Copyright 2010-2017 Obihai Technology, Inc.
193
Client Authentication
LDAP v2 supports
ldap://
and
ldaps://
with Simple Authentication only. LDAP v3 adds support for TLS and
SASL Authentication. Simple authentication involves sending the LDAP server the fully qualified DN of the client and the
corresponding password in clear-text, which has obivious security issue unless
ldaps://
or TLS is used.
SASL (stands for Simple Authentication and Security Layer) [RFC2222] is a framework for authentication. To use SASL
the parameter
LDAP
–
SASLAuthMethod
must be set to either
Plain
or
MD5
.
*For more informations on each of these SASL mechanisms, please check for example http://www.openldap.org
LDAP Directory Search Application
The LDAP application on the phone may be invoked either from the Main Menu or with a soft key (with ID = ldap).
There are two Main Menu option that may be used to invoke LDAP: Directories and Network Directory
Invoke LDAP by Main Menu
–
Directories Option
Simply include the Main Menu Item ID
directories
in the
Phone Settings
–
GUI Menus
::
MainMenu1
parameter
then the LDAP optionwill appear under the Directories menu, if LDAP service is properly configured.
Invoke LDAP by Main Menu
–
Network Directory Option
First you must include the Main Menu Item ID
netdir
in the
Phone Settings
–
GUI Menus
::
MainMenu1
parameter. To make the Network Directory option on the Main Menu invoke the LDAP service, use the following
settings:
IP Phone Settings
–
Network Directory
::
Enable
=
true
(checked)
IP Phone Settings
–
Network Directory
::
VoiceService
=
LDAP
Invoke LDP by Soft Key - LDAP
To use a soft key to invoke the LDAP application, add the
ldap
soft key to any of the configurable soft key sets. For
example, configure the following value for the
Home
soft key set with the LDAP soft key in the 4
th
position,
redial,cfwd,dnd,ldap
Search Fields
By default, the phone presents the following seach fields to the user:
-
Last Name (sn)
-
First Name (givenName)
-
Tel Num (telephoneNumber)
