AudioCodes Mediant 3000 User Manual page 229

User's Manual
search in the subtree to include only the login username (and excludes others). This is
configured by the 'LDAP Authentication Filter' parameter.

Attribute (e.g., "memberOf") to return from objects that match the filter criteria. This
attribute is configured by the 'Management Attribute' parameter in the LDAP
Configuration table.
The LDAP response includes all the groups of which the specific user is a member, for
example:
CN=\# Support Dept,OU=R&D
Groups,OU=Groups,OU=APC,OU=Japan,OU=ABC,DC=corp,DC=abc,DC=com
CN=\#AllCellular,OU=Groups,OU=APC,OU=Japan,OU=ABC,DC=corp,DC=abc,D
C=com
The device searches this LDAP response for the group names that you configured in the
Management LDAP Groups table in order to determine the user's access level. If the
device finds a group name, the user is assigned the corresponding access level and login
is permitted; otherwise, login is denied. Once the LDAP response has been received
(success or failure), the LDAP session terminates.
The following procedure describes how to configure an access level per management
groups in the Web interface. You can also configure this using the table ini file parameter,
MgmntLDAPGroups or CLI command, configure voip > ldap > mgmt-ldap-groups.

To configure management groups and corresponding access level:
1. Open the LDAP Configuration Table page (Configuration tab > VoIP menu >
Services > LDAP > LDAP Configuration Table).
2. In the LDAP Configuration table, select the row of the LDAP server for which you want
to configure management groups with a corresponding access level, and then click the
Management LDAP Groups Table link (located at the bottom of the page); the
Management LDAP Groups Table page opens.
3. Click Add; the following dialog box appears:
Figure 16-9: Management LDAP Groups Table - Add Record
4. Configure a group name(s) with a corresponding access level according to the
parameters described in the table below.
5. Click Submit, and then save ("burn") your settings to flash memory.
Management LDAP Groups Table Parameter Descriptions
Parameter
Index
[MgmntLDAPGroups_
GroupIndex]
Level
[MgmntLDAPGroups_L
evel]
Version 6.8
Defines an index number for the new table record.
Note: Each table row must be configured with a unique index.
Defines the access level of the group(s).

[0] Operator (Default)

[1] Admin

[2] Security Admin
229
Description
16. Services
Mediant 3000