cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
395
Views
0
Helpful
3
Replies
Highlighted
Beginner

Workaround for LDAP Sync of users with no unique mailid

Hello,

our client uses CUCM 12.5. Many users have no unique mailid what is the reason why they are not synched. Is there any workaround to get users with the same mailid synched to CUCM?

 

regards

Stefan

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

For AD integrations, the objectGUID is what makes a user account unique. I had forgotten that starting with v10 the 'mail' attribute in AD had to be unique, too. Here is a workaround:

  • Blank out the email ID field in AD. (You can capture, remove, and repopulate this field via Powershell.)
  • Synchronize the users. All users should synchronize.
  • Repopulate the email ID field in AD and synchronize again.

Only the first user with a particular email address will have that attribute updated in CUCM, so other users with the same email will have none listed.

This is listed as a bug in Bug Search, but it's not so much a bug as a new feature:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCur55902/?rfs=iqvred

Maren

View solution in original post

3 REPLIES 3
Highlighted
VIP Collaborator

Are you using mailID as the UserID? (The default is sAMAccountName.)

Also, what are you mapping to the Directory URI field? And, related, do you have devices associated and Primary Extensions selected on the End-User accounts?

Is this a new LDAP-Synch deployment or did something change?

Maren

Highlighted

Hi Maren,

 

they use sAMAccountName as UserID. First I have set the the Directory URI to mailid and also tested the sync with msRTCSIP... . Same result: users who do not have a unique mailid are not synced as stated in guide. It is a new deployment but some devices are already associated with primary Extensions selected on the End-User accounts.

 

regards

Stefan

Highlighted

For AD integrations, the objectGUID is what makes a user account unique. I had forgotten that starting with v10 the 'mail' attribute in AD had to be unique, too. Here is a workaround:

  • Blank out the email ID field in AD. (You can capture, remove, and repopulate this field via Powershell.)
  • Synchronize the users. All users should synchronize.
  • Repopulate the email ID field in AD and synchronize again.

Only the first user with a particular email address will have that attribute updated in CUCM, so other users with the same email will have none listed.

This is listed as a bug in Bug Search, but it's not so much a bug as a new feature:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCur55902/?rfs=iqvred

Maren

View solution in original post

Content for Community-Ad