cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
206
Views
0
Helpful
2
Replies

LDAP Filter Question

Yort Mantup
Level 4
Level 4

Looking to implement autoi-registration but really only want it to work for one site because that site involves 99% of new phone deployments.  We have 6 different Domains.    The site is on ACME domain.  There are several sites with users on the ACME domain. 

Current Custom Filter looks like this:  (&(|(&(objectclass=user) (!(objectclass=Computer))(!(UserAccountControl:1.2.840.113556.1.4.803:=2))) (objectclass=contact)) (ipphone=*)) which is used by the only LDAP Directory Sync with user search base of dc=com.  The filter looks for any new user added to any domain with an the IP field filled in and sync them to CUCM.

To achieve what I want to do.  I believe I need to eliminate the current LDAP Sync Directory and create a separate one for each domain an altering the current user search base to reflect the domain.  So for ACME it would like this:  dc=ACME,dc-COM. The other 5 sites would use the existing LDAP customer filter above. 

I am struggling with the custom filter to use for the ACME LDAP Directory Sync.  There are multiple sites on the ACME domain and I only want SITE A to utilize auto registration.  So I want the filter to only assign a self service user ID that has the AD field "Office" populated with SITE A.  I tried this thinking it would look for that field but it did not work.  Any idea's suggestions?

(&(|(&(objectclass=user) (!(objectclass=Computer))(!(UserAccountControl:1.2.840.113556.1.4.803:=2))) (objectclass=contact)) (Office=SITE A) (ipphone=*))

2 Replies 2

Jaime Valencia
Cisco Employee
Cisco Employee

Why don't you use a different approach and just avoid the users from dialing the self-provisioning DN via CSS and partitions?

HTH

java

if this helps, please rate

Jaime,

True.  But as users from other sites are created they are assigned a self service user ID which is what their extension will be.  I want those extensions only assigned to users at this particular site.