I'm struggling trying to find a workable solution for this:
I have a CUCM and CUCN both with active LDAP sync. The user's samAccountname changes (due to a name change). On CUCM, after the ldap sync has run, everything is in order.. the synched enduser has been updated.
On CUCN, after the LDAP sync, I have a local user with a warning. Now, I need to restore this programmatically without breaking the box.
And scenario 2: Same story as above but I get to the box before the ldap sync has run so I know the alias needs to change. The alias is blocked however because the box is tied to an ldap user. How do I change the box programmatically so all is in order again?
CUCM and CUCN are separate - last time I tested I couldn't do a user import from the phone system.
This issue appears to be the same as raised in the DevNet case.
A defect was filed to address the core issue - CSCus42665 : "Change in samAccountName in AD breaks LDAP sync for that
user". The fix for this defect has been integrated into the latest 10.5.2 Engineering Special (ES), which customers can procure via Cisco TAC.