Services; Routing Based On Ldap Active Directory Queries; Configuring The Ldap Server - AudioCodes Mediant 3000 User Manual

User's Manual
14

Services

This section describes configuration for various supported services.
14.1

Routing Based on LDAP Active Directory Queries

The device supports Lightweight Directory Access Protocol (LDAP), enabling call routing
decisions based on information stored on a third-party LDAP server (or Microsoft's Active
Directory™ enterprise directory server). This feature enables the usage of a single
common, popular database to manage and maintain information regarding user's
availability, presence, and location.

14.1.1 Configuring the LDAP Server

The basic LDAP mechanism is described below:

Connection: The device connects and binds to the remote LDAP server either during
the service's initialization (at device start-up) or whenever the LDAP server's IP
address and port is changed. Service makes 10 attempts to connect and bind to the
remote LDAP server with a timeout of 20 seconds between attempts. If connection
fails, the service remains in disconnected state until either the LDAP server's IP
address or port is changed.
If connection to the LDAP server later fails, the service attempts to reconnect, as
described previously. The SNMP alarm acLDAPLostConnection is sent when
connection is broken. Upon successful reconnection, the alarm is cleared.
Binding to the LDAP server can be anonymous or not. For anonymous binding, the
LDAPBindDN and LDAPPassword parameters must not be defined or set to an empty
string.
The address of the LDAP server can be a DNS name / FQDN configured by the
LDAPServerDomainName parameter, or an IP address configured by the
LDAPServerIP parameter.
Note:

Search: For the device to run a search using the LDAP service, the path to the
directory's subtree (or DN) where the search is to be done must be configured using
the LDAPSearchDN parameter. Up to three DNs can be configured. The search key,
or filter in LDAP references, which defines the exact DN to be found and one or more
attributes whose values should be returned, must also be defined.
If connection to the LDAP server is disrupted during the search, all search requests
are dropped and an alarm indicating a failed status is sent to client applications.
The LDAP Settings page is used for configuring the LDAP server parameters. For a full
description of these parameters, see 'Configuration Parameters Reference' on page 643.
Version 6.6
If you configure an FQDN, make sure that the LDAPServerIP parameter is left
empty.
205
14. Services
Mediant 3000