Configuring Access Level Per Management Groups Attributes - AudioCodes Mediant 800B User Manual

the filter can be configured as "(sAMAccountName=$)", where if the user attempts to
log in with the username "SueM", the LDAP search is done only for the attribute
sAMAccountName that equals "SueM".

Attribute (e.g., "memberOf") to return from objects that match the filter criteria:
The attribute is configured by the 'Management Attribute' parameter in the LDAP
Servers table (see 'Configuring LDAP Servers' on page 258).
Therefore, the LDAP response includes only the groups of which the specific user is a
member.
Note:
•
The search filter is applicable only to LDAP-based login authentication and
authorization queries.
•
The search filter is a global setting that applies to all LDAP-based login
authentication and authorization queries, across all configured LDAP servers.

To configure the LDAP search filter for management users:
1. Open the LDAP Settings page (Setup menu > IP Network tab > RADIUS & LDAP
folder > LDAP Settings).
2. In the 'LDAP Authentication Filter' field, enter the LDAP search filter attribute for
searching the login username for user authentication:
3. Click Apply.

15.4.7 Configuring Access Level per Management Groups Attributes

The Management LDAP Groups table lets you configure LDAP group objects and their
corresponding management user access level. The table is a "child" of the LDAP Servers
table (see 'Configuring LDAP Servers' on page 258) and configuration is done per LDAP
server. For each LDAP server, you can configure up to three table row entries of LDAP
group(s) and their corresponding access level.
User's Manual
Figure 15-24: Configuring LDAP Search Filter
264
Mediant 800B Gateway & E-SBC
Document #: LTRT-10632