cucm 11.51 won't sync with Active Directory

[bhickman]

Trying to sync AD to cucm 11.5.1.

experimenting now and setup a container in MS AD with practice users.

SETUP:

DirSync is activated.
Ldap setup: MS AD/samaccountname - successful
Directory configuration: used both upn and dn, search base is correct, no filters. Used default fields.
This is the user search base: OU=exp-unity,OU=Schools,OU=SWusers,DC=<our domain>,DC=<com>
LDAP Authentication: status ready.

The cm/trace/dirsync/log4j/dirsync0000x.log indicates that ccum is contacting ms ad and pulling info from the attibute fields.
There are no errors, but the users are not getting created in ccum.
There are no other users with the same info.

This is what I get when the sync stops: (took out time stamps)

Log from processing ad user 'expunity' (received the same log info on the other 4 users):

- DSDBInterface.updateUserInfo Enter updateUserInfo() - expunity
- DSDBInterface.createCustomUserFieldsMap Enter createCustomUserFieldsMap()
- DSDBInterface.createCustomUserFieldsMap strQry:SELECT typecustomuserattribute.name, typecustomuserattribute.enum FROM typecustomuserattribute, customuserattributename WHERE typecustomuserattribute.enum=customuserattributename.tkcustomuserattribute
- DSDBInterface.createCustomUserFieldsMap Exit createCustomUserFieldsMap()
- L1_TimeTaken_log_36_createCustomUserFieldsMap() 3 mSec
- L2_TimeTaken_log_36_createCustomUserFieldsMap() 2018-06-05 11:57:42.463-2018-06-05 11:57:42.466
- DSDBInterface.updateUserInfo No Custom User Fields
- DSDBInterface.updateUserInfo userInfo.getUserInfo() {userid=expunity, displayname=expunity expunitylast, firstname=expunity, uniqueidentifier=dbbb300f071c2948933d4855a69b8702, discoveryuseridentity=expunity@swisd.net, lastname=expunitylast}
- DSDBInterface.updateUserInfo userInfo.getSyncAgreementId() c20e559f-3d32-2783-de12-844bfe6285d5
- DSDBInterface.updateUserInfo uniqId:dbbb300f071c2948933d4855a69b8702 dbUserId:expunity agmtId1:c20e559f-3d32-2783-de12-844bfe6285d5
- DSDBInterface.updateUserInfo Ready to update - expunity
- DSDBInterface.updateUserInfo userInfo.getDBAttrNames() [uniqueidentifier, userid, firstname, middlename, lastname, manager, department, telephonenumber, mailid, title, homephone, mobile, pager, ocsprimaryuseraddress, directoryuri, discoveryuseridentity, displayname]
- DSDBInterface.generateDSLDAPUserInfo Query for dbUserId
- DSDBInterface.generateDSLDAPUserInfo strQry==> SELECT lower(name), value FROM typecustomuserattribute, customuserattributedata WHERE enum = tkcustomuserattribute AND fkenduser=?
- DSDBInterface.updateUserInfo dbUserInfo.getUserInfo() {discoveryuseridentity=expunity@swisd.net, manager=, uniqueidentifier=dbbb300f071c2948933d4855a69b8702, homephone=, department=, middlename=, userid=expunity, pager=, mobile=, lastname=expunitylast, firstname=expunity, displayname=expunity expunitylast, directoryuri=, telephonenumber=, ocsprimaryuseraddress=, title=, mailid=}
- DSDBInterface.updateUserInfo dbUserInfo.getSyncAgreementId() c20e559f-3d32-2783-de12-844bfe6285d5
- L2_log_updateUserInfo() dbUniqId:dbbb300f071c2948933d4855a69b8702 agmtId2:c20e559f-3d32-2783-de12-844bfe6285d5
