ASCOM IPBS Installation And Operation Manual page 92

Installation and Operation Manual
IP-DECT Base Station & IP-DECT Gateway (software version 5.0.x)
modified in the IP-DECT system, but it is possible to change or add those user attributes
locally that are not replicated.
Note: If AD replication is enabled, existing local users are replaced with corresponding
users in the AD, and some local attributes may be deleted. Contact Ascom Technical
Support if you would like to enable AD replication with existing local users.
For AD Server configuration settings, see
1 Select LDAP > Replicator.
2 Select "Active Directory Replication" in the Type drop-down list.
3 Select the Enable check box.
4 Enter the IP address to the AD in the Server text field.
5 Enter a Distinguished Name (DN) to configure a search base for AD users.
The user information is usually replicated so It is recommended to write "CN=Users,
DC=DomainName" where "DomainName" is the name of the domain on the AD
server.
You can also click "Show Options..." to see some naming contexts on the
configured server.
6 Enter an LDAP filter to retrieve only the relevant LDAP objects from the AD.
A default (objectclass=user) filter is offered, but it is recommended to assign all IP-
DECT users to a group within the AD. For example, the following filter can be
entered to retrieve only IP-DECT users.
"(&(objectClass=user)(memberOf=CN=grp_ipdect,CN=Users,DC=DomainName))"
where "grp_ipdect" is the group created for IP-DECT users, "Users" is the default
folder for users and "DomainName" is the name of the domain on the AD server.
7 Enter the user name and the password of a user who has read access to the AD in
the User and the Password text fields. It is recommended to choose a user with
Enterprise Administrator rights.
8 Configure In Maps and Out Maps for Attribute mapping. Attribute mapping
describes how the obtained information from the AD is handled within the IP-DECT
system. For more information see
9 Click "OK".
10 After proper configuration check the Replicator Status by selecting LDAP >
Replicator Status. The state of the Active Directory Replication should be "Up" and
the state of the remote directory should be "Completed".
15 February 2012 / Ver. H
on page 87.
Configure AD Server
Attribute Mappings on page 85.
TD 92579EN
84