CUCM 7.1.3 and LDAP integration

[markcarat]

Hello,

I have CUCM V7.1.3 with local users.  We are now considering integrate user management with LDAP, which is Windows2003 in our network.  We have more than 20 different business units span across more than 20 offices.  However only six of these offices are part of the centralized IPT.  The problem is our AD users are grouped base on business units.  For example, the users in Atlanta office may be in six different OUs and CUCm has a limit of five LDAP directories.   Is there a way in LDAP to search users base of AD Security group?

Any suggestions will be appreciated.

Mark

[Dennis Aston]

You keep using the word Group.  As in an Active Directory or LDAP group?  I have only seen it as described in your quote you pasted in below, where the server was looking at the dn (Distinguished Name) characteristic on the user in the specified OU.

[Bruno Rangel]

Ok

Thanks

I'll  try and see if it works

[Rafael Chavantes]

William and Aaron,

Thanks for the quick response. I already took a look at the readme file and it seems that the previous problem is corrected but now i'm facing this after sending the command william sent me:

java.io.FileNotFoundException: -input:test.xml (The system cannot find the file
specified)
        at java.io.FileInputStream.open(Native Method)
        at java.io.FileInputStream.(Unknown Source)
        at java.io.FileInputStream.(Unknown Source)
        at AxlSqlToolkit.execute(AxlSqlToolkit.java:188)
        at AxlSqlToolkit.main(AxlSqlToolkit.java:244)

C:\axlsqltoolkit>dir
Volume in drive C has no label.
Volume Serial Number is 70AD-4869

Directory of C:\axlsqltoolkit

06/22/2010  10:16 AM   

          .
06/22/2010  10:16 AM              ..
06/21/2010  05:59 PM              classes
06/21/2010  05:59 PM              lib
01/03/2007  04:24 AM             2,526 README.txt
06/22/2010  10:21 AM                 0 sample.response
02/09/2005  03:48 PM               501 sample.xml
06/21/2010  05:59 PM              schema
06/21/2010  05:59 PM              src
06/21/2010  06:01 PM               221 test.xml

Any idea?

Sorry about this questions but i really need to do this but no knowledge at all at this java/sql world.

[Rafael Chavantes]

Hi Guys,

Does anyone has an idea on how to help me? I'm running the commands but it is saying that it cannot find the test.xml file.

[Aaron Harrison]

Hi

Try specifiying the full path to the file in the -input parameter.

Failing that post back where you are running the java command from, and where you xml file is etc.

Regards

Aaron

[Rafael Chavantes]

Aaron,

No joy using the full path.

[William Bell]

Actually,  I had a typo in my original reply to you.  It isn't -input: it is -input=.  Not sure how the colon slipped from my brain to my keyboard, but it was clearly a demonstration of PEBCAK ;-)   Try your command with -input= and see if that works.

Regards,
Bill

[Rafael Chavantes]

william,

Thanks for the update, it worked but now facing a new problem.

When running the command I'm receiving some errors that seem to be from java.

thanks or me time for the support from you, I could not find support for this on anywhere.

The output for the command is attached.

[William Bell]

Rafael,

Can you post the command you executed, with all parameters?   Also, can you please check to see if you have the Cisco AXL Web Service activated.  This service is required for the AXL Query Toolkit to operate correctly.  To check:

1. go to https://cucmpublisherIP/ccmservice

2. go to Tools-->Service Activation

3. select the publisher node from the server list

4. scroll down and look for "Cisco AXL Web Service"

HTH.

Regards,
Bill

Please remember to rate helpful posts.

[Rafael Chavantes]

Bill,

Thanks for the support it seems to be worked:

Follows the output:

Positive response received.
---------------------
http://schemas.xmlsoap.org/soap/envelope/" SO
AP-ENV:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
r/>http://www.cisco.com/A
XL/API/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" sequence="1277
314165608">Microsoft Active Directory1
lter>(&(objectclass=user)(!(objectclass=Computer))(!(UserAccountControl:1.2.
840.113556.1.4.803:=2)))Netscape or Sun ONE LDAP Serve
r2(objectclass=inetOrgPerson)
me>OpenLDAP3(objectclass=inetOrgPerson)w>Microsoft Active Directory Application Mode4
lter>(&(objectclass=user)(!(objectclass=Computer))(!(msDS-UserAccountDisable
d=TRUE)))<
/SOAP-ENV:Envelope>
---------------------

This is the answer we are aspecting right?

[William Bell]

Yes.  You are getting data back from the API.  Good job.

Regards,
Bill

[Rafael Chavantes]

Bill,

One last question ( I hope lol).

I need to create a filter that only returns users that have the field ipPhone not equal to null.

I've made a possible solution and would like to know is is right or not.



      

[William Bell]

Rafael,

You could try this LDAP query:

(&(objectclass=user)(!(objectclass=Computer))(!(UserAccountControl:1.2.840.113556.1.4.803:=2))(ipPhone=*))

HTH.

Regards,
Bill

[Rafael Chavantes]

Bill,

Thanks for the support is working like a charm.

[William Bell]

Glad to help.

Regards,
Bill