Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CUCM 7.x & LDAP intergration changes - what happens to data in CUCM?


What happens to End User info stored in CUCM if you change some LDAP settings?

If a CUCM 7.x is integrated with LDAP for searches and authentication, and you decide to change the "LDAP Attribute for User ID" from say sAMAccountName to empolyeeNumber, the CCMAdmin pages display messages that suggest these settings can't be changed unless all the LDAP details are removed.

If you do this, when you break/remove the existing LDAP settings, are all the End User details deleted from CUCM, or just marked inactive (for later deletion), or do they just hang around in Callmanager as if this was to be a stand-alone solution?

Presumably if you re-add all the LDAP settings, accounts will be re-imported from LDAP. What happens if you complete all these tasks while users are logged in, do directory searches and other services start failing.... or should this be done out of hours having forced all End Users to log out?


VIP Super Bronze

Re: CUCM 7.x & LDAP intergration changes - what happens to data

When you delete the LDAP settings, the users are marked inactive and then later deleted after a 24hr period. So yes the users will be eventuall deleted.

Please rate all useful posts "The essence of christianity is not the enthronement but the obliteration of self --William Barclay"

Re: CUCM 7.x & LDAP intergration changes - what happens to data

If the account user name stays the same, nothing will be changed. But what I found out was that I disabled LDAP for some BAT work which means deleted some LDAP entries. I added the entries back into CUCM. I thought it was fine because it was the same settings, etc. But since I did not force a resync, it deleted all my accounts. I think if I were to force a resync after setting it back up the accounts would have stayed. I could not test the theory out, but....

And like the other poster said, if there are mismtatched accounts, it will delete them. For example.... in CUCM there jdoe and in AD it's listed as John.Doe... jdoe is deleted in cucm.

CreatePlease login to create content