Hiding users in Corporate Directory

I am trying to remember how to hide users in CD in CM. Referring to this tech note, hiding users is not that of a big deal, but this user gets removed from CD in Callmanager and hence the user doesnt show up in the phone. The disadvantage of this method is that you can modify any user related parameter from the web interface. How can we work around this ? Is there another alternative method ?
http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a00804d2087.shtml

Sankar you might want to try the following:
HIDE USERS
DC DIRECTORY
You can hide users from beeing visible in the Corporate Directory.
For doing this, you have 2 options:
1) Set the first name to blank and put the whole name in the last name
field. Full Administrator users will not appear in the corporate
directory.
2) To hide a user in DC Directory:
First, cut and paste the following 4 lines into a file called "hideuser.ldif"
text file, and save it in the C: drive of the publisher callmanager server.
dn: cn=[userid],ou=users,o=cisco.com
changeType: modify
replace: Description
Description: CiscoPrivateUser
Set the [userid] to be the user you would like to hide. Example for the
UserID "ctifw":
dn: cn=ctifw,ou=users,o=cisco.com
changeType: modify
replace: Description
Description: CiscoPrivateUser
Next run the following command from a cmd prompt on the publisher callmanager
server in order to set the description field in DC Directory.
ldapmodify -h -p 8404 -D "cn=Directory
Manager,o=cisco.com"
-w -c -f hideuser.ldif
From 3.3 onwards, system users (or special users) are filtered out from the
search results. The users are filtered based on the attribute "Description".
If "Description" is CiscoPrivateUser, the user is not displayed in search
results from Corporate Directory or Users->Global Directory.
AD DIRECTORY
To hide a user in AD do the following:
* If integrated with AD 2000:
dn: cn=[userid], CN=users, dc=[domain], dc=com
changeType: modify
replace: Description
Description: CiscoPrivateUser
Save this file on the AD server as "hideuser.ldif".
Then execute on the AD server:
ldifde -i -f hideuser.ldif
* If integrated with AD 2003:
Copy the following 5 lines (please note the '-' after the four lines. In
AD2K3, this is required and has changed from AD2K) into a text file and
replace the [userid] with the userid of the user that needs to be
hidden. Replace the [domain] with your domain. Save this file on the AD
server as "hideuser.ldif".
dn: cn=[userid], CN=users, dc=[domain], dc=com
changeType: modify
replace: Description
Description: CiscoPrivateUser
Then execute on the AD server:
ldifde -i -f hideuser.ldif

Similar Messages

Few users are not showing up in Corporate directory

We have few users at a repote site who are not showing up in Corporate directory. they have UDP profile and they are logged in . i ahve compared the configration with other user of the same site who is showing up in corporate directory and config seems fine
the User is LDAP integrated in CUCM and not a local user
the corporate directory is activated as default parameter for entire cluster
Please help if we have any further things to be checked ?

There was a similar issue a couple weeks ago here
https://supportforums.cisco.com/discussion/12343101/how-refresh-corporate-directory-cucm-91
Did you check if the users are not listed if you are registered at the subscriber?
this was the solution in that mentioned post:
"worked with cisco we found that the issue only occurs when the phones are registered to the subscriber server...when the phone is registered to the publisher, the directory shows the current information. this indicates and issue with the database replication between the 2 servers.
the databases have been reset and are replication is resyncing...this will take a couple of hours..."
Eike

User Extension not showing in Corporate Directory on

I have a User whose name shows in the Corporate Directory, however his Extension not showing in Corporate Directory and unlike all other users who have a telephone Icon next to their name, his just has like a keypad icon.
Where do I start to troubleshoot this?

When I view the "End User" under User Management that User has no Phone listed for that users. I tried to find a way to manually change it, but I don't think I can because we are set to sync with AD.
So I'm thinking that the error may be in AD? What do you think?