- DSDBInterface.update Enter to update() 2- expunity - expunity
- DSDBInterface.update dbUserInfo.getEndUserPkId() 64d17b5f-fc0d-bd4c-7b50-73bfe472710f
- DSDBInterface.processCustomUserFieldsData Enter processCustomUserFieldsData() - expunity
- DSDBInterface.processCustomUserFieldsData strKey==>customfield3 strValue==>3
- DSDBInterface.processCustomUserFieldsData strExistingValue==>null strNewValue==>null
- DSDBInterface.processCustomUserFieldsData No Need to do any operation for customfield3-3
- DSDBInterface.processCustomUserFieldsData strKey==>customfield4 strValue==>4
- DSDBInterface.processCustomUserFieldsData strExistingValue==>null strNewValue==>null
- DSDBInterface.processCustomUserFieldsData No Need to do any operation for customfield4-4
- DSDBInterface.processCustomUserFieldsData strKey==>customfield1 strValue==>1
- DSDBInterface.processCustomUserFieldsData strExistingValue==>null strNewValue==>null
- DSDBInterface.processCustomUserFieldsData No Need to do any operation for customfield1-1
- DSDBInterface.processCustomUserFieldsData strKey==>customfield2 strValue==>2
- DSDBInterface.processCustomUserFieldsData strExistingValue==>null strNewValue==>null
- DSDBInterface.processCustomUserFieldsData No Need to do any operation for customfield2-2
- DSDBInterface.processCustomUserFieldsData strKey==>customfield5 strValue==>5
- DSDBInterface.processCustomUserFieldsData strExistingValue==>null strNewValue==>null
- DSDBInterface.processCustomUserFieldsData No Need to do any operation for customfield5-5
- DSDBInterface.processCustomUserFieldsData Exit processCustomUserFieldsData() - expunity
- L1_TimeTaken_log_36_processCustomUserFieldsData() 4 mSec
- L2_TimeTaken_log_36_processCustomUserFieldsData() 2018-06-05 11:57:42.473-2018-06-05 11:57:42.477
- DSLDAPUserInfo.checkForUpdate userInfo==>{userid=expunity, displayname=expunity expunitylast, firstname=expunity, uniqueidentifier=dbbb300f071c2948933d4855a69b8702, discoveryuseridentity=expunity@swisd.net, lastname=expunitylast}
- DSLDAPUserInfo.checkForUpdate dbUserInfo.getUserInfo()==>{discoveryuseridentity=expunity@swisd.net, manager=, uniqueidentifier=dbbb300f071c2948933d4855a69b8702, homephone=, department=, middlename=, userid=expunity, pager=, mobile=, lastname=expunitylast, firstname=expunity, displayname=expunity expunitylast, directoryuri=, telephonenumber=, ocsprimaryuseraddress=, title=, mailid=}
- DSLDAPUserInfo.checkForUpdate Checking attribute values fetched from directory
- DSLDAPUserInfo.checkForUpdate Checking remaining attribute values in database
- DSLDAPUserInfo.checkForUpdate UpdateAttrNames list is empty, checking for changes in sync agreement id and status
- DSDBInterface.update Default attributes data has not changed for user with pkid=64d17b5f-fc0d-bd4c-7b50-73bfe472710f
- DSDBInterface.update Exit update() 2- expunity - expunity
- L1_TimeTaken_log_36_update() 4 mSec
- L2_TimeTaken_log_36_update() 2018-06-05 11:57:42.473-2018-06-05 11:57:42.477
- DSDBInterface.updateUserInfo Exit updateUserInfo() - expunity
- L1_TimeTaken_log_36_updateUserInfo() 15 mSec
- L2_TimeTaken_log_36_updateUserInfo() 2018-06-05 11:57:42.463 - 2018-06-05 11:57:42.478
- DSNcsClient.process

