LDAP sync in CUCM 9.1

[nishantjagdale]

I have to synchronize end user in CUCM 9.1 with active directory.

My concern is “This is not a new setup. There is existing users configured with Non-standard way CUCM and active directory. If we will sync LDAP directory with End user, what will happen with existing things which is there in both active directory and CUCM End User.”

Can somebody help me out of this?

[Atul Gaba]

Local users that match the LDAP userid will become Active LDAP synchronized users and users that don't match the LDAP userid will stay as Active local users.

-Atul

*do rate helpful posts*

[Frank Janka · Accepted solution]

Hi,

what will happen when the LDAP database is not reachable for some days? Will the CUCM delete the existing users?

Is there an option to expand the deletion time?

[nishantjagdale]

Hey Frank,

No. CUCM will not delete existing user.

CUCM database will not change untill it gets sync with the AD. It will remain as it is like how it was sync last time with AD. 

[Jaime Valencia]

That is completely wrong, users will be deleted if they go over the time explained in the SRND for the garbage disposal mechanism and LDAP is not reachable.

[Frank Janka]

That is too bad. No workaround?

For example on a Weekend the connection to the LDAP gets lost and on Monday there are no users anymore?

[Jaime Valencia]

Manually turn your users into local users is the only workaround, there is no way to change the garbage disposal mechanism settings. Or fix your LDAP connectivity before that happens.

Once again, if you want all the details of how the garbage disposal works, refer to the SRND.

[nishantjagdale]

Thanks Atul.

If active user and active LDAP user are different and extensions and other details are same;

How I will come to know that same extension is assigned to more than two user. Is there any way I can correct the data?

[Jaime Valencia]

You would need to BAT export and fix either the local user, or the LDAP user.