Cisco 8831 Administration Manual page 24

Configure LDAP for the Cisco Unified IP Conference Phone 8831 for Third-Party Call Control
In the Optional Network Configuration section, under Domain, enter the LDAP domain. (Only
Step 3
required if using Active Directory with authentication set to MD5.)
Some sites might not deploy DNS internally and instead use Active Directory 2003. In this case, it is not
necessary to enter a Primary DNS address and an LDAP Domain. However, with Active Directory 2003,
the authentication method is restricted to Simple.
Click the Phone tab.
Step 4
Under LDAP, in the LDAP Dir Enable field, choose Yes to enable LDAP and cause the name defined
Step 5
in LDAP Corp Dir Name to appear in the phone directory.
Configure values for the fields in the following table and click Submit All Changes.
Step 6
Parameter
LDAP Corp Dir Name
LDAP Server
LDAP Auth Method
LDAP Client DN
LDAP Username
LDAP Password
LDAP Search Base
LDAP Last Name Filter
Cisco Unified IP Conference Phone 8831 for Third-Party Call Control Administration Guide
2-8
Description
Enter a free-form text name, such as Corporate Directory.
Enter a fully qualified domain name or IP address of LDAP server, in
the format
nnn.nnn.nnn.nnn
Enter the host name of the LDAP server if the MD5 authentication
method is used.
Select the authentication method that the LDAP server requires:
None—No authentication is used between the client and the server.
Simple—The client sends its fully-qualified domain name and
password to the LDAP server. Might create security issues.
Digest-MD5—The LDAP server sends authentication options and a
token to the client. The client returns an encrypted response that is
decrypted and verified by the server.
Enter the distinguished name domain components [dc] ; for example:
dc=cv2bu,dc=com
If using the default Active Directory schema
(Name(cn)->Users->Domain), example of the client DN:
cn="David Lee",dc=users,dc=cv2bu,dc=com
Enter the username for a credentialed user on the LDAP server.
Enter the password for the LDAP username.
Specify a starting point in the directory tree from which to search.
Separate domain components [dc] with a comma. For example:
dc=cv2bu,dc=com
Define the search for surnames [sn], known as last name in some parts
of the world. For example,
text string anywhere in the beginning, middle, or at the end of a name.
You must enter a value in both the last name and first name fields so
that the LDAP corporate directory option displays on the phone. If
both fields are empty, the directory does not display.
Chapter 2 Customize Standard Features
.
. This searches for the
sn:(sn=*$VALUE*)