AudioCodes Mediant 3000 User Manual

Version 7.0 257 Mediant 3000
User's Manual 16. Services
Administrator, or Security Administrator. For an explanation on the privileges of each level,
see ''Configuring Web User Accounts'' on page 82.
When the username-password authentication with the LDAP server succeeds, the device
searches the LDAP server for all groups of which the user is a member. The LDAP query is
based on the following LDAP data structure:

Search base object (distinguished name or DN, e.g.,
"ou=ABC,dc=corp,dc=abc,dc=com"), which defines the location in the directory from
which the LDAP search begins. This is configured in ''Configuring LDAP DNs (Base
Paths) per LDAP Server'' on page
254.

Filter (e.g., "(&(objectClass=person)(sAMAccountName=johnd))"), which filters the
search in the subtree to include only the login username (and excludes others). This is
configured by the 'LDAP Authentication Filter' parameter.

Attribute (e.g., "memberOf") to return from objects that match the filter criteria. This
attribute is configured by the 'Management Attribute' parameter in the LDAP
Configuration table.
The LDAP response includes all the groups of which the specific user is a member, for
example:
CN=\# Support Dept,OU=R&D
Groups,OU=Groups,OU=APC,OU=Japan,OU=ABC,DC=corp,DC=abc,DC=com
CN=\#AllCellular,OU=Groups,OU=APC,OU=Japan,OU=ABC,DC=corp,DC=abc,D
C=com
The device searches this LDAP response for the group names that you configured in the
Management LDAP Groups table in order to determine the user's access level. If the
device finds a group name, the user is assigned the corresponding access level and login
is permitted; otherwise, login is denied. Once the LDAP response has been received
(success or failure), the LDAP session terminates.
The following procedure describes how to configure an access level per management
groups through the Web interface. You can also configure it through ini file
(MgmntLDAPGroups).
 To configure management groups and corresponding access level:
1. Open the LDAP Configuration table (Configuration tab > VoIP menu > Services >
LDAP > LDAP Configuration Table).
2. In the table, select the row of the LDAP server for which you want to configure
management groups with a corresponding access level, and then click the
Management LDAP Groups link, located below the table; the Management LDAP
Groups table opens.
3. Click Add; the following dialog box appears:
Figure 16-11: Management LDAP Groups Table - Add Row Dialog Box
4. Configure a group name(s) with a corresponding access level according to the
parameters described in the table below.
5. Click Add, and then save ("burn") your settings to flash memory.

AudioCodes Mediant 3000 Specifications

General

Brand	AudioCodes
Model	Mediant 3000
Category	Gateway
Language	English