CHAPTER16 Services
Mediant 1000 Gateway & E-SBC | User's Manual
Parameter Description
bind-dn
[LdapConfiguration_
LdapConfBindDn]
â– LDAP-based SIP queries: The DN is used as the
username during connection and binding to the
LDAP server. The DN is used to uniquely name an
AD object. Below are example parameter settings:
✔ cn=a-
administrator,cn=Users,dc=domain,dc=com
✔ administrator@domain.com
✔ domain\administrator
â– LDAP-based user login authentication: The
parameter represents the login username entered by
the user during a login attempt. You can use the $
(dollar) sign in this value to enable the device to
automatically replace the $sign with the user's login
username in the search filter, which it sends to the
LDAP server for authenticating the user's username-
password combination. An example configuration for
the parameter is $@sales.local, where the device
replaces the $with the entered username, for
example, JohnD@sales.local. The username can
also be configured with the domain name of the
LDAP server.
Note: By default, the device sends the username in
clear-text format. You can enable the device to encrypt
the username using TLS (see the 'Use SSL' parameter
below).
'Management Attribute'
mgmt-attr
[LdapConfiguration_MngmAuthAtt]
Defines the LDAP attribute name to query, which
contains a list of groups to which the user is a member.
For Active Directory, this attribute is typically
"memberOf". The attribute's values (groups) are used to
determine the user's management access level; the
group's corresponding access level is configured in
Configuring Access Level per Management Groups
Attributes.
Note:
â– The parameter is applicable only to LDAP-based
login authentication and authorization (i.e., the 'Type'
parameter is set to Management).
â– If this functionality is not used, the device assigns
the user the configured default access level. For
more information, see Configuring Access Level per
Management Groups Attributes.
'No Op Timeout'
noop-timeout
[LdapConfiguration_NoOpTimeout]
Defines the timeout (in minutes) of inactivity in the
connection between the device and the LDAP server,
after which the device sends an LDAP "abandon"
request to keep the LDAP connection alive (i.e., LDAP
persistent connection).
- 218 -
To Next Page
Loading...
Need help?
General
