Deleting Active Enabled LDAP Synchronized User

[tyoder]

I work in the tech department of a school district and I am new to working with our Cisco call manager. I am trying to cleanup phones / voicemail / user lists as they all contain out of date information.

I have been going through our user list and yesterday I deleted three users who are no longer employed with our district. I switched them from "Active Enabled LDAP Synchronized User" to "Enabled Local User" and then deleted them.

They are inactive in our LDAP, but when I checked this morning, they have all returned as "Active Enabled LDAP Synchronized Users."

As far as I can tell, all of the connected systems have them as inactive users, but here they are again.

Any thoughts that could assist me in finding where to look?

Thank you.

[Roger Kallberg]

Do you possibly use a custom LDAP filter in CM for your LDAP synchronisation? The default build in LDAP filter that is in use if no custom filter is in use, includes a filter for not bringing inactive users over, but if you use a custom filter you might have left that part out, so you’d get all states of users brought over.

Apart from this you should not need to do anything related to end user objects in CM as they would be removed by the LDAP synchronisation and the garbage collector in CM that runs daily at 3 am.

[tyoder]

I looked at the LDAP filters and we do have two in place. One is for department and one is for telephoneNumber.

I took over these responsibilities when our network admin left, so the system was already set up. As a result, I do not know how some of the settings interact. Am I wrong in thinking these two fields shouldn't have any effect on my issue?  

[Roger Kallberg]

You can only use one filter definition at a time, but the filter as such can include multiple different filter values. It would be easier if you could share screenshots of your LDAP synchronisation configuration and the filter string that you have in the LDAP filter.

[Roger Kallberg · Accepted solution]

This chapter in the CM administration guide outlines the default LDAP filter in CM for AD and some other LDAP sources. Chapter: LDAP Directory Setup 

[tyoder]

Roger,

Thank you for your assistance. We think we have it figured out.

It appears to have been a LDAP filter that was set up for telephoneNumber. The leaving employees were phone was not removed and the new employees phone was not added. It makes sense now that I understand it better.