Yealink T21PE2 - Securely Storing the LDAP Credentials; LDAP Configuration

Administrator’s Guide for SIP-T2 Series/T4 Series/T5 Series/CP920 IP Phones
242
Securely Storing the LDAP Credentials
You can enable the IP phone to securely store the LDAP user credentials when Broadsoft Flexible Seating feature is
enabled. When the user logs into the guest profile next time, he/she can access the LDAP directory directly instead of
entering the LDAP user credentials again.
The IP phone can store up to 100 LDAP user credentials. If the number of user credentials reaches 100, the user who has
the longest inactivity period is removed from the phone when any additional user is added.
The LDAP user credentials persist after the phone reboots.
Related Topic
Broadsoft Flexible Seating
LDAP Configuration
The following table lists the parameters you can use to configure LDAP.
Parameter ldap.enable <y0000000000xx>.cfg
Description It enables or disables the LDAP feature on the IP phone.
Permitted
Values
0-Disabled
1-Enabled
Default 0
Web UI Directory->LDAP->Enable LDAP
Parameter ldap.search_type <y0000000000xx>.cfg
Description
It configures the search type for LDAP contact look up.
Note: It is not applicable to CP920 IP phones.
Permitted
Values
0-Prefix matching, the IP phone will search the LDAP contact numbers or names start with the entered
character(s).
1-Approximate string matching, the IP phone will search the LDAP contact numbers or names contain
the entered character(s).
Default 0
Parameter ldap.name_filter <y0000000000xx>.cfg
Description
It configures the search criteria for LDAP contact names look up.
The “*” symbol in the filter stands for any character. The “%” symbol in the filter stands for the name
entered by the user.
Example:
ldap.name_filter = (|(cn=%)(sn=%))
When the cn or sn of the LDAP contact matches the entered name, the record will be displayed on the
phone screen.
ldap.name_filter = (&(cn=*)(sn=%))
When the cn of the LDAP contact is set and the sn of the LDAP contact matches the entered name, the
records will be displayed on the phone screen.
ldap.name_filter = (!(cn=%))