cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
11580
Views
0
Helpful
15
Replies

Cisco Unity Connection with LDAP Problem

Younes Chafi
Level 1
Level 1

Hello,

I have a CUCM and Cisco Unity and an LDAP Server 2008,

When I configure CUCM with LDAP, users are imported, but when I did the same method for integrating Cisco Unity with ldap does not work, when I click "Import User" via LDAP I find a user who call "Token_User_8b191a06-5041-4b41-bd5f-0575fde674e3" without extension, and no user is imported

Unity Version : 9.0

CUCM Version : 9.0

LDAP : Windows 2008 Server

Regards,

Younes CHAFI.

1 Accepted Solution

Accepted Solutions

Please attached the full capture..I cant make anything of the screen capture

Please rate all useful posts

"The essence of christianity is not the enthronement but the obliteration of self --William Barclay"

Please rate all useful posts

View solution in original post

15 Replies 15

islam.kamal
Level 10
Level 10

Hi Younis

1- Regarding AD 2008 , did you follow Cisco guide as the below:-

**When you are configuring Connection for Microsoft Active Directory 2008 Lightweight Directory Services, select

Microsoft Active Directory Application

2- Did you try  to delete the LDAP integration and re-create it again?.

Thanks

Please rate all useful information

I followed the guide and I selected Microsoft Active Directory

and I deleted/recreated the integration but the same problem

Regards,
Younes CHAFI.

Sent from Cisco Technical Support iPhone App

Can you post a screen shot of your LDAP config, including the search base..Do you have the same search base configured as with CUCM?

Please rate all useful posts

"The essence of christianity is not the enthronement but the obliteration of self --William Barclay"

Please rate all useful posts

Hi,

Yes, it is the same configuration in CUCM,

I configure CUCM with LDAP, users are imported.

attached the error message and the LDAP config

Regards,

Error.PNG

Ldap Config.PNG

Ldap Directory Config.PNG

try this for your search base,

ou=users,dc=lab,dc=ma

Please rate all useful posts

"The essence of christianity is not the enthronement but the obliteration of self --William Barclay"

Please rate all useful posts

Hi ,

does not work, I get an error message


"directory.error.userbase"

Regards,

Younes CHAFI.Error1.PNG

What is your setup in AD? Do you have a container called users?

Can you try this again..

user search base dc=lab,dc=ma

Please rate all useful posts

"The essence of christianity is not the enthronement but the obliteration of self --William Barclay"

Please rate all useful posts

here is my LDAP configuration,

AD Config.PNG

I tried this syntax cn=Users,dc=lab,dc=ma , but without result

Regards,

Younes CHAFI.

Users are usuallually in Orbanisation units hence referneced by OU not CN (containers)

Try and use the whole domain,  dc=lab, dc=ma

Please rate all useful posts

"The essence of christianity is not the enthronement but the obliteration of self --William Barclay"

Please rate all useful posts

I tried this syntax dc=lab,dc=ma , but the same problem,

Regards,

Younes CHAFI

Ok, there sre two things to do now..

1. Restart CUC..If you have already done that, then do opion 2

Utils service system restart

2. Take captures from cuc.. (once you start the capture, then go and try and force the ldap sync)

https://supportforums.cisco.com/docs/DOC-11599

Instead of using RTMT to collect the files, you can also use a SFTP tool like free FTPD..

Example below:

admin: utils network capture file mycap count 100000 size all host all 10.5.244.10

Executing command with options:

size=all count=100000 interface=eth0

src= dest= port=

ip=10.3.2.21

-----------

The trace continues until you press Ctrl-C.

Step 3: Download the Trace File

OK, so now you have a file somewhere on the system with the data that you would really like to view.  You have to download it to your machine.  You will need a running SFTP server on the target machine.  You can use openSSH on linux/unix, freeFTPd, copSSH, or something similar.

-------

admin:file get activelog platform/cli/newcap.cap

Collect the capture and attach here

Please rate all useful posts

"The essence of christianity is not the enthronement but the obliteration of self --William Barclay"

Please rate all useful posts

Hi,

I followed the procedure described in your response and I found that Unity is surrendering response ldap

attached the error message on wireshark.

Error Extension.PNG

I think the attribute "Extension" is not the attribute "telephoneNumber" LDAP?

Regards,

Younes CHAFI.

Please attached the full capture..I cant make anything of the screen capture

Please rate all useful posts

"The essence of christianity is not the enthronement but the obliteration of self --William Barclay"

Please rate all useful posts

Ok,

Here's the download link traces

http://www.sendspace.com/file/2tp1nf

Regards,

Younes CHAF