Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

LDAP information - how it works?

I'm in the low level design phase right now and we looking at the LDAP function of CallManager and processes for administrators.

Is LDAP limited to Active Directory, or can it work with any LDAP (peoplesoft, etc)

On the 7900 series phones, if I link the LDAP directory, what populates in that section? First, Last, extension? or other their other fields.

My end goal is not to manage to a corporate directory in one place. (AD or LDAP server) and another directory on CallManager. We want to have intigration and possibly somehow streamline MACI's with this if possible.

Thanks much!

Tommer

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: LDAP information - how it works?

Callmanager stores users and their profile information in directory. Phone and their profiles go in SQL. You cannot manage your phones from AD.

A lot of callmanager applications depend on certain system users like CCMADministrator,CCMSysuser/IPMASysuser for functioning. LDAP connnection is required to retrieve information about them. Extension Mobility, IPMA,Attendant console rely on directory.

Just by creating a user in AD and giving the user an extension will not get the phone to come up. Assigning an extension to a user in AD or DC just creates an assiociation and has no impact in actual registeration of the phone.

If you have new hires starting and you want to give them an extension, you will need to register phones and assign them valid extensions by CCMadministration or you can look into a BAT/TAPS feature which can make this process automated as well.

5 REPLIES
New Member

Re: LDAP information - how it works?

When Cisco CallManager must use the corporate LDAP directory, the administrator must configure this capability by using the customer directory plug-in. The Cisco Customer Directory Plugin allows you to integrate Cisco CallManager with one of the following enterprise directories:

•Microsoft Active Directory (AD), available with Microsoft Windows 2000

•Microsoft Active Directory (AD 2003), available with Microsoft Windows 2003

•Netscape Directory Server, Version 4.1 and 4.2, and Sun ONE Directory Server 5.x

When you search from phone, you have the option to search based on first name, last name, extension and even the building depending on your xmldirectory page for searching.

In response to search, phone would show the first name, last name and extension.

When you integrate with AD, you can opt for one of the 2 choices.

1) Add users only in AD and they would show up in CCM global directory page.

2) Have the ability to add users from global directory page and AD and be able to see them

All this depends on what information you provide for user search base/user creation base.

Re: LDAP information - how it works?

Just want to double check something. The LDAP connection is only used for populating the XML directory on the IP phone. It has nothing to do with administration. IE.. there is no way of managing IP Phones, assigning Extensions in AD. Correct?

We are trying to streamline our directory, but also looking at what pieces to be touched in the infrastructure to assign new employees, etc. If a new hire came in, the NT group would assign email, NT account and possible an extension to that person. The phone would be ready to go just by adding it into the profile on AD.

I have seen it done with Mitel products, but not sure with Cisco.

Thanks!

tc

New Member

Re: LDAP information - how it works?

Callmanager stores users and their profile information in directory. Phone and their profiles go in SQL. You cannot manage your phones from AD.

A lot of callmanager applications depend on certain system users like CCMADministrator,CCMSysuser/IPMASysuser for functioning. LDAP connnection is required to retrieve information about them. Extension Mobility, IPMA,Attendant console rely on directory.

Just by creating a user in AD and giving the user an extension will not get the phone to come up. Assigning an extension to a user in AD or DC just creates an assiociation and has no impact in actual registeration of the phone.

If you have new hires starting and you want to give them an extension, you will need to register phones and assign them valid extensions by CCMadministration or you can look into a BAT/TAPS feature which can make this process automated as well.

New Member

Re: LDAP information - how it works?

Hi,

do you know how the file is called where the users are stored.

We have to make another ldap table where we can intergrate other data to search also via the phone. Till now, no clue how to solve this problem.

Cheers

New Member

Re: LDAP information - how it works?

can we implement AD policies on callmanager users? like changing passwords every month or something like that when we use the active directory integration tool?

Thanks

310
Views
0
Helpful
5
Replies