TMSE user import From CUCM with LDAP authenticaion

[Criss Sawyer]

Hello All,

we are plannig to deploy CMR for users suing TMSPE. we need to be able to import user from CUCM and keep AD authentication for users that will be using CMR.

is there anyway we can achieve this?

regards,

[Criss Sawyer]

hello,

i just want to mentionne that CUCM is already intragted with Active Diretory

[Criss Sawyer]

hello,

can we for the same search base as in CUCM? what about ldap authentication, can we set up CMR user to use the same credentials as AD?

[Rajkumar Yadav · Accepted solution]

Hi Alex,

You can import the user in TMS / TMSPE direct from AD along with custom filter.

Also you can  enable the AD authentication and Windows server to be part of the the domain.

After this user can use the LDAP credential to authenticate for CMR on Premises.

http://www.cisco.com/c/dam/en/us/td/docs/telepresence/infrastructure/tmspe/install_guide/Cisco-TMSPE-with-Cisco-Unified-CM-Deployment-Guide-1-3.pdf

Please see the page 19 of above document where you can enter the user import from AD.

Also you need to enter the Active directory configuration on TMS from network settings.

Administrative Tools > Configuration > Network Settings > Active Directory

It's possible in latest version.

Regards,

Raaj

[Criss Sawyer]

Hello Raj,

So as far as i understand, the only way to enable AD Authentication for CMR is make TMS server a member of domaine right?

also i have pruchased the below license

L-TMS-PE-25
CON-ECMU-TMSPE25

so, im not sure how can use those limited licenses among the many users that will be imported throug AD.

thx in advance for your help

[Rajkumar Yadav]

Hi Alex,

Yes that is one part of configuration along with that you need to mention the AD details in the network setting to enable the LDAP authentication.

Now coming to your TMS-PE-25 user, this is for CMR on Premises license and you can assign the CMR on premises service to selected heavily video used user or management user. Remember you need to provision the CMR on prem for user or send them the Email to enable this by themselves.

So if only few user uses this then it will never violates this license.

Even though you can still create many user in TMSPE.

Now If you have many user in TMSPE and you have used the PMP license on the Conductor and vTS running in multiparty license mode then each user created in TMS will be counted against the PMP license installed in the Conductor.

For Example if you have 25 PMP and in TMS you have 100 user then it will send alarm on Conductor for non compliance.

Please let me know if you have more query.

Regards,

Raaj

[Rajkumar Yadav]

Hi Alex,

Creating another OU in AD is also one option.

Regards,

Raaj

[Criss Sawyer]

Hello Raj,

thx for all.

So, TMS-PE-25 mean that only 25 user can use the CMR?!! or 25 user login simultansly to CMR portal?

what is PMP license?, we have only one existing MCU and we have purchased license for Conductor XC4.0 but i can't  PMP among those licenses

regards,

[Rajkumar Yadav]

Hi Alex,

I think you can enable only for 25 user and they can login simultaneous.

I don't think it works in the way like you can configure for 50 user and 25 can be used anytime, I'm not sure may be Cisco guy can help us.

(If Manish Gogna is reading this then please confirm)

For PMP license, this are new licensing structure 

PMP and SMP are personal and shared multiparty license which are compatible only with vTS, not with MCU ( MCU works on traditional port base)

This allows the vTS to work in full capacity without any screen license.

For example if the vTS is 8vCPU then it will allow 5 full HD and 10 HD screen capability ( hardware limit) & for 32vCPU it will allow 10 full HD and 20 HD screen capability

PMP license is user based, binded to single user and provides unlimited conference

SMP license is room based ( conference/meeting room) where it can be shared among many user and not binded to any single user, also provide unlimited conference.

It basically works on API between Conductor and TMS, Conductor and TMS will check if the user who is doing the ad conference or scheduled conference is there in TMS and if  that user is there in TMS then it allow with 1 PMP usage.

Incase the TMS does not have the user then it would send same value to conductor and it would be counted as 1 SMP license

Here CUCM is also in the picture if its CM centric approach.

Since your setup is not having the vTS then you need not to be worry about this.

Regards,

Raaj

[Patrick Sparkman]

L-TMS-PE-25 is if you're using TMS and VCS to provision endpoints such as EX60/90. No licenses are required to enable CMR Premises as it is a free feature of TMSPE.

[Rajkumar Yadav]

Hi Patrick,

Yes your right, my bad.

Its used for endpoints only.

Cisco TMSPE software is available to download for existing Cisco TMS customers with a current support contract. The software can be installed and features such as Smart Scheduler and Collaboration Meeting Rooms are available to use freely, with no additional costs. Customers who need to provision devices against the Cisco Video Communications Server (VCS) using Cisco TMSPE,need to order LIC-TMS-PE-25

Regards,

Raaj

[Criss Sawyer]

hello all,

thank you guys for your valuable help. 

bottom line:

- TMSPE user can be imported from AD and AD authentication can be enabled by making TMS a member of domaine and configue AD network setting on TMS

- no license limitation for number of users that can use CMR.

regards,

[Patrick Sparkman]

You configure your CMR users within TMSPE, you can manually create the users or import in them from AD, there isn't a way to link CUCM users to TMSPE users.  Suggest you take a look at the TMSPE Deployment Guides on how to set this up.

[Patrick Sparkman]

Yes, you should be able to use the same search filter.  Users will need access to login to your TMS server, so they can create and manage their CMR, it's all documented in the deployment guides.

[Criss Sawyer]

hello patrick,

thx for your help. i just can't find how to setup LDAP authentication for TMS Users.