Результаты (
английский) 1:
[копия]Скопировано!
sign Considerations for LDAP AuthenticationObserve the following design and implementation best practices when deploying LDAP authentication with the Cisco Unified CM:• Create a specific account within the corporate directory to allow Unified CM to connect and authenticate to it. Cisco recommends that you use an account dedicated to Unified CM, with the minimum permissions set to "read" all user objects in the desired search base and with a password set to never expire. The password for this account in the directory must be kept in sync with the configuration of the account password in the Unified CM. If the account password changes in the directory, be sure to update the account configuration in Unified CM. If the LDAP synchronization is also enabled, you can use the same account for both functions.• Enable LDAP authentication on Unified CM by specifying the credentials of the aforementioned account under LDAP Distinguished Name and the LDAP Manager Password, and by specifying the directory where all the users subtree reside under LDAP User Search Base.• This method provides single logon functionality to all end users: when they log in to the Unified CM User Options page, they can now use their corporate directory credentials.• Manage end-user passwords from within the corporate directory interface. Note that the password field is no longer displayed in the Unified CM Administration pages when authentication is enabled.• Manage end-user PINs from the Unified CM Administration web pages or from the Unified CM User Options page.• Manage Application User passwords from the Unified CM Administration web pages. Remember that these application users, facilitate communication and remote call control with other Cisco Unified Communications applications and are not associated with real people.• Enable single log for administrators by adding CM Unified their end user corresponding to the Unified CM Super Users user group from the Unified CM Administration web pages. Multiple levels of administrator rights can be defined by creating customized user groups and roles.
переводится, пожалуйста, подождите..