Not able to update Local End User Password with CUCM BAT while LDAP enabled

[Vishal Bhardwaj]

Hi there,

My customer has CUCM ver 10.5 and has mix of LDAP authenticated and Local End Users. Now, for a project we have to change Passwords of around 5000+ Local users. With BAT i am unable to do so as LDAP is enabled. I have opened a Cisco TAC Case and according to the Engineer it is a BUG and I have to disable LDAP to use BAT for updating password.

It won't either allow users to change their password even if "Change Password at Next Login" is selected. It doesn't prompt the user to change the password.

I am afraid that disabling LDAP can cause some unforseen issues so trying to see if anyone in the Community has experienced this and if there's a Work around to Update Bulk users' password?

It works fine on CUC by the way.

Thanks

[Chris Deren]

If you disable Dirsync then the users do not get converted to local users until the night time when the process kicks in, and thus should not have adverse affect if you re-enable it before then.  Alternatively how about adding these users to LDAP into its own OU as that can be done quickly on the LDAP side?