Copyright 2010-2017 Obihai Technology, Inc.
191
LDAP
OBi1000 IP Phones support directory search function with an external server using LDAP. To use this function a LDAP
service must be configured on the phone. Users may then invoke the LDAP directory search application by selecting the
option from the phone main menu or pressing a soft key.
LDAP Service Setup
The Network Directory option on the main menu of the phone can be pointed to a LDAP (Lightweight Directory Access
Protocol) service. The parameters to set up the LDAP service are shown below.
Parameter Group
Parameter
Description
IP Phone
–
LDAP
–
Server
Host
The hostname can be an IP address or domain name, with optional ldap:// or
ldaps:// scheme prefix. For example:
192.168.15.186
,
ldap.forums.com
,
ldap://ldap.testathon.net
are all acceptable
hostname formats.
If scheme is not specified, ldap:// is implied.
IP Phone
–
LDAP
–
Server
Port
LDAP Server listening (TCP) port. The starndar port is 389 for
ldap://
and
636 for
ldaps://
. If the port value is 0 or blank, the phone uses the
corresponding standard port.
IP Phone
–
LDAP
–
Server
Password
The password for authentication with the LDAP server, based on the given
distinguished name specified in
BindDN
. Note that this parameter is not
used for anonymous queries.
IP Phone
–
LDAP
–
Search Parameters
BindDN
A Distinguished Name (DN) that is authorized to use the LDAP service. If none
is specified, the query is regarded as an anonymous one which may or may
not be acceptable to the server.
The BindDN value is usually derived from a username that typically looks like
an email address, such as admin@ldap.example.com. In which case, the
corresponding BindDN would be:
CN=admin,OU=users,DC=example,DC=com
Note that in the last example, the DN includes only the last two parts of the
domain name for illustration purpose only. The DN may as well include the
DC=ldap
field for example. But the key point is that this value must agree
exactly with how it is specified at the server side.
IP Phone
–
LDAP
–
Search Parameters
SearchBase
This parameter specifies the starting point of the LDAP search. It is a case-
insensitive comma-separated list of {object}={value} pairs, where {object} can
be any of the followings:
•
CN Common Name)
•
OU (Organization Unit)
•
O (Organization)
•
C (Country)
•
DC (Domain)
If the value is not specified, the phone by default derives the search starting
point from the value of
LDAP
–
Server
::
Host
. For example, if
Host
is
ldap.example.com
,
the default SearchBase value is
DC=example,DC=com
Note that it is a common convention to use just the last two parts of the
service domain as a search base, but it is not necessary so. The OBi 1000
phones assume this convention when SerachBase is not specified.
IP Phone
–
LDAP
–
Search Parameters
ProtocolVersion
Protocol version. Either
3
or
2
.
3
is the default.
IP Phone
–
LDAP
–
Search Parameters
TLS_ReqCert
Control whether to verify the server’s certicate on a TLS connection. Choices
are:
-
never
-
demand
Default value is
never
, which means not to verify the server’s certificate
IP Phone
–
LDAP
–
Search Parameters
ResultsPerPage
Default search filter to append to each search. This must be specified as a
complete and valid LDAP search filter. For example:
(|(objectclass=contact)(objectclass=person))
Default value is:
(objectclass=*)
IP Phone
–
LDAP
–
Search Parameters
DefaultSearchFilter
Specifies how many resuts to display on screen per page.
