AudioCodes Mediant 500 E-SBC, Руководство пользователя

Страница: 210 / 920

User's Manual 210 Document #: LTRT-10437
Mediant 500 E-SBC

Filter (e.g., "(&(objectClass=person)(sAMAccountName=johnd))"), which filters the
search in the subtree to include only the login username (and excludes others). This is
configured by the 'LDAP Authentication Filter' parameter.

Attribute (e.g., "memberOf") to return from objects that match the filter criteria. This
attribute is configured by the 'Management Attribute' parameter in the LDAP
Configuration table.
The LDAP response includes all the groups of which the specific user is a member, for
example:
CN=\# Support Dept,OU=R&D
Groups,OU=Groups,OU=APC,OU=Japan,OU=ABC,DC=corp,DC=abc,DC=com
CN=\#AllCellular,OU=Groups,OU=APC,OU=Japan,OU=ABC,DC=corp,DC=abc,D
C=com
The device searches this LDAP response for the group names that you configured in the
Management LDAP Groups table in order to determine the user's access level. If the
device finds a group name, the user is assigned the corresponding access level and login
is permitted; otherwise, login is denied. Once the LDAP response has been received
(success or failure), the LDAP session terminates.
The following procedure describes how to configure an access level per management
groups in the Web interface. You can also configure this using the table ini file parameter,
MgmntLDAPGroups or CLI command, configure voip > ldap > mgmt-ldap-groups.

To configure management groups and corresponding access level:
1. Open the LDAP Configuration Table page ( Configuration tab > VoIP menu >
Services > LDAP > LDAP Configuration Table ).
2. In the LDAP Configuration table, select the row of the LDAP server for which you want
to configure management groups with a corresponding access level, and then click the
Management LDAP Groups Table link (located at the bottom of the page); the
Management LDAP Groups Table page opens.
3. Click Add ; the following dialog box appears:
Figure 15-14: Management LDAP Groups Table - Add Record
4. Configure a group name(s) with a corresponding access level according to the
parameters described in the table below.
5. Click Submit , and then save ("burn") your settings to flash memory.
Management LDAP Groups Table Parameter Descriptions
Parameter Description
Index
[MgmntLDAPGroups_
GroupIndex]
Defines an index number for the new table record.
Note: Each table row must be configured with a unique index.
Level
[MgmntLDAPGroups_L
evel]
Defines the access level of the group(s).

[0] Operator (Default)

[1] Admin

[2] Security Admin