Fortinet Technologies Inc. Page 125 FortiVoice Enterprise Phone System 4.0.0 Administration Guide
3. Configure the following sections:
• “Configuring authentication options” on page 125
• “Configuring advanced options” on page 127
4. Click Create, OK or Apply.
The LDAP profile appears in the LDAP profile list. To apply it, select the profile in features
that support LDAP queries, such as protected domains and policies.
Before using the LDAP profile in other areas of the configuration, verify the configuration of
each query that you have enabled in the LDAP profile. Incorrect query configuration can
result in unexpected phone processing behavior. For information on testing queries, see
“Testing LDAP profile queries” on page 128.
Configuring authentication options
The following procedure is part of the LDAP profile configuration process. For general
procedures about how to configure an LDAP profile, see “Configuring LDAP profiles” on
page 122.
1. Go to Phone System > Profiles > LDAP.
2. Click New to create a new profile or double click on an existing profile to edit it.
3. Click the arrow to expand the User Authentication Options section.
Use secure
connection
Select whether to connect to the LDAP servers using an encrypted
connection.
• none: Use a non-secure connection.
• SSL: Use an SSL-secured (LDAPS) connection.
Click Test LDAP Query to test the connection. A pop-up window
appears. For details, see “Testing LDAP profile queries” on
page 128.
Base DN Enter the distinguished name (DN) of the part of the LDAP directory
tree within which the FortiVoice unit will search for user objects, such
as ou=People,dc=example,dc=com.
User objects should be child nodes of this location.
Bind DN Enter the bind DN, such as
cn=FortiVoiceA,dc=example,dc=com, of an LDAP user
account with permissions to query the Base DN.
This field may be optional if your LDAP server does not require the
FortiVoice unit to authenticate when performing queries.
Bind password Enter the password of the Bind DN.
Click Browse to locate the LDAP directory from the location that you
specified in Base DN, or, if you have not yet entered a Base DN,
beginning from the root of the LDAP directory tree.
Browsing the LDAP tree can be useful if you need to locate your
Base DN, or need to look up attribute names. For example, if the
Base DN is unknown, browsing can help you to locate it.
Before using, first configure Server name/IP, Use secure connection,
Bind DN, Bind password, and Protocol version, then click Create or
OK. These fields provide minimum information required to establish
the directory browsing connection.
To Next Page
Loading...
