Restrict IM and presence in CUPS / CUPC

[Bill19795_2]

I have three groups of users such as Users1, Users2, and Users 3. I want to restrict who can IM and see the presence status of those user groups. Users1 should see everyone. Users2 should only see other people that are members of Users2 and Users 3 should only see members of users 3. Is it possible to restrict this using CUPC and CUPS version 7.x? Does the subscribe CSS and presence group restrict this ability?

[htluo]

Not available in 7.x.  Might be available in 8.x.

Michael

http://htluo.blogspot.com

[Bill19795_2]

Thank you for the quick response. What about this setup. IF I had three different OU’s in the LDAP that the CUPC users were configured for. Say OU=Users1 , OU=Users2 and OU=Users3 so the full path would be OU=Users1,DC=Company,DC=Local  for each OU. Now in CUPS I set each users LDAP profile to only search within their OU. If they cannot see the other users via LDAP they should not be able to IM or see their presence. Would this work? I was going to lab it up next week and test it.

[htluo]

This will limit the search function from CUPC.  However a CUPC user can add contacts from http://cups/ccmuser page (if he knows the user ID of the contact he wants to add).

Michael

[Bill19795_2]

So if a user manually adds a contact but that person  is not in their LDAP profile they will still be able to see the presence state and IM them? 

Can the presence group or subscribe CSS in call manager be used to limit this access?

[htluo]

Subscribe CSS and Presence Group on CUCM is for phone presence only.  It has nothing to do with IM.

You may try the "Privacy" config on http://cups/ccmuser.

Michael

http://htluo.blogspot.com

[Bill19795_2]

So if I have a user that is not in an OU that can be seen with my configured LDAP profile I will still be able to receive presence and IM that person?

[htluo]

That is correct.  OU is the container in LDAP.  It's used for LDAP operation only.

Presence is totally independent from LDAP.  Presence is based on SIP and SIMPLE (URI).  As long as you know the URI (e.g. johndoe@acme.local), you may subscribe to their presence and send them IM.

John Doe may set up privacy rules to block your subscription.

Thanks!

Michael

[fossilev700]

Has this feature been added to CUPS 8. I do not see it listed in the release notes.

thanks,

Chris