Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

CUPS: LDAP integration of multiple domains

Hi all,

within CUPS 6.0.2.1101-1 I set up multiple LDAP profiles for our users.

Unfortunately user1 with a search base of "DC=domain1,DC=com" cannot search for user2 with a being located in DC=domain2,DC=org".

Is there any suggestion to bypass this problem without restructuring our domain?

Thanks for any hint.

Thomas

5 REPLIES
Silver

Re: CUPS: LDAP integration of multiple domains

For users spread across multiple domains, set the User Search Base to the lowest point in the tree containing all domains with users serviced by the Cisco CallManager cluster. In structures in which serviced child domains are under the top-level domain, the User Search Base must be set at the root of the entire AD forest. In all cases, though, try to ensure that a domain controller for each serviced domain is collocated with Cisco CallManager, or that the network is sufficiently resilient and fast to allow remote searches with no greater performance degradation than occurs with local searches.

http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/4x/42drctry.html

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_white_paper09186a0080092566.shtml

New Member

Re: CUPS: LDAP integration of multiple domains

Hi Thomas,

We have in our environment 2 AD domains in the same forest. The issue you pointed on is the same: a LDAP profile of a user can only browse users using a single search base. So we cannot find or add users from both domains. They are isolated.

Did you find a solution for your issue?

Thank you for your feedback.

Best regards,

Yorick

New Member

Re: CUPS: LDAP integration of multiple domains

Hi Yorick,

unfortunately I was not able to find a solution. If I find a solution I will post it here.

regards Thomas

Red

Re: CUPS: LDAP integration of multiple domains

The solution is very simple:

On CUPS > Application > Cisco Unified Personal Communicator > LDAP Profile, set the search base to below:

Ou=xxx,dc=domain1#Ou=yyy,dc=domain2

Use '#' as separator. This works on CUPC 7.0.2 or above.

Michael

http://htluo.blogspot.com

New Member

Re: CUPS: LDAP integration of multiple domains

Thank you so much Michael!

You are a real CUP guru.

I just ordered your book ;).

BR,

Yorick

767
Views
5
Helpful
5
Replies