LDAP Directory Configuration

Transcription

1 CHAPTER 12 LDAP directy configuration takes place in these related windows: LDAP System Configuration LDAP Directy LDAP Authentication LDAP Filter Configuration Use the following topics to configure LDAP directy infmation: Settings, page 12-1 Related Topics, page 12-6 Settings In Cisco Unified Communications Manager Administration, use the System > LDAP > LDAP Directy menu path to configure LDAP directies. In the LDAP Directy window, you specify infmation about the LDAP directy; f example, the name of the LDAP directy, where the LDAP users exist, how often to synchronize the data, and so on. Befe You Begin Befe you can synchronize the LDAP directy, you must activate the Cisco DirSync service. F infmation about how to activate services, see the Cisco Unified Serviceability Administration Guide. Changes to LDAP Directy infmation and LDAP Authentication settings are possible only if synchronization from the customer LDAP directy is enabled in the Cisco Unified Communications Manager Administration LDAP System Configuration window. Using the GUI F instructions on how to use the Cisco Unified Communications Manager Administration Graphical User Interface (GUI) to find, delete, configure, copy recds, see the Navigating the Cisco Unified Communications Manager Administration Application section on page 1-13 and its subsections, which explain how to use the GUI and detail the functions of the buttons and icons. 12-1

2 Settings Chapter 12 Configuration Settings Table describes the LDAP directy configuration settings. F related procedures, see the Related Topics section on page Settings LDAP Directy Infmation LDAP Configuration Name LDAP Manager Distinguished Name LDAP Passwd Confirm Passwd LDAP User Search Base LDAP Custom Filter Enter a unique name (up to 40 characters) f the LDAP directy. Enter the user ID (up to 128 characters) of the LDAP Manager, who is an administrative user that has access rights to the LDAP directy in question. Enter a passwd (up to 128 characters) f the LDAP Manager. Reenter the passwd that you provided in the LDAP Passwd field. Enter the location (up to 256 characters) where all LDAP users exist. This location acts as a container a directy. This infmation varies depending on customer setup. Select an LDAP custom filter from the drop-down list. The LDAP filter filters the results of LDAP searches. LDAP users that match the filter get impted into the Cisco Unified Communications Manager database, but LDAP users that do not match the filter do not get impted. The default value is <None>. This value applies a default LDAP filter that is specific to the LDAP server type. These are the default LDAP filters: Microsoft Active Directy (AD): (&(objectclass=user)(!(objectclass=computer))(!(useraccountco ntrol: :=2))) iplanet Sun One LDAP Server: (objectclass=inetorgperson) OpenLDAP: (objectclass=inetorgperson) Microsoft Active Directy Application Mode (ADAM): (&(objectclass=user)(!(objectclass=computer))(!(msds-useracco untdisabled=true))) F me infmation about LDAP filters, see the LDAP Custom Filter Configuration section on page LDAP Directy Synchronization Schedule Perfm Sync Just Once If you want to perfm synchronization of the data in this LDAP directy with the data in the Cisco Unified Communications Manager database only once, check this check box. 12-2

3 Chapter 12 Settings Settings (continued) Perfm a Re-sync Every Next Re-sync Time (YYYY-MM-DD hh:mm) User s To Be Synchronized Cisco Unified Communications Manager User s User ID Middle Name LDAP User s samaccou ntname uid (drop-down list box) If you want to perfm synchronization of the data in this LDAP directy with the data in the Cisco Unified Communications Manager database at a regular interval, use these fields. In the left field, enter a number. In the drop-down list box, choose a value: hours days weeks months Cisco Unified Communications Manager can synchronize directy infmation every 6 hours, which is the minimum value allowed f this field. Note This field remains active only if you do not check the Perfm Sync Just Once check box. Specify a time to perfm the next synchronization of Cisco Unified Communications Manager directy data with this LDAP directy. Use a 24-hour clock to specify the time of day. F example, 1:00 pm equals 13:00. F the LDAP User field, choose one of the following values: middlename initials Manager ID manager Phone Number (drop-down list box) F the LDAP User field, choose one of the following values: telephonenumber ipphone 12-3

4 Settings Chapter 12 Settings (continued) First Name givenname Last Name sn Department Mail ID department department number (drop-down list box) LDAP Server Infmation Host Name IP Address f Server F the LDAP User field, choose one of the following values: mail samaccountname uid Enter the host name IP address of the server where the data f this LDAP directy resides. 12-4

5 Chapter 12 Settings LDAP Pt Settings (continued) Enter the pt number on which the cpate directy receives the LDAP requests. You can only access this field if LDAP authentication f end users is enabled. The default LDAP pt f Microsoft Active Directy and f Netscape Directy specifies 389. The default LDAP pt f Secured Sockets Layer (SSL) specifies 636. How your cpate directy is configured determines which pt number to enter in this field. F example, befe you configure the LDAP Pt field, determine whether your LDAP server acts as a Global Catalog server and whether your configuration requires LDAP over SSL. Consider entering one of the following pt numbers: LDAP Pt F When the LDAP Server Is Not a Global Catalog Server 389 When SSL is not required. (This pt number specifies the default that displays in the LDAP Pt field.) 636 When SSL is required. (If you enter this pt number, make sure that you check the Use SSL check box.) Use SSL Add Another Redundant LDAP Server Perfm Full Sync LDAP Pt F When the LDAP Server Is a Global Catalog Server 3268 When SSL is not required When SSL is required. (If you enter this pt number, make sure that you check the Use SSL check box.) Tip Your configuration may require that you enter a different pt number than the options that are listed in the preceding bullets. Befe you configure the LDAP Pt field, contact the administrat of your directy server to determine the crect pt number to enter. Check this check box to use Secured Sockets Layer (SSL) encryption f security purposes. Note If LDAP over SSL is required, the cpate directy SSL certificate must be loaded into Cisco Unified Communications Manager. The Cisco Unified Communications Operating System Administration Guide documents the certificate upload procedure in the Security chapter. Click this button to add another row f entry of infmation about an additional server. Click this button to perfm a full directy sync. While the directy is synchronizing, the button name changes to Cancel Full Sync. You can click the Cancel Full Sync button to cancel the sync. 12-5

6 Related Topics Chapter 12 In addition to the user fields that appear in Cisco Unified Communications Manager Administration, the Microsoft Active Directy Application Mode user fields that are described in Table 12-2 also get synchronized. Table 12-2 Additional Synchronized Microsoft Active Directy Application Mode User s Cisco Unified Communications Manager User s UniqueIdentifier Pager Mobile Title Homephone OCSPrimaryUserAddress LDAP User s ObjectGUID pager pagertelephonenumber mobile mobiletelephonenumber title homephone hometelephonenumber msrtcsip-primaryuseraddress Additional Infmation See the Related Topics section on page Related Topics, page 12-1 Settings, page 12-1 Understanding the Directy, Cisco Unified Communications Manager System Guide LDAP System Configuration, page 11-1 LDAP Authentication Configuration, page 13-1 LDAP Custom Filter Configuration, page 14-1 Application Users and End Users, Cisco Unified Communications Manager System Guide Application User Configuration, page 87-1 End User Configuration, page