Remove LDAP Sync/Authentication CUCMBE

[lpaquin]

We have actually a CUCMBE system in production. The end users were created with LDAP server. We need to remove LDAP sync and Authentication.We would like to keep all end users in CUCMBE local. We try to remove it with many process and nothing worked well.

We did thoses steps :

We export all end users with bulk

Remove the LDAP Authentication

Delete Directory LDAP

Remove the Synchronisation

Delete all end user in CUCM

Import all end user with bulk.

Result : In the Unity Connection all users have no more mailboxes and are like brand new. I tried to restore only the voicemails with DRS and it’s not working.

We did a complete restore of the System with DRS.

Remove the LDAP Authentication

Delete Directory LDAP

Remove the Synchronisation

Result : The Enduser are not able to access CCMUSER webpage. So we try to force a new password and PIN in the end user page of one user and still not working. (The end user look to be really local to cucmbe because we don't have anymore LDAP Sync Status field in the end user configuration page)

How could we keep all end user configuration created by LDAP local to the CUCMBE ?

Thanks

[Chris Deren]

Why did you remove the users?

When you remove the LDAP integration the users will simply get converted to local users, no need to delete them.

Chris

[lpaquin]

I tried to only remove the LDAP integration. And that's correct all end user get converted local users.

The issue is once user get local, the credentials (password & PIN) are not anymore good.

So we tried to modify all end user with a new password and PIN on end user configuration page and it's not working.

[lpaquin]

There the way, to fix it :

1) Delete the LDAP agreement -> Disable Integration -> STOP the DirSync service.

2) SSH to the publisher and run this command to fix the accounts:

     run sql update enduser set status=1