'took out xml='

- DSDBInterface.sendUserData userList size==>2
- LDAPSync(c20e559f-3d32-2783-de12-844bfe6285d5)[Run] Sync completed ...
- LDAPSync(c20e559f-3d32-2783-de12-844bfe6285d5)[Run] Stop the process...
- DSDBTimerTask:setCounter agreementCounter:0
- DSDBTimerTask agreementCounter:0 running:false
- LDAPSync(c20e559f-3d32-2783-de12-844bfe6285d5)[Run] Cancelled timer task...
- LDAPSync(c20e559f-3d32-2783-de12-844bfe6285d5)[Run] Self cleanup...
- DSLDAPMain[clearReq] Clear ldapSync process for sync request : c20e559f-3d32-2783-de12-844bfe6285d5
- DSLDAPMain[clearReq] ldapSync process cleared from local mapping for sync request : c20e559f-3d32-2783-de12-844bfe6285d5
- LDAPSync(c20e559f-3d32-2783-de12-844bfe6285d5)[Run] Close existing ctx connection ...
- DSDBInterface.UpdatePlugInAttribute SQL-UPDATE DirectoryPluginConfig SET fullSyncStatus=0 WHERE pkid='c20e559f-3d32-2783-de12-844bfe6285d5'
- DSDBInterface.executeSQL Execute SQL update - UPDATE DirectoryPluginConfig SET fullSyncStatus=0 WHERE pkid='c20e559f-3d32-2783-de12-844bfe6285d5'
- L1_TimeTaken_log_36_executeSQL() 6 mSec
- L2_TimeTaken_log_36_executeSQL() 2018-06-05 11:57:43.402-2018-06-05 11:57:43.408
- DSConfig.setFullSyncStatus Change fullsyncStatus for c20e559f-3d32-2783-de12-844bfe6285d5 to 0
- DSDBInterface.UpdatePlugInAttribute SQL-UPDATE DirectoryPluginConfig SET connectedLdapHost='10.1.1.30' WHERE pkid='c20e559f-3d32-2783-de12-844bfe6285d5'
- DSDBInterface.executeSQL Execute SQL update - UPDATE DirectoryPluginConfig SET connectedLdapHost='10.1.1.30' WHERE pkid='c20e559f-3d32-2783-de12-844bfe6285d5'
- L1_TimeTaken_log_36_executeSQL() 7 mSec
- L2_TimeTaken_log_36_executeSQL() 2018-06-05 11:57:43.409-2018-06-05 11:57:43.416
- DSConfig.setSyncHost Change SyncHost for c20e559f-3d32-2783-de12-844bfe6285d5 to 10.1.1.30
- DSDBInterface.UpdatePlugInAttribute SQL-UPDATE DirectoryPluginConfig SET invocationID='c31691467382c141b5b7d2959cdf88b2' WHERE pkid='c20e559f-3d32-2783-de12-844bfe6285d5'
- DSDBInterface.executeSQL Execute SQL update - UPDATE DirectoryPluginConfig SET invocationID='c31691467382c141b5b7d2959cdf88b2' WHERE pkid='c20e559f-3d32-2783-de12-844bfe6285d5'
- L1_TimeTaken_log_36_executeSQL() 3 mSec
- L2_TimeTaken_log_36_executeSQL() 2018-06-05 11:57:43.416-2018-06-05 11:57:43.419
- DSConfig.setInvocationID Change setInvocationID for c20e559f-3d32-2783-de12-844bfe6285d5 to c31691467382c141b5b7d2959cdf88b2
- DSDBInterface.UpdatePlugInAttribute SQL-UPDATE DirectoryPluginConfig SET highestCommittedUSN='177200649' WHERE pkid='c20e559f-3d32-2783-de12-844bfe6285d5'
- DSDBInterface.executeSQL Execute SQL update - UPDATE DirectoryPluginConfig SET highestCommittedUSN='177200649' WHERE pkid='c20e559f-3d32-2783-de12-844bfe6285d5'
- L1_TimeTaken_log_36_executeSQL() 3 mSec
- L2_TimeTaken_log_36_executeSQL() 2018-06-05 11:57:43.419-2018-06-05 11:57:43.422
- DSConfig.setHighestCommittedUSN Change HighestCommittedUSN for c20e559f-3d32-2783-de12-844bfe6285d5 to 177200649
- DSNcsClient.process

- DSNcsClient.process Process CN on directorypluginconfig with action=u
- DSConfig.updateConfig TableName- directorypluginconfig
- DSConfig.plugInConfigUpdateCN AgreementId = c20e559f-3d32-2783-de12-844bfe6285d5
- DSConfig.plugInConfigUpdateCN AgreementId=c20e559f-3d32-2783-de12-844bfe6285d5 ,syncNow=0,Satus=1
- DSRTMTUpdate.resetAccountsFailed Resetting Accounts Failed counter to zero
- DSRTMTUpdate.resetAccountsSynchronized Resetting Accounts Synchronized counter to zero
- LDAPSync(c20e559f-3d32-2783-de12-844bfe6285d5)[Run] Exit LDAPSync for agreement=c20e559f-3d32-2783-de12-844bfe6285d5

Please help.

[bhickman]

Thanks for that information. It looks like the subtle R2 is the problem.
I will try to upgrade to 12.

[Maren Mahoney]

Don't upgrade to CUCM 12 without a lot of planning. Among other things, the licensing model has completely changed and you don't want to go there until you are ready.

As Jaime pointed out, I was reading from the PDF for 11.5(1) I downloaded last year. The current online documentation says that 11.5(1) is compatible with AD 2012-R1/R2 and MLDS 2012-R1/R2 so that is not the answer after all. I don't know what the problem is, though.

[tonypearce1]

I disagree with you on the cucm 12 upgrade complexity. I found it pretty straight forward. Yes licensing has changed but IMO it's more simple in 12. To get to 12, you just export the license request from PLM and send it to the Cisco licensing team to convert your licenses and add them to your cisco.com smart account. Then you upgrade CUCM. When you log in to CUCM you then use the gui to register the CUCM pub with the smart account and the licenses are sync. Not really much more to it than that. 

Must of course read the upgrade guide. There is not much thorough info there about the licenses, it doesnt tell your exactly what to do. So to save any confusion on my part I just emailed the licensing team with my intent and the license request file. 

[bhickman]

Not Solved.  New wrinkle.

I found a post at https://www.cisco.com/c/en/us/support/docs/unified-communications/unity-connection/117737-problem-uc-00.html which directed a look at the database tables.  I found the entry of the user I have been trying to import in the table 'u' with a pkid assigned and the info from 'active directory'.  But I didn't find any other entries in the tables listed in the URL above.

It appears Unity is reading the ldap directory just fine but will not finish the import.

I have rebooted the server with no effect.

Still trying to solve.