Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Problem with UCCM 6.1 and AD shema


here is my problem:

I have two OU's in AD shema with different users. All these users I have on Call Manager (two different LDAP directories).

But, I can put only one LDAP Manager Distinguished Name in LDAP Authentication for End Users!!!

And because of that, only users from one OU can log to the ccmuser page!!!

How can I solve this problem?

I'm looking for the best practice solution for this problem.

Thanks in advance,


New Member

Re: Problem with UCCM 6.1 and AD shema


check this out...

in the search base you do not have to point a particular OU, point it to the root domain, then it will search through all the OU's.

Additional Considerations for Microsoft Active Directory

A synchronization agreement for a domain will not synchronize users outside of that domain nor within a child domain because Unified CM does not follow AD referrals during the synchronization process. The example in Figure 18-10 requires three synchronization agreements to import all of the users.

-------Although Search Base 1 specifies the root of the tree, it will not import users that exist in either of the child domains. Its scope is only VSE.LAB, and separate agreements are configured for the other two domains to import those users.----------------

hope this helps....


New Member

Re: Problem with UCCM 6.1 and AD shema

Another this you want to make sure is if the Admin account you use to sync with LDAP has permission for both the OU's..

Use a specific account within the corporate directory to allow the Unified CM synchronization agreement to connect and authenticate to it. Cisco recommends that you use an account dedicated to Unified CM, with minimum permissions set to "read" all user objects within the desired search base and with a password set never to expire. (When the password for this account changes in the directory, Unified CM must be reconfigured to take the change into account.)

New Member

Re: Problem with UCCM 6.1 and AD shema

haven't touched this aspect for awhile, what is the common syntax used when adding the OU or the DC

New Member

Re: Problem with UCCM 6.1 and AD shema

Let me clarify that..hehe

I am adding ou=Users, dc=domain

but I am seeing no users after running the sync, was wondering if I was missing something