Active Directory Questions

[spodonnell]

Can someone clarify what Active Directory integration

actually offers.

Does it offload authentication of users to the AD?

Does the CM Global Directory then reference the AD

instead of the internal Directory?

I've read through the documentation but I don't see

what this intergration actually does for you.

Scott

[dugrant]

The answer to both of your questions is yes. After installing the directory plugin, CallManager will no longer look to the DC Directory for any information.

When doing a search in the directory in the ccmadmin pages, you will see the users that you have in Active Directory, eliminating the need to add users into both AD and into DC Directory.

One other advantage is that user's will now use their AD password when logging into the CCMuser pages, so you the password rules you have for AD are now transparently applied to CM.

-Dustin

[spodonnell]

Thanks for the reply.

One last question.

I installed the Active Directory Integration on

a Test CM and noticed that the User Search parameter

would seem to indicate that it has to be specific to

a single OU. I have a customer with multiple OU's in the AD, can I support a search of Multiple OU's?

Scott

[dugrant]

Currently, we can only specify one OU as you said.

When a customer design's their LDAP directory, they should design a hierarchy into it, so that you have ease of administration and optomized search performance for applications that use the directory.

The AD plugin will search sub-OU's of the OU that you define, so as long as all of the user's are under that OU somewhere, we should find them.

-Dustin