End User accounts. Application User accounts are always local to CUCM and are not affected by LDAP Sync or LDAP Auth.

I would encourage you to Export your End Users prior to turning off LDAP Sync. It's been long enough that I don't remember the full behavior of End User accounts in CUCM 8.6 and earlier (when LDAP was all-or-none for End User accounts, but it is possible you will lose the accounts or the account settings. If you have an export of the data you can restore it if something bad happens.

Maren

[Jonathan Schulenberg]

This will be quite disruptive since, AFAIK, there no way to convert a CUCM End User from LDAP to local as there is with CUC; the users will be marked inactive and then deleted the following night. Every CUCM End User - agent, supervisor, admin, reporting - configured in CCX will be lost! You will need to manually add new users (ie set an IPCC Extension in CUCM) and then re-skill each agent, set Team memberships, assign supervisors, etc. with CUCM local End Users. Be sure to take careful notes before starting!

The built-in application administrator defined on CCX at initial install will still be able to login and the CUCM Application Users CCX uses for CTI and AXL will remain functional however.

[Roger Kallberg]

You can change a LDAP synced user to local in CM, but it’s a per user account action. So if there are many accounts it would likely require some scripting to get it manageable.

[Carlo Poggiarelli]

Hi,

To a bulk convert ldap users to local users, you can export all users , open the resulting csv file in a excel spreadsheet and change the “Status “ value from 2 to 1 and reimport it by updating users step on BAT.

HTH

Regards

Carlo

[Roger Kallberg]

In my experience that would work up to a certain number of users. When I’ve tried to run an export of users in our setup with around 35K users the export has errored out. Likely it could be possible to run a SQL update of all users from the CLI to set the value to 1 as you wrote.

[Carlo Poggiarelli]

Just to add a bit..

UCCX App Admin is locally defined on UCCX Server Node so webapp admin it is not impacted by activities on CUCM

HTH

Regards

Carlo

[KRONGKWAN SUCHONVANICH]

Unfortunately, I don't have webapp admin username and password. In this case I think I will lost appadmin to access to UCCX. T_T 

[Carlo Poggiarelli]

If you have the UCCX OS admin credentials you can change webapp admin username and password.

As mentioned before you can bulk convert ldap users to local users also via CUCM cli by issuing the following command:

run sql ccm update enduser set fkdirectorypluginconfig=NULL where userid like ‘%’

HTH

Regards

Carlo

utils reset_application_ui_administrator_name
utils reset_application_ui_administrator_password

Through cli you can also know which uccm user as been configured as app admin.

show uccx appadmin administrators