Search Base

This topic explains the search base for the user selection and synchronization.

  • Two agreements are defined for the users in the organizational units Site 1 and Site 2.
  • A user search base determines which users are imported.
  • Service accounts are not synchronized in this example.

The Cisco DirSync service, which is enabled through the Cisco Unity Connection Serviceability web page, performs the synchronization. When the service is enabled, as many as five synchronization agreements can be configured in Cisco Unity Connection.

An agreement specifies a search base, which is a position in the LDAP tree where Cisco Unity Connection will begin its search for user accounts to import. Cisco Unity Connection can import only users that exist in the domain that is specified by the search base for a particular synchronization agreement. The figure shows two synchronization agreements:

  • One synchronization agreement specifies User Search Base 1 and imports users jsmith, jdoe, and jbloggs.
  • The other synchronization agreement specifies User Search Base 2 and imports users jjones, bfoo, and tbrown.
  • The CCMDirMgr account is not imported because it does not reside below the point in the LDAP tree that the user search base specifies.

When users are organized in a structure in the LDAP directory, use that structure to control which user groups are imported. In this example, a single synchronization agreement could have been used to specify the root of the domain. However, that search base would also have imported the Service Accts (except when the sn fields were empty). The search base does not need to specify the domain root; it may specify any point in the tree.


Author: drbabbers - my personal journey to ccie