CUCM 5 with LDAP AD and AD servers offline for days

dubrennan · ‎12-11-2007

I am interested in the implications of having a CCM server (5.x) integrated with AD. If the user accounts are forcibly disabled, they will be marked inactive and removed after 24 hours; however, if the CCM server fails to sync with the LDAP directory for whatever reason after (say the AD servers are offline for 2 or 3 days) - what will happen to the CCM end user accounts?

I would assume in failing the authentication it would not modify them; however, if it does fail to sync, would it just mark all of the accounts as inactive assuming the LDAP server group is gone?

smahbub · ‎12-18-2007

There are 2 workarounds

1. Perform Authetication of the user using local CUCM database. This can be achieved by either disabling LDAP Authentication OR defining the user as Application User

2. If LDAP Authentication is a must ,at CUCM->System->LDAP Authentication page, define the OU for the Search base in which user is defined.