LDAP directory setup CUCM6.13

[FureyaAtaker]

It is suggested that the entire set of users defined in the LDAP directory is not imported into Unified CM cluster.

Because of our existing AD-structure, we will not be able to control the account export and for instance, omit OUs and none-IP-phone users from the directory synchronization via AD.

What are some of the control mechanisms to limit the number of use accounts imported, regardless of the LDAP database size?

[Tommer Catlin]

You can re-organize your OUs to make it work correctly with CUCM. Basically, CUCM can sync up to 6 OUs I believe (top level, sub levels, does not matter)

Your other option is to find a third party LDAP tool to pull your AD accounts/passwords to a "merged" LDAP directory that CUCM can then sync with.

For service accounts, you can add in the Tildi ~ symbol in front of the first name and/or last name and CUCM will ignore this account and not sync it.

[shane.orr]

I use the LDAP Filter on the IPPhone Field in AD described breifly in the post below. Of course it is not supported by Cisco but works great.

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Unified%20Communications%20and%20Video&topic=General&topicID=.ee6c82b&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cd31e25