×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

Authenticating new administrator in CUC8.6

Answered Question
Feb 16th, 2012
User Badges:

Hello,

     I've configured a new CUC8.6 server in our CUCM environment.  We're synchronized with AD and have been for some time.  After finishing the installation and importing users into the system (and creating some user voicemail boxes), we started adding synchronized accounts to the System Administrator role.  However, they still can not log in.  When an Administrator tries to log in, it gives in error that the password is invalid, after several attempts it says that the account has been locked out.  When I look at the account in AD and CUC, it looks fine.  LDAP Directory, Set Up, and Authentication are all set up (which, to me, seems like an odd thing to need to do since it should be authenticating through CUCM like CUCCX does, no?)  Do I need to have this configured?  Should setting up AXL be enough?


     Any suggestions would be appreciated.

Correct Answer by Chris Deren about 5 years 6 months ago

correct, uccx is different.

You need to pick how users are imported into UCON either AXL, locally defined or LDAP.



Sent from Cisco Technical Support iPhone App

Correct Answer by Chris Deren about 5 years 6 months ago

Well, if you are using AXL integration instead of LDAP then the passwords are not synced and defined locally on UCON.


Sent from Cisco Technical Support iPhone App

Correct Answer by Chris Deren about 5 years 6 months ago

seems like your LDAP authentication is not working, review your config.


Sent from Cisco Technical Support iPhone App

Correct Answer by Chris Deren about 5 years 6 months ago

can you login ok with this user to ciscopca site?


Sent from Cisco Technical Support iPhone App

Correct Answer by Chris Deren about 5 years 6 months ago

So, which role did you assign to this user?


Chris

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (5 ratings)
Loading.
Correct Answer
Chris Deren Thu, 02/16/2012 - 15:42
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 IP Telephony, Contact Center, Unified Communications

So, which role did you assign to this user?


Chris

shikamarunara Thu, 02/16/2012 - 17:35
User Badges:

System Administrator. I've also tried Audit Administrator to mimic the group assignment of the server's system account, but no dice Thoughts?


Sent from Cisco Technical Support iPad App

Correct Answer
Chris Deren Thu, 02/16/2012 - 17:41
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 IP Telephony, Contact Center, Unified Communications

can you login ok with this user to ciscopca site?


Sent from Cisco Technical Support iPhone App

shikamarunara Thu, 02/16/2012 - 17:50
User Badges:

I can not.  It tells me Log on failed - Invalid User ID or Password

Correct Answer
Chris Deren Thu, 02/16/2012 - 17:52
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 IP Telephony, Contact Center, Unified Communications

seems like your LDAP authentication is not working, review your config.


Sent from Cisco Technical Support iPhone App

shikamarunara Thu, 02/16/2012 - 17:54
User Badges:

Is LDAP authentication required here?  Should the AXL service provide the authentication?  That's how it works in CUCCX.

Correct Answer
Chris Deren Thu, 02/16/2012 - 17:57
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 IP Telephony, Contact Center, Unified Communications

Well, if you are using AXL integration instead of LDAP then the passwords are not synced and defined locally on UCON.


Sent from Cisco Technical Support iPhone App

shikamarunara Thu, 02/16/2012 - 18:02
User Badges:

That IS different from the way it works in CUCCX.  In that instance the AXL authentication will allow people to authenticate with their AD credentials.  And, you're totally right.  When I go to the user account in CUC and set the password, now I'm able to log in just fine.  So, is this fixed by removing the settings for AXL and only leaving the LDAP settings?

Correct Answer
Chris Deren Thu, 02/16/2012 - 18:05
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 IP Telephony, Contact Center, Unified Communications

correct, uccx is different.

You need to pick how users are imported into UCON either AXL, locally defined or LDAP.



Sent from Cisco Technical Support iPhone App

shikamarunara Thu, 02/16/2012 - 18:12
User Badges:

So, the manner of import chooses how to authenticate?  Interesting.  In any case, I can import users from PhoneSystem with no problems but I don't see anything when I choose LDAP directory.  I've double checked my settings for LDAP and they're identical to the ones in CUCM (which does work with no problems.)  Is this where my problem is, or could there be anything more to it?

Chris Deren Thu, 02/16/2012 - 18:30
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,
  • Cisco Designated VIP,

    2017 IP Telephony, Contact Center, Unified Communications

So, the manner of import chooses how to authenticate?  Interesting.


> Correct


Are you going to Import User from LDAP and selecting the LDAP integration your created?


Chris

shikamarunara Thu, 02/16/2012 - 18:46
User Badges:

Yes, we don't use locally created accounts - everything is done in AD.


Sent from Cisco Technical Support iPad App

Actions

This Discussion