Fortinet Technologies Inc.
Page 125
FortiVoice Enterprise Phone System 4.0.0 Administration Guide
3.
Configure the following sections:
•
“Configuring authentication options” on page
125
•
“Configuring advanced options” on page
127
4.
Click
Create, OK
or
Apply
.
The LDAP profile appears in the LDAP profile list. To apply it, select the profile in features
that support LDAP queries, such as protected domains and policies.
Before using the LDAP profile in other areas of the configuration, verify the configuration of
each query that you have enabled in the LDAP profile. Incorrect query configuration can
result in unexpected phone processing behavior. For information on testing queries, see
“Testing LDAP profile queries” on page
128
.
Configuring authentication options
The following procedure is part of the LDAP profile configuration process. For general
procedures about how to configure an LDAP profile, see
“Configuring LDAP profiles” on
page
122
.
1.
Go to
Phone System
>
Profiles > LDAP
.
2.
Click
New
to create a new profile or double click on an existing profile to edit it.
3.
Click the arrow to expand the
User Authentication Options
section.
Use secure
connection
Select whether to connect to the LDAP servers using an encrypted
connection.
•
none
: Use a non-secure connection.
•
SSL
: Use an SSL-secured (LDAPS) connection.
Click
Test LDAP Query
to test the connection. A pop-up window
appears. For details, see
“Testing LDAP profile queries” on
page
128
.
Base DN
Enter the distinguished name (DN) of the part of the LDAP directory
tree within which the FortiVoice unit will search for user objects, such
as
ou=People,dc=example,dc=com
.
User objects should be child nodes of this location.
Bind DN
Enter the bind DN, such as
cn=FortiVoiceA,dc=example,dc=com
, of an LDAP user
account with permissions to query the
Base
DN
.
This field may be optional if your LDAP server does not require the
FortiVoice unit to authenticate when performing queries.
Bind password
Enter the password of the
Bind DN
.
Click
Browse
to locate the LDAP directory from the location that you
specified in
Base
DN
, or, if you have not yet entered a
Base
DN
,
beginning from the root of the LDAP directory tree.
Browsing the LDAP tree can be useful if you need to locate your
Base
DN
, or need to look up attribute names. For example, if the
Base
DN
is unknown, browsing can help you to locate it.
Before using, first configure
Server name/IP
,
Use secure connection
,
Bind
DN
,
Bind password
, and
Protocol version
, then click
Create
or
OK
. These fields provide minimum information required to establish
the directory browsing connection.
Summary of Contents for FortiVoice
Page 1: ...FortiVoice Enterprise Phone System 4 0 0 Administration Guide ...
Page 271: ......