Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

Search group in AD

When I  set my research base for the whole root.
DC =  mydomain, DC = com, DC = br

Show me all  users in Active Directory.

But I have to  look at the following group
Telefonia_Cisco  cn =, ou = Global!, ou = Groups, ou = EscritorioCentral, ou = mydomain,  dc = mydomain, dc = com, dc = br

Is it  possible?

Cheers Bruno Rangel Please remember to rate helpful responses using the stars bellow and identify helpful or correct answers .
2 ACCEPTED SOLUTIONS

Accepted Solutions
VIP Super Bronze

Re: Search group in AD

Your only option is to add an LDAP filter. This is easy in UCM 8.0 and later; however, there is no GUI for this in earlier versions. You essentially have to filter against a specific attribute. The most common example is filtering on the ipPhone field not being null which was covered in this thread: https://supportforums.cisco.com/message/1068263

Re: Search group in AD

Bruno,

Based on your second screen shot, it appears you are trying to establish a user search base starting with the actual AD group CN.  This will not work.

Yes, in 7.1.3 the only way you can customize the LDAP filter is to modify the table directly using the AXL/SOAP API.  The AXL Query Toolkit is one pre-built interface to the API.  In 8.0 and later you will have a nice GUI to make the mod.  But until then, this is what you have.

I suggest you read the Cisco SRND for CUCM 7.x (www.cisco.com/go/srnd).  There is a whole section on LDAP integration that will help you grasp the basics.  There are some fundamental components I don't think you have accounted for.

HTH.


Regards,
Bill

HTH -Bill (b) http://ucguerrilla.com (t) @ucguerrilla

Please remember to rate helpful responses and identify

7 REPLIES
VIP Super Bronze

Re: Search group in AD

Cisco UCM does not utilize synchronize objects from LDAP, only user objects. What are you trying to accomplish by looking at a group object?

Re: Search group in AD

need and  seek only registered users in a specifiable gupo!

What would be the alternative for this task?


Cheers Bruno Rangel Please remember to rate helpful responses using the stars bellow and identify helpful or correct answers .
VIP Super Bronze

Re: Search group in AD

Your only option is to add an LDAP filter. This is easy in UCM 8.0 and later; however, there is no GUI for this in earlier versions. You essentially have to filter against a specific attribute. The most common example is filtering on the ipPhone field not being null which was covered in this thread: https://supportforums.cisco.com/message/1068263

Re: Search group in AD

I did a write up on this topic here:

http://www.netcraftsmen.net/resources/blogs/axl-sql-toolkit-part-3-updating-cucm-dirsync-ldap-filter-by-example.html

You may need to read part 1 and 2 of the series as well.  Part 2 would be a definite pre-req for part 3 (which is referenced above).  You can pick most any attribute you wish to filter on.  Though, I have not tested DirSync to see if it will dereference group memberships.  You may want to look at ipPhone (as Jonathan stated) or you may want to use something like employeeID (for example).  There are plenty of attributes to pick from, you just need to ensure that you are aware of current user provisioning processes in your organization.

HTH.

Regards,
Bill

Please remember to rate helpful posts.

HTH -Bill (b) http://ucguerrilla.com (t) @ucguerrilla

Please remember to rate helpful responses and identify

Re: Search group in AD

Sorry


But to say that after I  have created this group in AD. I can not see only  those registered user?
The  figures below is the test that was done


In Figure 1 I search all domain but do  not want that?
In figure 2 the group that was  created in AD to be synchronized.


I read the Blog Post in discussion and it was made, but I do  not know use this type of resource AXL / SOAP, this would be the only  alternative:
My CUCM 7.1.3 is

Cheers Bruno Rangel Please remember to rate helpful responses using the stars bellow and identify helpful or correct answers .

Re: Search group in AD

Bruno,

Based on your second screen shot, it appears you are trying to establish a user search base starting with the actual AD group CN.  This will not work.

Yes, in 7.1.3 the only way you can customize the LDAP filter is to modify the table directly using the AXL/SOAP API.  The AXL Query Toolkit is one pre-built interface to the API.  In 8.0 and later you will have a nice GUI to make the mod.  But until then, this is what you have.

I suggest you read the Cisco SRND for CUCM 7.x (www.cisco.com/go/srnd).  There is a whole section on LDAP integration that will help you grasp the basics.  There are some fundamental components I don't think you have accounted for.

HTH.


Regards,
Bill

HTH -Bill (b) http://ucguerrilla.com (t) @ucguerrilla

Please remember to rate helpful responses and identify

Re: Search group in AD

OK

Thanks all  !!!

Cheers Bruno Rangel Please remember to rate helpful responses using the stars bellow and identify helpful or correct answers .
537
Views
15
Helpful
7
Replies
CreatePlease to create content