We had that issue too and the situation sounds similar. Our customer is managing his Active Directory and somehow they changed their way of managing the users. In our system we've got own LDAP replications synced with the users AD. In this case, to prevent more damage, we stoped the sync to the customers AD because after some time the users seemed to get deleted through the 'inactive' flag. Altgough it was worse enough that they couldn't log in as an inactive user. I'm sorry for not beeing able to report more, because I couldn't catch up more information as I'm in 1st level only.
To find a quick and clean solution you should get into direct contact with your customer. Find the person able to administrate the LDAP and pick some test users. Explain the issue and let them try different settings on the user accounts which could be relevant to causing an inactive status. Maybe this helps a bit. Regards from Germany Stefan Stöhr > Am 27.02.2016 um 13:42 schrieb Ed Leatherman <[email protected]>: > > We've go something weird going on with LDAP whereby i'm randomly getting end > users marked inactive in cucm (and unity) after a periodic sync. > > Packet cap shows inconsistent number of search results back from the ldap > server (oracle) - so i'm chalking it up to CM doing exactly what its supposed > to do. Since I don't manage that ldap service i'm at the mercy of the folks > that are, right now they are trying to replicate the issue but its so or miss > , haven't been able to yet. > > In the meantime though, i'd like to try and report on when ldap sync'd users > get marked inactive. This way we can keep an eye on it, and if i all the > sudden see 1000 users marked inactive, we can manually go in and kick off a > new re-sync. or when certain VP's accounts get axed and they can no longer > sign into jabber (><) we can proactively go fix it before they have a problem. > > My first thought is to script something that will do a sql query against the > end user table and send back user ids that are inactive - on a schedule so it > just shows up in our inboxes in the morning. Anyone ever had to do this, is > there a better way? > > -- > Ed Leatherman > _______________________________________________ > cisco-voip mailing list > [email protected] > https://puck.nether.net/mailman/listinfo/cisco-voip _______________________________________________ cisco-voip mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-voip
