Noted, Many thanks Ryan.





Best Regards

Ahmed Abd EL-Rahman
Senior Network Engineer

From: Ryan Huff [mailto:[email protected]]
Sent: Tuesday, April 18, 2017 2:46 PM
To: Ahmed Abd EL-Rahman <[email protected]>
Cc: [email protected]
Subject: Re: [cisco-voip] CUCM LDAP integration question

No, Directory Sync will not import active directory passwords into the 
communications manager Informix schema.

That is the point of active directory authentication, it's simply issuing a 
bind request to the directory server which yields a positive or negative return 
value.

Sent from my iPhone

On Apr 18, 2017, at 7:38 AM, Ahmed Abd EL-Rahman 
<[email protected]<mailto:[email protected]>> wrote:
Hi Ryan,

The two different domains are under the one forest.

But let me ask something else, If I used only the LDAP integration without LDAP 
authentication, so call manager will fetch users accounts from the LDAP but in 
this case the authentication will occur against CUCM users (which actually were 
fetched from the LDAP), my question in this case when the accounts are being 
fetched from LDAP they will be fetched with their current domain passwords, 
right?





Best Regards

Ahmed Abd EL-Rahman
Senior Network Engineer

From: Ryan Huff [mailto:[email protected]]
Sent: Tuesday, April 18, 2017 1:32 PM
To: Ahmed Abd EL-Rahman 
<[email protected]<mailto:[email protected]>>
Cc: [email protected]<mailto:[email protected]>
Subject: Re: [cisco-voip] CUCM LDAP integration question

Hi Ahmed,

You're on the right track, you can sync multiple forests/directories but you 
can only bind against one schema.

Might be time to look outside of AD for authentication (SSO).

Thanks,

Ryan



Sent from my iPhone
On Apr 18, 2017, at 5:50 AM, Ahmed Abd EL-Rahman 
<[email protected]<mailto:[email protected]>> wrote:
Hi Gents,

I have CUCM 11.5 and end users belong to 2 different domains with 2 different 
LDAP systems, here is my question; is it possible for the call manager to 
integrate with two different LDAP systems in the same time to provision and 
authenticate end users’ account? I do understand that we can add 2 LDAP 
directories in CUCM but when it comes to LDAP authentication I can find only 1 
possibility is there ???

So any clues ?






Best Regards

Ahmed Abd EL-Rahman
Senior Network Engineer

_______________________________________________
cisco-voip mailing list
[email protected]<mailto:[email protected]>
https://puck.nether.net/mailman/listinfo/cisco-voip
_______________________________________________
cisco-voip mailing list
[email protected]
https://puck.nether.net/mailman/listinfo/cisco-voip

Reply via email to