Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Restrict IM and presence in CUPS / CUPC

I have three groups of users such as Users1, Users2, and Users 3. I want to restrict who can IM and see the presence status of those user groups. Users1 should see everyone. Users2 should only see other people that are members of Users2 and Users 3 should only see members of users 3. Is it possible to restrict this using CUPC and CUPS version 7.x? Does the subscribe CSS and presence group restrict this ability?

8 REPLIES
Red

Re: Restrict IM and presence in CUPS / CUPC

Not available in 7.x.  Might be available in 8.x.

Michael

http://htluo.blogspot.com

New Member

Re: Restrict IM and presence in CUPS / CUPC

Thank you for the quick response. What about this setup. IF I had three different OU’s in the LDAP that the CUPC users were configured for. Say OU=Users1 , OU=Users2 and OU=Users3 so the full path would be OU=Users1,DC=Company,DC=Local  for each OU. Now in CUPS I set each users LDAP profile to only search within their OU. If they cannot see the other users via LDAP they should not be able to IM or see their presence. Would this work? I was going to lab it up next week and test it.

Red

Re: Restrict IM and presence in CUPS / CUPC

This will limit the search function from CUPC.  However a CUPC user can add contacts from http://cups/ccmuser page (if he knows the user ID of the contact he wants to add).

Michael

New Member

Re: Restrict IM and presence in CUPS / CUPC

So if a user manually adds a contact but that person  is not in their LDAP profile they will still be able to see the presence state and IM them? 

Can the presence group or subscribe CSS in call manager be used to limit this access?

Red

Re: Restrict IM and presence in CUPS / CUPC

Subscribe CSS and Presence Group on CUCM is for phone presence only.  It has nothing to do with IM.

You may try the "Privacy" config on http://cups/ccmuser.

Michael

http://htluo.blogspot.com

New Member

Re: Restrict IM and presence in CUPS / CUPC

So if I have a user that is not in an OU that can be seen with my configured LDAP profile I will still be able to receive presence and IM that person?

Red

Re: Restrict IM and presence in CUPS / CUPC

That is correct.  OU is the container in LDAP.  It's used for LDAP operation only.

Presence is totally independent from LDAP.  Presence is based on SIP and SIMPLE (URI).  As long as you know the URI (e.g. johndoe@acme.local), you may subscribe to their presence and send them IM.

John Doe may set up privacy rules to block your subscription.

Thanks!

Michael

New Member

Re: Restrict IM and presence in CUPS / CUPC

Has this feature been added to CUPS 8. I do not see it listed in the release notes.

thanks,

Chris

692
Views
5
Helpful
8
Replies