CUCM 8.5 fails ldap syncronization with Open LDAP 2.4

[f-genovese]

Hi all,

did anyone experience the LDAP integration between Open LDAP 2.4 and CUCM 8.5 or other CUCMs (6 or later)?

I have a CUCM 8.5 and it fails in importing users from ldap DB.

I verified the search base and the ldap account with ldap browser and everything was ok: I succeeded in browsing all the ldap domain.

The issue seems to be the cucm 8.5.

Has anybody any idea about this matter?

Regards,

Federico.

[clileikis]

Hi there,

Are you receiving any error messages?  Can you confirm that the Cisco DirSync process is started and/or reset and try the sync again.  Also, you may want to check to make sure there are no firewalls/ports being blocked between CUCM and your LDAP server.

You'll also want to make sure your LDAP Directory page is mapping attributes correctly to your OpenLDAP server under System > LDAP > LDAP Directory.  By default it is set to use sAMAccountName for the UserID field.

Table 16-5     Synchronized LDAP Attributes and Corresponding Unified CM Field Names 

Unified CM User Field	Microsoft Active Directory	Active Directory Application Mode (ADAM) or Active Directory Lightweight Directory Service (AD LDS)	Netscape, iPlanet, or Sun ONE	OpenLDAP
User ID	One of: sAMAccountName mail employeeNumber telephoneNumber userPrincipalName	One of: uid mail employeeNumber telephoneNumber userPrincipalName	One of: uid mail employeeNumber telephonePhone	One of: uid mail employeeNumber telephonePhone
First Name	givenName	givenName	givenname	givenname
Middle Name	One of: middleName initials	One of: middleName initials	initials	initials
Last Name	sn	sn	sn	sn
Manager ID	manager	manager	manager	manager
Department	department	department	departmentnumber	departmentnumber
Phone Number	One of: telephoneNumber ipPhone	One of: telephoneNumber ipPhone	telephonenumber	telephonenumber
Mail ID	One of: mail sAMAccountName	One of: mail uid	One of: mail uid	One of: mail uid

HTH,

Chris

[f-genovese]

Hi Chris,

I ask your questions below:

-Are you receiving any error messages?   NO

-Can you confirm that the Cisco DirSync process is started and/or reset and try the sync again. YES, I tried.

-Also, you may want to check to make sure there are no firewalls/ports being blocked between CUCM and your LDAP   server.  NO blocks are applied by the firewall.

-You'll also want to make sure your LDAP Directory page is mapping attributes correctly to your OpenLDAP server under System > LDAP > LDAP Directory. By default it is set to use sAMAccountName for the UserID field.  I checked the attributes and they are correct  (uid is used instead of sAMAccountName  ...; I also cheked the attributes using an ldap browser and browsing the ldap domain correctly).

Ciao,

Federico