I have installed CUIC 8 with premium license and integrated it with UCCE. The CUIC can see all supervisor agents from UCCE and from the user list i can see that the supervisor agents have permissions on their agents/teams only.
When I log in using any supervisor, a new user is created on CUIC 8 with the same login name of the supervisor, only small letters instead of capital. Now I have 2 users for the supervisor user, 1 in capital and 1 in small letters.
The new user does not have any permissions other than log in... all permissions created previously for the supervisor are not applied on this new user.
Is this normal? I dont think it should be. Is there a work around for it?
I checked on TAC and this is a known bug with a workaround.
I found that it was easier to just use my own workaround which was to give the users with the lower case name the required permissions.
I have installed CUIC and i have synchronized this with ICM database. the supervisor users wre synched with cuic. but I cannot able to login with that supervisor user.
Is there any work around.
Thanks for the response.
I have configured ADin CUIC. But still i am facing the issue.
Is there any thing i need to verify Active Directory settings in CUIC.
AD setting for CUIC are straightforward... and there is a validate button to check if the configuration made on CUIC was correct.
You then simply use the domain supervisor user created from the agent explorer tool and it should work
The test connection with AD is successful. I can able to synch the supervisors like DOMAIN\supervisors in user list.
But still i cant able to log in to the CUIC. If i use that RUN AS option in CUIC it is working. But I cant able to login with that credentials.
I possibly had a similar problem with CUIC.
From memory when the users are added automatically from AD they are inserted into CUIC as ALL upper case
However when you log on regardless of what case you type in the login you will login as
Obviously this is a bug but to get round it I just duplicated all the users as lower case with the appropriate permissions.
body.lynn: True, this was a bug. It always created 2 users, 1 upper case and 1 lower case. This has been solved in 8.0(2) and later. The workaround was to give the same privileges to both created users.
Karthik: Let's differentiate between 2 things:
1- logging in
2- seeing the users in the user list
When you integrate with ICM, CUIC gets the supervisor usernames (DOMAIN\supervisor) from ICM directly. Hence, you can see the users from CUIC and can assign them the privileges you want. You can also use the RUN AS functionality.
This all means you have proper integration with ICM.
Your problem is when you try to login using any of those users (DOMAIN\supervisor). When you try to log in, CUIC communicates with AD to do the authentication. I can see a couple of issues that might appear here:
1- CUIC cannot see AD (you confirmed its correct, so that shouldnt be your case)
2- AD configuration does not point to the OU where the supervisor users are located
3- The domain user you are using to integrate with might not have the privilege to do authentication on AD
4- When logging in, you do not use the complete DOMAIN\supervisor in the username field. The DOMAIN has to be written, the user alone will not work
I usually do the following:
1- try using a domain admin account
2- in the user search base, make sure to add the complete cisco ipcc OUs (Cisco_ROOT, Facility, instance)
Hi, Did anyone solve this? I seem to have the same issue and have worked over the last items in the last post but no luck.