07-27-2017 05:28 AM - edited 03-17-2019 10:53 AM
Hello to everyone,
does anyone knows the minimal required attributes on MS Active Directory in order to import and sync a user to CUCM from MS AD LDAP integration?
On SRND of 11.X describes only the mapping between Unified CM User Field and Microsoft Active Directory.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/srnd/collab11/collab11/directry.html#74101
Best Regards
Anestis
Solved! Go to Solution.
07-27-2017 10:25 AM
Out of curiosity I just tested this. Looks like last name is required, but not first. I created a user with no first name and was able to sync. See attached.
07-27-2017 06:24 AM
The answer would depend on the existence of a custom filter applied to the LDAP directory config in CUCM. For example, if I have (Company=*) in the custom filter, the user would need a company in AD in order for the sync to happen. Without a filter, CUCM will sync all users within the LDAP User Search Base. Beyond that, the user would need the LDAP field configured to map to the CUCM user ID (System > LDAP > LDAP System > LDAP Attibute for User ID). There are no other required attributes as far as I know.
Brandon
07-27-2017 11:26 PM
Hi to all,
thank you every one about the feedback, I will give my 5 points to Brandon because he spend some time to test it and give us a response with an output.
Thanks again
Anestis
07-27-2017 09:13 AM
Absolute minimum is First and Last name. Without a LDAP filter whatever your search base is after sync will suck in all users that have at minimum First and Last name attributes.
07-27-2017 10:25 AM
07-27-2017 10:28 AM
I stand corrected, I guess it's out of habit that the first name is kinda a given however if last name is left out sync for that user will fail. Corresponds with mandatory fields in end users.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide