Unity Connection 8.5 change to LDAP Sync/Authentication

In Unity Connection 8.5(1) Subscribers were imported from CallManager before LDAP was setup, however I then realized I needed LDAP Authorization/integration and enabled LDAP. Users still show CallManager Integration and the LDAP radio box is grayed out.
Can I change the users Integration to LDAP somehow without deleting/adding Subscribers?
If I need to delete them, I assume I can COBRAS Export, Delete subscribers, then add back in integrating with LDAP not CallManager?

Jason,
Here is a doc that explains how to perform this operation:
http://www.cisco.com/en/US/docs/voice_ip_comm/connection/8x/user_mac/guide/8xcucmac105.html#wp1074612
Regards
Solomon

Similar Messages

Unity Connection 8.5 alias to ldap username mismatch

Hello,
Can someone help me to determine the correct way to integrate LDAP into CUC after mailboxes have already been created from end users in CUCM especially when the ldap user ID and the CUC alias do not match?
From the cisco guide:
For every Cisco Unity Connection user that you want to integrate with an LDAP user, if the value of the Connection Alias field does not match the value of the LDAP user ID, use Cisco Unity Connection Administration to update the Connection alias so that they do match.
Does this mean that I can change the CUC alias for a voicemail user before doing the ldap integration with no impact to the end user?

Hi Ricardo,
Yes, you can change the alias at any point without
impacting the end user We have to do it all the time
when people get married etc.
Cheers!
Rob

COBRAS Import for Unity Connection 8.5 and Subscriber LDAP Integration Status

Using COBRAS Import for Unity Connection 1.1 Build 212 with Unity 4.2 Voicemail Only and Connection 8.5(1)SU1 with LDAP Directory Integration
When I run COBRAS the old alias matches the new alias and my desire is for subscribers being moved to be LDAP inegrated. However after COBRAS runs, the radio box for LDAP Integration Status on the subscriber is set to Do Not Integrate with LDAP Directory. Is there a way for COBRAS to select Integrate with LDAP Directory when the alias matches on LDAP?

Hi ben,
If you are just importing from and not authenticating against LDAP, then the PIN comes
from the Connection Template you used to build the users;
Note that no passwords or PINs are copied from the LDAP directory to the Connection database. If
you want Connection users to authenticate against the LDAP directory, see the “LDAP
Authentication” section on page 9-7.
http://www.cisco.com/en/US/docs/voice_ip_comm/connection/8x/design/guide/8xcucdg040.html
Cheers!
Rob
"Show a little faith, there's magic in the night" - Springsteen

Automating user creation for Unity Connection when sync'd with LDAP

Hi
Is it possible to automatically create users that sync with unity connection?
I have a unity connection 7.0 server that is sync'd with LDAP and i use a ldap filter so that only users with a specific attribute are sync'd. I can see the users when i try to do an import but is there anyway that they can automatically be created

No
Check this check box so that Cisco Unity Connection gets basic information on Connection users from the LDAP directories that you specify on the LDAP Directory page. Data is synchronized only for the Connection users that you created by importing users from the LDAP directory. Connection does not automatically create new Connection users when new users are added to the LDAP directory.
http://www.cisco.com/en/US/docs/voice_ip_comm/connection/7x/gui_reference/guide/7xcucgrg100.html#wp1069724
HTH
java
if this helps, please rate
www.cisco.com/go/pdihelpdesk

Jabber for Windows and Unity Connection Voice mail out of sync

Hello all,
Now that Jabber is pretty much part of every install you begin to notice some trends. One trend that I have noticed happening across several of customers is complaints about Jabber and the Voicemail server getting out of sync. It’s never really been a wide spread issue but it has be noticed by several of my customers enough so that I’m reaching out to see if others are experiencing the same problem. Here are the symptoms, a person sitting at their desk they have a physical phone, and a windows PC running Jabber 4 Windows. They miss a call and the MWI lamp gets lit on the phone but not on Jabber. When you click on HELP / Show Connection status, you see all green checks, and Voicemail shows connected from Jabbers standpoint. When you exit the application and come back in, then it sync’s back up just fine. I have never seen it happen myself, but to be honest I’m never at my desk enough to even notice if my phone lamp is lit.
Anyway has anyone had similar issues? If so is there a fix?

Symptom:
User logged in Jabber and do not log-off/sign-out for more than 24 hours and then jabber does not receive new voicemails from Unity Connection. User will be able to receive voicemails from other interfaces like Outlook, TUI but voicemails will not show up in Jabber.
Conditions:
User does not sign out from jabber for more than 24 hours since last log on.
Workaround:
Sign out from jabber at-least once a day and sign-in back so that subscription will not expire in Unity Connection database.
Voicemail does not sync if Jabber left logged in for more than 24 hours
CSCuo46274
Can be fixed, depends on releases, TAC offered me a fix in version 10.5(1)ES29

Unity 7 to Unity Connection 8

this is a design question and best way to go about doing this:
we have Unity 7 voicemail only in it's own domain on box exchange. we have a total of 5 servers like this connected together around the world.
we want to move to Unity Connection HA at all thye sites and network digitally. We want to integrate to their existing corporate domain. we must preserve greetings and passwords and callhandlers but not voicemail. what and how do we do this.

COBRAS cannot maintain passwords since Microsoft AD stores them in a one-way hash. Cisco's documentation says this:
Passwords for Cisco Unity web applications cannot be exported because they are stored in Active Directory. When you create new user accounts by importing data, every account will get the same password, which is the password in the template that you specify when you import data.
You can have internal user accounts in Unity Connection; or syncronize them to UCM or Microsoft AD through AXL or LDAP respectively after import. Unlike Unity, Unity Connection is read-only with LDAP so the schema extensions are no longer relevent.
I'm not sure what your migration strategy is; however, it is possible to digitally network a Unity 8 site (i.e. you would have to upgrade those first) to Unity Connection 8 site. The Design Guide has a whole chapter on this: Migrating from Cisco Unity to Cisco Unity Connection 8.x. You may want to spend some time reading that and deciding on the best course of action.

Cisco Unity Connection ViewMail Password manual reset after LDAP change

Unity Connection 8.5.1, Viewmail 8.5.4 and Exchange 2010 with 2008 AD
We are migrating to Unity Connection from Unity 7.0.2 and have discovered that when we change our passwords in AD (scheduled every 40 days) this does not get synchronized with viewmail. Users then receive an error indicating the user ID or password is incorrect and then call the helpdesk to find out where to change this setting. Has anyone found a way around this. It is becomking a huge issue with 1200+ employees.
Hopefully it is on a roadmap for cisco as well?
Thanks
Liz

'its really a different user experience' you are telling me!!!
I like the other features that 8.5 brings but the outlook viewmail single sign on design fault is a big mistake. It even effects cupc client as you have to update the voicemail password in their...
I did read all the documentation carefully, it doesnt mention that the passwords do no sync. From a end user point of view, this is a disator. 95% of our users manage the voicemail through outlook, if the password doesnt update in viewmail then they can not retrieve their voicemail.
anyway, i ve spent alot of time and money building the new connection server, but i have no option but to stick to our unity 5 solution. Luckily i noticed this before i changed/migrated people groupwide.
Thanks a million Cisco, I now have to explain this to our IT director....

Unity Connection 8.6 LDAP or CUCM Import with german special characters called "Umlaut": ä, ö, ü

Hi,
for jabber 9.1 integration i sync'ed all users at Callmanager, Presence and Unity to our LDAP (MS AD). with CUCM and Presence (both 8.6.x), it works fine, just Unity Connection sync the Users from AD, but i cannot import Users with german special characters ä, ö, ü (i.E. German Name in LDAP-su: Müller).
Jabber 9.1 need for Voicemail Integration the AD Authentication. Know somebody, if there is an Workaraound or Fix ?
This is a general issue, with or without Jabber, with sync directly from AD, or indirectly through CUCM (sync'ed with AD)
thx and regards
Jacky

I located an identical defect (CSCts28455) that was closed as unreproducible. The defect references CSCtj73444 "Add support for UTF-8 password to LDAP and RADIUS/MSCHAP" which is added to 8.4.2 with the recommendation of RADIUS/MSCHAP or LDAP only for international character support. It would make sense to go to the latest in your current train (ie: 8.4.4.1.ED) and see if the issue remains. What you want to do appears to be supported.
Matthew

Unity Connection LDAP Error

I'm trying to setup a Unity Connection server with an LDAP directory and when I save the configuration I get this error message:
Error while Connecting to ldap://172.16.1.2:389, null
The UCONN server is connecting to a Windows 2000 DC running Exchange 2003.
I think I'm missing something simple but I'm not sure what.
Thoughts?

Hi,
Sounds like you may either have an incorrect IP address and/or port # for your DC or GC. Port 389 for a Domain Controller, and if the server is a Global Catalog, you'll need port 3268. Another possibility is that port 389 may be blocked by some sort of ACL or firewall. I would try the port change first and re-verify your IP address and if that doesn't get you anywhere, setting up a network capture to see what may be happening during the bind request is your next step.
Hope that helps,
Brad

AD accounts missing after full sync, Unity connection

I'm missing people (rather their AD accounts) in Unity connection even after I run a full sync. I know the person has an account, I just don't know why he's not showing up.
Any Ideas would be appreciated, thanks.
Version 7.1.5ES46.33900-46

Is that person in the AD container your LDAP search base is defined with?
Are you using any LDAP filters?
Chris

Changing to manual sync while the ipod is NOT connected?

I was trying to find out if there was a way to change the iPods setting to sync manually (or only for selected material) without connecting the iPod to the Mac.
I do not want to loose high score settings on some games. As far as I can tell I can change settings only when the iPod is connected to my Mac, and when I connect it will initiate an automatic sync all as that was the setting when last connected to the Mac!
Is there anyway to change the setting to manual without having the iPod connected? Alternatively, is there anyway to disable sync, or cancel sync before connecting the iPod?

*Is there anyway to change the setting to manual without having the iPod connected?*
No there's not
*Alternatively, is there anyway to disable sync, or cancel sync before connecting the iPod?*
Yes there is. You can use a keyboard command to prevent your iPod auto-syncing with iTunes. While connecting the iPod to the computer on a Mac hold down the Option and Command (⌥ and ⌘ Apple) keys. This will stop the iPod from auto-syncing with iTunes and it will appear in the source list. Wait until you are sure the iPod has mounted, and that it will not auto sync and then you can let the keys go. This may take between 20 to 30 seconds depending on your computer. You should then be able to change your settings: http://docs.info.apple.com/article.html?path=iTunesMac/7.3

LDAP sync is not updating any changes/deletion ?

In our environment we have OIM 11.1.1.3 and we have enabled LDAP sync with OID. Any user created on OIM is getting synced to OID. The problem is when we are making any changes to the attributes of the users or deleting a user the change are not getting reflected back to OID. If someone can help or give proper pointers or guidance so that we can have a fully functional sync ?

