cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
262
Views
0
Helpful
6
Replies
Contributor

Creating new account for AD sync

Hi all,

We want to do an AD sync with CUCM 8.6 but don't want to use the default domain administrator account. Is there a guide as to what permissions/memberships the user needs to have on AD to be able to work properly for the integration?

Thanks

Sean

Everyone's tags (5)
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Creating new account for AD sync

The CN= is not the username. Use ADSI Edit or AD Users and Computers with Advanced mode enabled to see what the CN attribute for that user account is.

Please remember to rate helpful responses and identify helpful or correct answers.

View solution in original post

6 REPLIES 6
Highlighted

Creating new account for AD sync

It's a read-only account. Default Domain User permissions will do it but you can delegate 'read all attributes' for good measure if you want.

Please remember to rate helpful responses and identify helpful or correct answers.

Highlighted
Contributor

Creating new account for AD sync

Hi Jonathan,

I have created a new user and managed to get it to work for the "LDAP Directory" and it connects sucessfully and syncs users, however in the "LDAP Authentication", using this user gives an "Error connecting" message, but using the domain "administrator" account works. Are there other permissions I need to use for authentication?

Thanks for your help

Sean

Highlighted

Creating new account for AD sync

Nope. What format is the Bind DN in? It needs to be CN=blah blah,OU=People,DC=domain,DC=com not domain\user or user@domain.com.

Please remember to rate helpful responses and identify helpful or correct answers.

Highlighted
Contributor

Creating new account for AD sync

I have created a new user (Lab) and am trying to use this for the AD sync. When I change the user in LDAP Directory, it connects and syncs. When I change the user in Authentication, it doesn't work, but the admin account works. Screenshots attached.

Thanks

Sean

Highlighted

Creating new account for AD sync

The CN= is not the username. Use ADSI Edit or AD Users and Computers with Advanced mode enabled to see what the CN attribute for that user account is.

Please remember to rate helpful responses and identify helpful or correct answers.

View solution in original post

Highlighted
Contributor

Creating new account for AD sync

Thanks a lot Jonathan. I'm new to AD and hadn't realised the username and CN were different. The CN was "lab 1" and all is now working.

Thanks again

Sean

CreatePlease to create content