CUCM integration with ADAM

[alfredobosca]

Hello,

I have unified 2 comapnies and I have 2 Active Directo. So I configured a ADAM server and this server hasn't the samaccountname attribute. So I configured a script to pull the old samaccountname to uid attribute.

This UID attribute is empty by default. Yesterday applied the changes on cucm and configured ADAM server but ocurred the next errors:

The error log shows:

ERROR [DirSync-DBInterface] common.DSDBInterface (DSDBInterface.java:339) - DSDBInterface.updateUserInfo LDAP data discarded: Missing LDAP attribute: Attribute Count=1 AgreementId=fdafd20d-c7d7-e287-9bed-479e0587762b
uniqueidentifier=eeb0d994894db541a006686ac38873e7

ERROR [DSLDAPSyncImpl(fdafd20d-c7d7-e287-9bed-479e0587762b)] ldapplugable.DSLDAPSyncImpl (DSLDAPSyncImpl.java:1364) - LDAPSync(fdafd20d-c7d7-e287-9bed-479e0587762b)[searchInternalExact] com.sun.jndi.ldap.LdapReferralException: Continuation Reference; remaining name 'dc=xxx, dc=xxx'
MESSAGE Continuation Reference
com.sun.jndi.ldap.LdapNamingEnumeration.hasMoreReferrals(LdapNamingEnumeration.java:333)
com.sun.jndi.ldap.LdapNamingEnumeration.hasMoreImpl(LdapNamingEnumeration.java:208)
com.sun.jndi.ldap.LdapNamingEnumeration.hasMore(LdapNamingEnumeration.java:171)
com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.searchInternalExact(DSLDAPSyncImpl.java:1345)
com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.LDAPFullSync(DSLDAPSyncImpl.java:938)
com.cisco.ccm.dir.dirsync.ldapplugable.DSLDAPSyncImpl.run(DSLDAPSyncImpl.java:341)

Best regards,

[Jaime Valencia]

Are you sure the uid has been properly populated and that nothing weird (special characters, non-printable characters, etc) were added???

[Igor Gaydarov]

Hi,

According to this guide, the uid field is not supported in multi-forest environment:

Configure CUCM

ADAM/AD LDS synchronization and authentication is supported in CUCM Version 9.1(2) and later.

1. Choose System > LDAP > LDAP System.
2. Select Microsoft ADAM or Lightweight Directory Services.
3. You can choose any of these LDAP userid attributes: mail, employee Number, or telephone Number.

   uid is only used with standalone ADAM/AD LDS and not with AD multi-forest support.

So you should use either mail or employee Number or telephone number.

Best Regards,

Igor Gaydarov