New users not syncing from CUCM to CUC.

[redsox2002]

Forgive me in advance . . . I've never dealt with Cisco telephony before.  I inherited this CMBE (I think) setup and it appears to have a couple of issues.

Cisco Unified CM Administration System version: 8.5.1.11900-21

Cisco Unity Connection version: 8.5.1ES16.11900-16 

CUCM is syncing from our AD LDAP.  That seems to work just fine (add an AD user in the right OU and they appear in CUCM End Users with LDAP Sync Status=Active).

Older users seem to exist in CUC and their voicemail seems to work just fine. But users created in the last year or so don't seem to sync to CUC (I'm one of them).  My account exists in CUCM, my phone works, my information is displayed on the phone, etc., but my account never appears in CUC.

Now here's the wonky bit:  In all three of the identified cases, new users were assigned the extensions of terminated users.  What I found yesterday was that I could re-enable the terminated users' AD accounts, reset the terminated users' PINs in CUCM, and then the new users would be able to access those mailboxes.  The terminated users have existed in CUC the whole time.

I've read multiple times that users "must have a device associated with them and also a primary extension assigned", but:

1. The broken users do have primary extensions assigned.

2. Lots, if not all, of the working users don't have any device associations.

3. I've tried my account with and without device associations.

Any pointers would be greatly appreciated!

Thanks,

Chaz

[Brandon Buffin]

In CUC admin, check the settings under LDAP > LDAP Directory Configuration. Also, users do not sync automatically. You need to go to Users > Import Users to add new AD users.

Brandon

[redsox2002]

My apologies for dropping this so abruptly and for so long.  I immediately got slammed with other work.

After taking the time to get positively medieval on the years of cruft in this system (disabling users and waiting for them to flush, deleting unused device profiles, tracking back cross-user/device stupidity, manually deleting one user from the DB directly, etc., etc.) I was able to get everyone working with a mailbox . . . except for me ; >  I simply never appear as a user to import in CUC.

I can create a new test user and get everything working for them with no problem.

I can even keep the extension assigned to me, but let the mailbox get created for the new test user, hit "Messages" on my phone and pick up the messages like it was my mailbox. (That's essentially what I said above: "What I found yesterday was that I could re-enable the terminated users' AD accounts, reset the terminated users' PINs in CUCM, and then the new users would be able to access those mailboxes.")

My name will just never appear in CUC.  Again, any pointers would be greatly appreciated.

bbuffin  I'm familiar with the operation of the Import Users screen, although there's no mention of that in the scant documentation left by other admins, so I was assuming that it was supposed to sync automatically on some schedule.  And my, admittedly suspect, recollection was that in a CMBE setup, there was no direct LDAP sync to CUC...CUCM syncs from LDAP and CUC syncs from CUCM.

Thanks,

Chaz

[Brandon Buffin]

Chaz,

In CUC admin go to LDAP > LDAP Directory Configuration. This should be setup to pull users directly from AD. Look at the setup for your directory. Does it have an LDAP Custom Filter defined? If so, look at the config for this filter under LDAP > LDAP Custom Filter. It's possible that this filter has an attribute defined that is not in your AD profile. For example, my filter has Company=* indicating that the user must have a company defined in AD in order to sync with CUC.

Brandon

[redsox2002]

Brandon,

There's no such LDAP>LDAP Directory Configuration item available in CUC Admin.  I have similar things in CUCM Admin (and there are no Custom Filters defined there).  I attached a couple of screenshots.  I do seem to remember that buried somewhere in the CUC left-nav, one of the items gave a top menu where you could see an LDAP option grayed out, but I can't remember where that was now.

Do know what log I might consult to see what it's complaining about?

Thanks,

Chaz

[Brandon Buffin]

Under System Settings.

[redsox2002]

Screenshot of System Settings attached.

NB:

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucmbe/admin/9_1_1/ccmsys/CUCM_BK_B672BA65_00_be5k-system-guide-91/CUCM_BK_B672BA65_00_be5k-system-guide-91_chapter_010001.html#CUCM_TP_CC55657D_00

"The Cisco Unity Connection directory comes from Cisco Unified Communications Manager; that is, components in Cisco Unity Connection synchronize directory updates from Cisco Unified Communications Manager to Cisco Unity Connection."

http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/connection/7x/administration/guide/7xcucsagx/7xcucsag306.html

"Note that you can only use the information in this chapter to integrate Cisco Unity Connection with an LDAP directory. For information on integrating Cisco Unified Communications Manager Business Edition with an LDAP directory, see the following documentation available at http://www.cisco.com/en/US/products/ps7273/prod_maintenance_guides_list.html :

• The “Understanding the Directory” chapter of the Cisco Unified Communications Manager System Guide for Cisco Unified Communications Manager Business Edition .
• The “End User Configuration” chapter of the Cisco Unified Communications Manager Administration Guide for Cisco Unified Communications Manager Business Edition ."

[Brandon Buffin]

OK. Looks like you are syncing from CUCM. Does your user account show up in CUCM? Can you make sure your account has a device associated with it and a primary extension set?

Brandon

[redsox2002]

Yes, it does.  I've checked the device and extension (and deleted and re-created everything related to me) dozens of times.

Thanks,

Chaz

[TBSsupport15]

Have you been able to find a solution to this problem? I have the same issue. I can find the user on CUCM but not on CUC. I attempted to import the user manually from the LDAP server but was not able to find them. CN is correct in LDAP. I looked at the config for the server on both CUCM and CUC and the server IPs match. I am at a loss on what to do next. I am still new to Voice so please be detailed with responses if you have a solution. Thanks in advance.

[lunaparksydney]

Same issue here. 

Never had an issue until recently. 

Users created in AD, syncs to CUCM. Device association and primary numbers defined.

Go to CUC/IMPORT Look under CUC but only showing 44 users. 

If i check under LDAD i have 147 users. 

I have users added to CUC but when i go to import they are not even showing up even though they are already in Unity. Some users do show up. 

If i go to Sync users and select my CUCM i can see 43 accounts even though we have about 99 setup. 

I have just performed a reboot of unity that has made no changes. 

Anyone know how to troubleshoot this ?

[Anastasia]

Hi

Check

CUC->System settings->Restriction Tables-Find.

There are many tables , in every table delete mark in box in the same pattern as your user ext, specially near pattern described as "*" . Save.