Jabber IM for iPhone and corporate directory search

Hello!
In the Administrator's Guide (http://www.cisco.com/en/US/docs/voice_ip_comm/jabber/iPhone/8.6/Cisco_Jabber_IM_for_iPhone_Admin.pdf)
I cannot find an example of how configuring the client to search in the corporate directory, or the
requirements to do this. I don't understand how it works, in Cisco Jabber for Windows we configured UDS to search into CUCM directory, but it was also possible to use a external LDAP.
I tried also to configure a LDAP Profile in CUPS, and to associate the user to this profile but Jabber IM cannot find any contacts.
CUPS 8.6(3), Cisco Jabber IM 1.0.0
Regards,
Mirko

Jabber IM for iPhone use the LDAP profile configurable on the CUPS Admin page, Application->Cisco Jabber->LDAP Profile.
At first you have to configure your LDAP Server (Application->Cisco Jabber->LDAP Server): add here the IP Address of the LDAP Server with port 3268 and protocol type TCP, when you don't need to use LDAPS.
After that configure the LDAP profile and associate the user to this profile: you can do this either in the user setting page (Application->Cisco Jabber->User Setting) or directly on the LDAP Profile page.

Questions on Corporate Directory in Convergence

1. I want to have ability to create multiple corporate directories. I had that ability in UWC, but its not working in IWC. do I have to do anything special. Example, I have a directory for students and another for staff. I want to list them as two separate directories "Staff directory" and "Student Directory". I don't see any way of doing this in Convergence.
2. I have more than 20000 users in my directory, and When I click on the corporate directory, it takes for ever to display the users. Even if i search it takes for ever. I even reduced the lookthrough limit to 25. still i think its trying to search for the entire directory.
Any help on tuning will help me.
I am running Sun Communication suite 6 update 2.
Thanks
-V

vasandhan wrote:
1. I want to have ability to create multiple corporate directories. I had that ability in UWC, but its not working in IWC. do I have to do anything special. Example, I have a directory for students and another for staff. I want to list them as two separate directories "Staff directory" and "Student Directory". I don't see any way of doing this in Convergence.This functionality doesn't yet exist in Convergence. If this is important functionality for your environment then I would suggest you raise the following RFE with your Sun Account Manager:
RFE #6851525 - "Provide support for the Multiple corporate address books on client side"
2. I have more than 20000 users in my directory, and When I click on the corporate directory, it takes for ever to display the users. Even if i search it takes for ever. I even reduced the lookthrough limit to 25. still i think its trying to search for the entire directory.
Any help on tuning will help me.I suggest you read through the following thread (especially the posts at the end):
http://forums.sun.com/thread.jspa?threadID=5389715
Regards,
Shane.

Need to add mobile (cell) phone in corporate directory via LDAP

Hello All
Can I just start by saying that I am not a developer so expect some dumb questions to follow.
We have cucm 6.1 and am using ldap sync to AD. The problem is that we would like to query the mobile phone field within AD and present it on the phone when the directory button is pressed.
Is this possible ?
From what I have read in the forums I have to create another directory ???
I have downloaded the sdk 4.1 and tried to copy the asp files from the following directory C:\CiscoIPServices\ASP\ldap
I have replaced the variables
var s = new ActiveXObject("LDAPSEARCH.LDAPSearchList");
s.server = "ldap.cisco.com";
s.searchbase = "ou=people,o=cisco.com";
with
var s = new ActiveXObject("LDAPSEARCH.LDAPSearchList");
s.server = "demounity.demo.voyager.net.uk";
s.searchbase = "ou=users,ou=demo,dc=demo,dc=voyager,dc=net,dc=uk";
s.SetOutputTitle("ActiveX Directory Search", 45);
s.SetOutputPrompt("Records %s to %e of total %c", 45);
s.AddReturnAttr("givenName,sn","Name","%1,%2", 20);
s.AddreturnAttr("telephonenumber","Telephone","%1", 20);
s.AddreturnAttr("mobile","Mobile","%1", 20);
s.Addreturnattr("mail","Email","%1", 20);
s.AddSortingAttr("telephonenumber", 1);
s.SearchByEmail(email);
I made these changes to all the asp files and referenced them all in a file called test_main.asp. Which is similar to the ASP_main.asp.
I have run the regsvr32 LDAPSearch.dll and have added the following url to the phones directory url field ttp://192.168.9.101/CiscoIPServices/ldap/test_main.asp. Where 192.168.9.101 is my AD and IIS server (demounity.demo).
The phone only display the Missed, received and places calls when I press the directory button. The corporate directory is missing.
Are there any steps that I am missing or am I barking up the wrong tree all together
to achieve what I need to ?
I have also configured the CiscoUrlproxy for what reason I don't really understand.
Thanks
Feisal

Since the CCM is a black box now, unless you pull out a HD and mount it on another Linux box where you have full access, or booting from a Linux boot CD there's no way to access the file system.
However, you posted an ASP sample so I'm not sure if a jsp (java server page) would help you a lot - there's also no way of telling how much logic will be in the jsp page and how much logic will be behind in a compiled class - e.g. my own directories only have very basic logic (reading input, writing output, limit the number of results per page) and everything else is done in a bunch of jar files - so using them would only work if you can restrict yourself to doing exactly what my frontend page does.

How to use SPNegoLoginModule with a corporate directory

Hi!
I'm trying to use the kerberos login module for the integrated windows authentication. I found in help.sap.com how to set up the kerberos for an ADS data source. But this works only when using the ADS as unique data source with the windows account of the user as uniquename.
Our portal currently uses the corporate directory (a ldap system) for authentication. The corporate directory is also defined as data source in the dataSouceConfiguration.xml file.
And now we should implement the windows authentication via kerberos in additon to this. Kerberos uses a windows domain controler for authentication.
My problem is that the kerberos principal name used for authentication (=the windows account) is not available in our corporate directory.
However, there is a unique attribute available in both, in the domain controller and in the corporate directory which could be used for mapping. But I do not know how to do this.
I thought that I have to set up the windows domain controler as a second data source in the dataSourceConfiguration.xml file. But I'm not sure about this.
Have someone experience how to do this? Hints are very welcome!
Thanks
Christian

I found a solution for this problem, I don't know it's best practice but here it is :
    public void validate(FacesContext context, UIComponent component, Object value) throws ValidatorException
        String errortext;
        Pattern pat=Pattern.compile(".+@.+\\.[a-z]+");
        Matcher m= pat.matcher(value.toString());
        if(!m.find())
            ResourceBundle bundle =
            ResourceBundle.getBundle("be.vdab.resources.ApplicationResources", context.getViewRoot().getLocale());
            errortext = bundle.getString("erroremail");
            FacesMessage message = new FacesMessage(errortext);
            throw new ValidatorException(message);
    }

Convergence 2 Corporate Directory - Removing "Groups" Dialog

Under the Address Book, under Corporate Directory, there is a dialog for "Groups".
There are certain internal LDAP groups that are in there that we don't want our users having access to. How do I keep these from displaying? Is it possible to disable the entire Groups dialog?

Under the Address Book, under Corporate Directory, there is a dialog for "Groups".
There are certain internal LDAP groups that are in there that we don't want our users having access to. How do I keep these from displaying? Is it possible to disable the entire Groups dialog?

Collect UserID from Corporate Directory

Hi
We currently collect Caller Name from our corporate directory in UCM but would also want to collect UserID, is that possible?