When you delete a user, they only get disabled. There is a task called "Delayed Delete User" which will delete based on the value in the system configuration value "Period to Delay User Delete". Try configuring this to 0 and then running the scheduled task to see if it deletes.
For the attributes not being propagated, check the /db/LDAPUser file to see if the mappings exist for the attributes you are modifying. In R1, there is the script which i have mentioned in this post, https://forums.oracle.com/message/10354064, for adding and removing mappings.
-Kevin

Trouble with Unity Connection and LDAP

Our CUCM 8.6 is currently integrated with LDAP, this was done before I started with the company, I'm working on getting the CUC integrated as well, but I keep getting the following error message:
Error while Connecting to ldap://xx.xx.xx.xx:389, null
I took the exact same settings that was used on the cucm (the LDAP syncs fine with CUCM)
LDAP Configuration name: ActiveDirectory
LDAP Manager Distinguished Name: [email protected]
LDAP Password: *******
LDAP User Search Base: DC=xyz,DC=net
User ID: sAMAccountName
Middle Name: middleName
Manage ID: manager
phone number: ipPhone
First name: givenName
Last Name: sn
Department: department
Mail ID: mail
User ID: sAMAccountName
Middle Name: middleName
Manage ID: manager
phone number: ipPhone
First name: givenName
Last Name: sn
Department: department
Mail ID: mail
Any ideas what could be causing that error? I've ran into this before somewhere but was able to figure out that it was something with the way I had put in the OU..This time I'm really I have not idea, especially since I took the settings from the LDAP setup in CUCM.

Hi Chris,
Yes I'm sure the sync is still working, I've went into CUCM and did a full sync and it was successful, I also hit save and that was successful as well, that was the first thing I did just to make sure it was working, I was thinking like you that maybe it wasn't working properly ...I'll take some screen shots and post shortly
Fred
Here's a screenshot of both CUCM and CUC
Message was edited by: Fred Rawlings

Cisco Unity Connection with LDAP Problem

Hello,
I have a CUCM and Cisco Unity and an LDAP Server 2008,
When I configure CUCM with LDAP, users are imported, but when I did the same method for integrating Cisco Unity with ldap does not work, when I click "Import User" via LDAP I find a user who call "Token_User_8b191a06-5041-4b41-bd5f-0575fde674e3" without extension, and no user is imported
Unity Version : 9.0
CUCM Version : 9.0
LDAP : Windows 2008 Server
Regards,
Younes CHAFI.

Ok, there sre two things to do now..
1. Restart CUC..If you have already done that, then do opion 2
Utils service system restart
2. Take captures from cuc.. (once you start the capture, then go and try and force the ldap sync)
https://supportforums.cisco.com/docs/DOC-11599
Instead of using RTMT to collect the files, you can also use a SFTP tool like free FTPD..
Example below:
admin: utils network capture file mycap count 100000 size all host all 10.5.244.10
Executing command with options:
size=all count=100000 interface=eth0
src= dest= port=
ip=10.3.2.21
The trace continues until you press Ctrl-C.
Step 3: Download the Trace File
OK, so now you have a file somewhere on the system with the data that you would really like to view. You have to download it to your machine. You will need a running SFTP server on the target machine. You can use openSSH on linux/unix, freeFTPd, copSSH, or something similar.
admin:file get activelog platform/cli/newcap.cap
Collect the capture and attach here
Please rate all useful posts
"The essence of christianity is not the enthronement but the obliteration of self --William Barclay"

BULK Greeting Change in Unity Connection 8.6 and higher

In Cisco Unity Connection can you have the same voicemail greeting on 330 different voice mail boxes? These are for stores and if the store main number is busy or not answered it will got to voicemail
Each of the voicemail box then emails the voicemail as attachment to voicemail box owner?

Hi Anirudh,
I am not clear on what you mean by this sentence:
Each extension in the 330 sites will be unique and the same extension can be used for the user on Unity - a total of 330 users on Unity.
The Callflow we need looks like this.
Call from PSTN to SITEA---> CFAtoVM --> Plays Standard Greeting ---MWI for PhoneA at SITEA Turns on
Call from PSTN to SITEB---> CFAtoVM --> Plays Standard Greeting ---MWI for PhoneB at SITEB Turns on
regards
Andrew

Unity Connection 8.5 change to LDAP Sync/Authentication

Similar Messages

Maybe you are looking for