Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

EMCC between CUCM 9.x and 8.x

Hi,

I have to implement the EMCC feature between CUCM version 9.x and 8.x and Cisco documentation doesn't specify anything about this scenario.

The users exist in both clusters as the LDAP integration is pointing to the same AD.

In version 9.x exist the option to specify (check) the home cluster in the end user configuration but not in version 8.x

Does anybody knows what is the behaviour in this situation? If we check the Home cluster option for users belongs to cluster 9.x than we can have these users in cluster 8.x as well?

What about the users from cluster 8.x? If we don't check the home cluster option for these users in cluster 9.x than the CUCMs will assume that these users belongs to cluster 8.x?

Do we still have to have unique users ID in both clusters?

Thanks

3 ACCEPTED SOLUTIONS

Accepted Solutions
Cisco Employee

EMCC between CUCM 9.x and 8.x

Yes, on your scenario you would need unique IDs for this to work, otherwise, all users on 8.X cluster will be treated as local users as they do exist in the directory.

That, or upgrade that one to 9.X as well.

HTH

java

if this helps, please rate

www.cisco.com/go/pdihelpdesk

HTH

java

if this helps, please rate

www.cisco.com/go/pdi
Cisco Employee

EMCC between CUCM 9.x and 8.x

Hi Cristian

As Jaime mentioned above, this feature only works if you are using CUCM 9.X as this was included as a part of an enhancement to 8.X,  mentioned below :

CSCte96183

https://tools.cisco.com/bugsearch/bug/CSCte96183/?referring_site=ss

Prior to CUCM 9.X CUCM, IF you have two CUCM clusters synced to a same LDAP server, you need to ensure that they donot have same users, else you EMCC features does not work.

"Home Cluster" option you are mentioning above will only be helpful from the 9.X perspective but your other CUCM(8.X) will still treat all the users as local

Regards

Aditya Gupta

Cisco Employee

Re: EMCC between CUCM 9.x and 8.x

Yes, you can LDAP Filters

As per SRND, An attribute specified in the filter can be any attribute that exists in the LDAP directory store, and it does not have to be one of the attributes that is understood and imported by Unified CM. The attribute is used only on the LDAP server to select data, and the corresponding entries will have a subset of their data imported into Unified CM.

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/8x/directry.html#wp1084415

Just to give you an example for Active Directory:

Syntax:

(&(objectclass=user)(!(objectclass=Computer))(!(UserAccountControl:1.2.840.113556.1.4.803:=2))(ipPhone=*))

This filters where the object:

*   Is an end-user AND is not a computer AND User Account is not disabled AND

has the ipPhone field populated with any value

for syntax see

http://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx

No problems with LDAP Filters is my experience.

you can use free tools like Softerra LDAP Browser or JXplorerto test your Filter

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_configuration_example09186a0080b2b103.shtml

Aditya Gupta

7 REPLIES
Cisco Employee

EMCC between CUCM 9.x and 8.x

Yes, on your scenario you would need unique IDs for this to work, otherwise, all users on 8.X cluster will be treated as local users as they do exist in the directory.

That, or upgrade that one to 9.X as well.

HTH

java

if this helps, please rate

www.cisco.com/go/pdihelpdesk

HTH

java

if this helps, please rate

www.cisco.com/go/pdi
New Member

EMCC between CUCM 9.x and 8.x

Thank you for your answer.

Do you mean that I need all the users (users belongs to both cluster 9.x and 8.x) to be unique IDs?

Checking or unchecking the Home cluster option on cluster 9.x doesn't change any behaviour?

Thx.

Cisco Employee

EMCC between CUCM 9.x and 8.x

Hi Cristian

As Jaime mentioned above, this feature only works if you are using CUCM 9.X as this was included as a part of an enhancement to 8.X,  mentioned below :

CSCte96183

https://tools.cisco.com/bugsearch/bug/CSCte96183/?referring_site=ss

Prior to CUCM 9.X CUCM, IF you have two CUCM clusters synced to a same LDAP server, you need to ensure that they donot have same users, else you EMCC features does not work.

"Home Cluster" option you are mentioning above will only be helpful from the 9.X perspective but your other CUCM(8.X) will still treat all the users as local

Regards

Aditya Gupta

New Member

EMCC between CUCM 9.x and 8.x

Thank you.

There is a way to block/filter the users based on the cluster, using the LDAP integration? Or requires a third party application?

Cisco Employee

Re: EMCC between CUCM 9.x and 8.x

Yes, you can LDAP Filters

As per SRND, An attribute specified in the filter can be any attribute that exists in the LDAP directory store, and it does not have to be one of the attributes that is understood and imported by Unified CM. The attribute is used only on the LDAP server to select data, and the corresponding entries will have a subset of their data imported into Unified CM.

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/8x/directry.html#wp1084415

Just to give you an example for Active Directory:

Syntax:

(&(objectclass=user)(!(objectclass=Computer))(!(UserAccountControl:1.2.840.113556.1.4.803:=2))(ipPhone=*))

This filters where the object:

*   Is an end-user AND is not a computer AND User Account is not disabled AND

has the ipPhone field populated with any value

for syntax see

http://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx

No problems with LDAP Filters is my experience.

you can use free tools like Softerra LDAP Browser or JXplorerto test your Filter

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_configuration_example09186a0080b2b103.shtml

Aditya Gupta

New Member

Re: EMCC between CUCM 9.x and 8.x

Thank you Aditya and Jaime for the answers.

New Member

Hi guys, Can you offer any

Hi guys,

 

Can you offer any advice:

 

If a user is in midst migration from CM8 to CM10 (same ID) and is marked as Inactive in CM8 - how can they login to EMCC? There's a 24hr period (+garbage collector) when users cannot login with their CM10 profile as it exists on both clusters.

 

How do these users login until they are purged?

 

Rich

307
Views
20
Helpful
7
Replies
CreatePlease login to create content