02-17-2009 12:02 PM - edited 03-15-2019 04:17 PM
Hello. I am hoping that someone can help me with a the below question:
Is it possible to add three different AD entries under the LDAP Authentication page, having different LDAP user search base or is it that i can have Authentication to only one LDAP server?
Thanks,
02-19-2009 01:28 PM
02-24-2009 10:02 AM
One more thing to update, these 3 AD's are in three different Forests,
Is it still possible?
02-24-2009 03:42 PM
Hi giftonabel,
Here is the direct link that will help you out with the integration.
You may need to add 3 different ldap search bases in cucm depending on your AD domain root and forrest structure.
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/6x/directry.html#wp1045302
HTH, Please rate
Regards,
Justin
02-24-2009 04:05 PM
Also you can only add up to 5 profiles
02-25-2009 03:03 AM
Hi Justin,
I have gone through this link earlier, it actually mentions about the scenario of Single AD Forest with Multiple Trees under it, in my scenario it is Multiple Forests and each forest has there own tree and i need to have the LDAP authentication with all three forests.
Regardsm
Gifton
02-25-2009 06:43 AM
02-26-2009 01:15 AM
Indeed, it's not possible to authenticate when you have multiple forests, but it is if you have a single forest with multiple trees.
You have to use userPrincipalName instead of sAMAccountName in LDAP System configuration for UserID.
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/6x/directry.html#wp1045381
"As mentioned in the section on LDAP Synchronization, in order to support synchronization with an AD forest that has multiple trees, the UserPrincipalName (UPN) attribute must be used as the user ID within Unified CM. When the user ID is the UPN, the LDAP authentication configuration page within Unified CM Administration does not allow you to enter the LDAP Search Base field, but instead it displays the note, "LDAP user search base is formed using userid information." "
The only negative aspect is for Extension Mobility, UserID is more complicated to enter.
Yorick
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: