Configuring Remote Account Authentication Using Ldap - Cisco TelePresence Administrator's Manual

User accounts
Configuring remote account authentication using
LDAP
The LDAP configuration
a remote directory service for administrator account authentication. It can also provide user account
authentication if you are using FindMe without Cisco TMS.
The configurable options are:
Field Description
Remote account authentication: this section allows you to enable or disable the use of LDAP for remote account
authentication.
Administrator Defines where administrator login credentials are
authentication authenticated.
source
Local only: credentials are verified against a local
database stored on the system.
Remote only: credentials are verified against an
external credentials directory.
Both: credentials are verified first against a local
database stored on the system, and then if no
matching account is found the external credentials
directory is used instead.
The default is Local only.
FindMe Defines where FindMe account credentials are
authentication authenticated:
source
Remote: credentials are verified against an external
credentials directory (the VCS currently supports
only Windows Active Directory).
Local: credentials are verified against a local
database stored on the VCS.
The default is Local.
LDAP server configuration: this section specifies the connection details to the LDAP server.
FQDN Defines how the LDAP server address is resolved.
address
SRV record: DNS SRV record lookup.
resolution
Address record: DNS A or AAAA record lookup.
IP address: entered directly as an IP address.
The default is Address record.
Cisco VCS Administrator Guide (X8.1.1)
page (Users > LDAP configuration) is used to configure an LDAP connection to

Configuring remote account authentication using LDAP

Usage tips
Both allows you to continue to use
locally-defined accounts. This is useful
while troubleshooting any connection or
authorization issues with the LDAP
server.
You cannot log in using a locally-
configured administrator account,
including the default admin account, if
Remote only authentication is in use.
Note: do not use Remote only if VCS is
managed by Cisco TMS.
This option applies only if you are using
FindMe without Cisco TMS.
Page 265 of 507