I see - in that case, it wouldn't be as simple as you hoped. You are looking up against the user directory that is designed to return contact info for users, not expose their security credentials.
The data is available in CUCM, what I would do is write a small AXL web page that would look up the enduser table based on the number you supply to a parameter on the web page. This would then just return a simple XML document with the userID.
This would also need to be hosted on a seperate server..
Regards
Aaron

LDAP Corporate Directory lookup won't work on Win 2008 64-bit

I just spent like 20 hours chasing this problem so I thought I'd post the solution here.
We host the IP Phone Corporate Directory on a Win 2003 web server and it works fine, but failed when we tried to move it to a Win 2008 server.
When the multidirectory.asp or localizeddirectory.asp script is run, it fails on this line:
var s = new ActiveXObject("LDAPSearch.LDAPSearchList");
If you try to access the service from a browser like this: http://myserver/CiscoIPServices/ASP/localizeddirectory/localizeddirectory.asp you'll get an error something like this:
XML Parsing Error: not well-formed
Location: http://myserver/CiscoIPServices/ASP/localizeddirectory/localizeddirectory.asp
Line Number 1, Column 26:
View the page source and you'll see something like this:

Microsoft JScript runtime error '800a01ad'

Automation server can't create object

/CiscoIPServices/ASP/localizeddirectory/localizeddirectory.asp, line 51
If you configure IIS to send detailed error messages to the browser, disable user-friendly error messages on your browser, and change
Response.ContentType from "text/xml" to "text/html" in the ASP script, you'll see the REAL error:
Microsoft JScript runtime error '800a01ad'
Automation server can't create object
/CiscoIPServices/ASP/localizeddirectory/localizeddirectory.asp, line 51
Microsoft provides this, which is may be of help for some issues, but not this one:
http://support.microsoft.com/default.aspx?scid=kb;en-us;q194801
This '800a01ad' error is discussed in quite a few other posts on this forum (search for LDAP COM, or COM ERROR, or LDAPSEARCH) but I could not find anything about win 2008.
In the end I discovered the problem is that the Cisco DLL (LDAPSearch.dll) is 32-bit but Win 2008 is running in 64-bit mode. To fix it:
Run Server Manager
Navigate to IIS manager --> Application Pools --> DefaultAppPool
Edit Advanced Settings
Change "Enable 32-bit applications" to True
I hope this helps someone!
Regards,
Tim

timbo66, you're really great guy: you've saved my brain from explosion
Thanks a lot! You solution really works!

Custom Corporate Directory Query Based on Department

I need to limit specific queries from Corporate Directory search based on Department. CCM 4.1(3)
My Goal is to create separate directory options, each associated with a specific department (I've done this) and then limit the query to ONLY users in that department (I need help here. :-|
The Flow as Joe sees it ~
User selects directory button.
(Based on info from xmldirectory.asp...)
User is provided with the following menu:
1. Missed Calls
2. Placed Calls
3. Received Calls
4. Department A
5. Department B
6. Department C
(I've got this far by adding new menu items to the xmldirectory.asp file, and then I tie those to separate xmldirectoryinput.asp files, which I plan to use to limit the query based on dept)
<MenuItem>
<Name><% = outputString( "Department A", "dictionary.lblCorporateDirectory" ) %></Name>
<URL><% = getBaseURL() %>A_xmldirectoryinput.asp</URL>
</MenuItem>
<MenuItem>
<Name><% = outputString( "Department B", "dictionary.lblCorporateDirectory" ) %></Name>
<URL><% = getBaseURL() %>B_xmldirectoryinput.asp</URL>
</MenuItem>
<MenuItem>
<Name><% = outputString( "Department C", "dictionary.lblCorporateDirectory" ) %></Name>
<URL><% = getBaseURL() %>C_xmldirectoryinput.asp</URL>
</MenuItem>
Next when the user selects 4. Department A, they should receive the standard
First Name:
Last Name:
Number:
However, When the user selects "search", I ONLY want them to see directory entries in Department A, and not the entire Corporate Directory. So I need A_xmldirectoryinput.asp to limit the query to Department A. Actually ~ I've just added the Department menu item via the xmpldirectoryinput.asp file, and prepopulated it with the Deparment of my choice, though now, I'm stuck on the xmldirectorylist.asp, and how to Query for the DepartmentNumber ... Help please??? :)
If they select Department B, ONLY Department B, etc.
What do I need to add to, or reference in the xmldirectoryinput.asp to restrict the search to a specific department?
Also - Would any changes, additions, etc. be required in the xmldirectorylist.asp file?
THANKS IN ADVANCE!!!!! :)
Joe

Please use IDM forum for IDM related questions. This is proxy forum.

