LDAP integration with CUCM

jjoseph01 · ‎07-30-2008

Hi all. I have a question about integrating CUCM with Microsoft LDAP services. Im wanting now to pull the users from the Microsoft AD to get users into CUCM (recommended for the Presence install in working on). Im wondering if I need to do anything in the AD side at all? I dont think it will be a big deal on the CUCM side (maybe I just dont know), but is there anything I have to do on the Microsoft side to get this to work?

andrejrudas · ‎07-30-2008

Hi,

Yes, you have to create user in AD, with permission to write to AD.

On CUCM side you will use that user for synchronizing/updating with AD.

--

With best regards,

Andrew

jjoseph01 · ‎07-31-2008

Thanks, I have created a userID with domain admin rights in AD. When I go to put the info in on CUCM, I get the following: "Login Failure to Host ldap://192.168.5.5:389, Please Re-Enter LDAP Manager Distinguished Name and Password"

This is what I have in that blank:

"cn=joseph,cn=users,dc=domainname,dc=com"

Would this be the right thing to put in?

Naoufal KERBOUTE · ‎07-31-2008

hello,

Is "joseph" is the Manager Distinguished name??

if yes, make sure that the user joseph in the users

Jaime Valencia · ‎07-31-2008

to make things easier just create a copy of the built-in administrator account and use that one.

HTH

java

if this helps, please rate

HTH

java

if this helps, please rate

Ritesh Desai · ‎07-07-2016

Thanks JAVA,

Your idea worked for me... else I was struggling with the same error.

thanks & regards,

Ritesh Desai.

*** Please rate helpful post. Please mark as answer if it solves your problem/query.
regards, Ritesh Desai

andrejrudas · ‎07-31-2008

Hi,

Actually I'am not sure that is right

"cn=joseph,cn=users,dc=domainname,dc=com"

You have to put here path to container where AD Users (CUCM end users) are stored. So in my case it was:

"ou=USERS,ou=ORGANIZATION,dc=domainname,dc=com"

So, all my domain users stored:

mydomain.com

- ou=ORGANIZATION

- ou=USERS

- ou= Dept etc.

So CUCM using LDAP with download/synchronize all users using that path.

Just keep in mind, when I put username I wrote in the way USERNAME@mydomain.com (probably that is no necessary), then check again password, and look your AD probably you are already lock out :)

Good luck

--

Andrew

jjoseph01 · ‎07-31-2008

Hi all. I got it working. I JUST put the username in, no "cn=...." or anything like that. It sync'ed up and users are populated. I appreciate the help.