cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

176
Views
0
Helpful
3
Replies
Highlighted
Beginner

Workaround for LDAP Sync of users with no unique mailid

Hello,

our client uses CUCM 12.5. Many users have no unique mailid what is the reason why they are not synched. Is there any workaround to get users with the same mailid synched to CUCM?

 

regards

Stefan

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
VIP Collaborator

Re: Workaround for LDAP Sync of users with no unique mailid

For AD integrations, the objectGUID is what makes a user account unique. I had forgotten that starting with v10 the 'mail' attribute in AD had to be unique, too. Here is a workaround:

  • Blank out the email ID field in AD. (You can capture, remove, and repopulate this field via Powershell.)
  • Synchronize the users. All users should synchronize.
  • Repopulate the email ID field in AD and synchronize again.

Only the first user with a particular email address will have that attribute updated in CUCM, so other users with the same email will have none listed.

This is listed as a bug in Bug Search, but it's not so much a bug as a new feature:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCur55902/?rfs=iqvred

Maren

3 REPLIES 3
VIP Collaborator

Re: Workaround for LDAP Sync of users with no unique mailid

Are you using mailID as the UserID? (The default is sAMAccountName.)

Also, what are you mapping to the Directory URI field? And, related, do you have devices associated and Primary Extensions selected on the End-User accounts?

Is this a new LDAP-Synch deployment or did something change?

Maren

Beginner

Re: Workaround for LDAP Sync of users with no unique mailid

Hi Maren,

 

they use sAMAccountName as UserID. First I have set the the Directory URI to mailid and also tested the sync with msRTCSIP... . Same result: users who do not have a unique mailid are not synced as stated in guide. It is a new deployment but some devices are already associated with primary Extensions selected on the End-User accounts.

 

regards

Stefan

VIP Collaborator

Re: Workaround for LDAP Sync of users with no unique mailid

For AD integrations, the objectGUID is what makes a user account unique. I had forgotten that starting with v10 the 'mail' attribute in AD had to be unique, too. Here is a workaround:

  • Blank out the email ID field in AD. (You can capture, remove, and repopulate this field via Powershell.)
  • Synchronize the users. All users should synchronize.
  • Repopulate the email ID field in AD and synchronize again.

Only the first user with a particular email address will have that attribute updated in CUCM, so other users with the same email will have none listed.

This is listed as a bug in Bug Search, but it's not so much a bug as a new feature:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCur55902/?rfs=iqvred

Maren

CreatePlease to create content
Content for Community-Ad
August's Community Spotlight Awards