Transfer from corporate directory with 8945

Hi,
we have a strange issue with transferring from corporate directory.To be honest we have never really used it so I'm struggling a little with the setup.
Call is placed to a phone and answered.
on the answered phone User looks up person on Corp directory the person they want and dial
The phone selected In corporate directory rings but then there is no option to complete the transfer.
Now I believe this is to do with enabling Direct Transfer , but I'm unable to assign the softkey to any state that I can see , or perhaps enable the transfer hard key with direct transfer???
anyone had anything similar?

Ebert, Did you solved this issue?
Thanks a lot for your answer.

Cannot dial from corporate directory

Hi all,
In my IP phones I got the option corporate directory,but after I select any person from that list I can,t dial from the corporate directory list..
Please help
thanks

Can you put the Directory URL into your browser? If it looks like mine, the first URL will be the Directory input page which allows the user to enter criteria to search. That XML will include another URL that generates a Directory Listing. Put that URL in your browser, then scroll to the bottom. Near the bottom, you should see a number of SoftKeyItem instances. One of those should include a line that looks like SoftKey:Dial. It will also need a position specified that equals 1 throug 4 (5 if you use 7975's). If the position flag is invalid, you may not see the Dial softkey. If anything is off when you veiw it in the browser, you need to go into the DirectoryList.asp that generated the XML and correct it.

Resource Booking and Corporate Directory Portlets

Hi...
Our intranet currently uses an old product from Oblix Corporation for a Corporate Directory (org. hierarchy, staff, telephone list, photo etc...) and Meeting Room Booking. We want to upgrade our intranet and use Oracle Portal to provide a 1:1 experience for individual users but Oblix have moved on and the above functions have been dropped from their portfolio.
I know that we could probably cobble something together using Oracle Internet Directory and the Resource Booking function in the calendar that ships with 9iAS but I would prefer a product or portlet that is specific to the above simple but lets face it essential requirements of any office.
Any ideas welcome.

Now why didn't I think of that? You are good Mr H - I am working with sample data provided by a client who moves in mysterious ways.
They had a resource plan with no work in it but crucially resource utilization was calculated from the resource plan, a case of a little knowledge being a dangerous thing.
What was throwing me was that the work values visible in the Project Centre and in Project Professional for the project with the resource plan were consistent.
An interesting anomaly that is now resolved, I will remember it in future as it is no doubt likely to occur with other customers who go exploring the outer reaches of what is and is not possible with the solution.
Many thanks for your input, hopefully catch up some time before too long.
Have you sampled Leffe Nectar? Leffe with Honey in it as the name suggests!
Dominic Moss MAPM Microsoft Certified Technology Specialist Wellingtone Ltd - Your Project Management Partner - Certified Microsoft Partner Specialising in EPM/PPM - Corporate Members of the Association for Project Management [APM] - Members of the Recruitment
& Employment Confederation [REC] www.wellingtone.co.uk http://www.wellingtone.co.uk/blog Subscribe to The Wellingtone Project Management Newsletter Join the thousands of project management professionals who receive practical, straight forward advice, templates,
tips and expert articles every month.

Convergence - corporate directory questions

We need Convergence to search an external corporate directory. Our external directory is populated by a more authoritative database, and the data is sanitized to not contain restricted (FERPA) data.
1. When will support for an external corporate directory be added to Convergence?
2. How do you disable the default option to search the Corporate Directory? We can't allow users to search the backend ldap server, and it is misleading to have it present in the interface.
3. Ideally, we want this to be configured on a per domain basis, since some of our domains will need to search a different corporate directory. Will there be a way to add dojo customizations to change which directory(s) will be searched?
Jesse

