Convert LDAP User to local user

[stephan.steiner]

Hi

As you can't delete users loaded from LDAP; I wanted to try if I could convert one to a local user. Looking at the schema, there's something that looks promising: the convertUser tag. However, as the schema doesn't contain property descriptions, i have no way of knowing how to use it. So I figured I'd do a getUser an a local user and an ldap user and compare the two. And I noted that local users have an empty ldapDirectoryName tag (well, the value is empty, and there's no guid), and the same for convertUserAccount. On the other hand, ldap users do have those values filled out (and the same contents in ldapDirectoryName and convertUser)

So, I tried an updateUser specifying just userid ldapDirectoryName and convertUserAcount. Leaving both tags with an empty value returned an error that my user did not belong to the specified ldap directory (of course it doesn't... I want to disassociate it). My next attempt was to leave the correct ldapDirectoryName but use a convertUserAccount with an empty value. While that command passed, my user is then still an ldap user.

So, how do I turn an ldap user into a local cucm enduser?

[dstaudt · Accepted solution]

I'm able to create a LDAP user, convert to local user, and then remove (UCM 10.5):

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns="http://www.cisco.com/AXL/API/10.5">

   <soapenv:Header/>

   <soapenv:Body>

      <ns:addUser>

         <user>

            <lastName>test1</lastName>

            <userid>test1</userid>

          <ldapDirectoryName>ADFS</ldapDirectoryName>

            <userIdentity>test1@ds-adfs.sso.com</userIdentity>

         </user>

      </ns:addUser>

   </soapenv:Body>

</soapenv:Envelope>

--------------------------------------

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns="http://www.cisco.com/AXL/API/10.5">

   <soapenv:Header/>

   <soapenv:Body>

      <ns:updateUser>

         <userid>test1</userid>

        <ldapDirectoryName></ldapDirectoryName>

         <userIdentity></userIdentity>

      </ns:updateUser>

   </soapenv:Body>

</soapenv:Envelope>

-------------------------------------

<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:ns="http://www.cisco.com/AXL/API/10.5">

   <soapenv:Header/>

   <soapenv:Body>

      <ns:removeUser>

         <userid>test1</userid>

      </ns:removeUser>

   </soapenv:Body>

</soapenv:Envelope>