jessethompson wrote:
We need Convergence to search an external corporate directory. Our external directory is populated by a more authoritative database, and the data is sanitized to not contain restricted (FERPA) data.
1. When will support for an external corporate directory be added to Convergence?You can achieve this already e.g.
./iwcadmin -w password -o ab.corpdir.[default].ldaphost -v "remoteldap.domain.com"
./iwcadmin -w password -o ab.corpdir.[default].ldapport -v 389
./iwcadmin -w password -o ab.corpdir.[default].ldapbinddn -v 'cn=Directory Manager'
./iwcadmin -w password -o ab.corpdir.[default].ldapbindcred -v 'password'Side Note: I just logged a new bug with regards to attempting to configure a failover ldaphost system using the steps above -- a single ldaphost does work however:
bug #6825805 - "Failover corporate LDAP server not configurable"
2. How do you disable the default option to search the Corporate Directory? We can't allow users to search the backend ldap server, and it is misleading to have it present in the interface.There is an option to enable/disable the Corporate Address-book, unfortunately it doesn't work, at least not in my pre-release patch -07 test installation:
./iwcadmin -w password -o ab.corpdir.[default].enable -v falsebug #6825820 - "Disabling Corporate Directory causes Convergence to hang during loading of interface"
3. Ideally, we want this to be configured on a per domain basis, since some of our domains will need to search a different corporate directory. Will there be a way to add dojo customizations to change which directory(s) will be searched?It is already possible to configure per-domain settings for corporate/personal addressbooks. For example I created a new domain (another.domain.com) and set the following:
./iwcadmin -w password -o ab.{another.domain.com}.psrootpattern -v 'ldap:///piPStoreOwner=%U,o=%D,o=PiServerDb'
./iwcadmin -w password -o ab.{another.domain.com}.pstore.defaultserver -v domainid1
./iwcadmin -w password -o ab.{another.domain.com}.pstore.[domainid1].ldaphost -v remoteldap.domain.com
./iwcadmin -w password -o ab.{another.domain.com}.pstore.[domainid1].ldapport -v 389
./iwcadmin -w password -o ab.{another.domain.com}.pstore.[domainid1].ldapbinddn -v "cn=Directory Manager"
./iwcadmin -w password -o ab.{another.domain.com}.pstore.[domainid1].ldapbindcred -v password
./iwcadmin -w password -o ab.{another.domain.com}.maxpagedsearch -v 10
./iwcadmin -w password -o ab.{another.domain.com}.corpdir.[corpdomainid1].urlmatch -v ldap://corp-directory1
./iwcadmin -w password -o ab.{another.domain.com}.corpdir.[corpdomainid1].searchattr -v 'entry/displayname,@uid'
./iwcadmin -w password -o ab.{another.domain.com}.corpdir.[corpdomainid1].lookthrulimit -v 3000
./iwcadmin -w password -o ab.{another.domain.com}.corpdir.[corpdomainid1].ldaphost -v remoteldap.domain.com
./iwcadmin -w password -o ab.{another.domain.com}.corpdir.[corpdomainid1].ldapport -v 389
./iwcadmin -w password -o ab.{another.domain.com}.corpdir.[corpdomainid1].ldapbinddn -v "cn=Directory Manager"
./iwcadmin -w password -o ab.{another.domain.com}.corpdir.[corpdomainid1].ldapbindcred -v passwordThe options above are described here:
http://wikis.sun.com/display/CommSuite/Sun+Convergence+Administrative+Tasks#SunConvergenceAdministrativeTasks-Howtosetupadomainbasedconfigurationforaddressbook%3F
Note: I did hit yet-another problem when configuring the above:
ADDRESS_BOOK: ERROR from com.sun.comms.client.ab.wabp.WABPEngine Thread
httpSSLWorkerThread-80-0 at 2009-04-03 04:36:34,55
1 - WABPEngine.process: exception in search_entry.wabp Too many opened paged searches :
psearchBook: too many psearch: 0I was able to resolve this error by setting:
./iwcadmin -w password -o ab.{another.domain.com}.maxpagedsearch -v 10Regards,
Shane.

Hiding users in Corporate Directory

Similar Messages

Maybe you are looking for