Features/LDAP/V7

From Snom User Wiki

Contents 1 Introduction 2 Usage 3 Configuration 4 Example Configuration 5 Common attributes 6 Troubleshooting

Introduction

If LDAP is properly configured, the phone performs a lookup on the LDAP server for any entries with a telephoneNumber attribute set each time you start entering a number or name on the phone keypad.

If you type in digits then the phone displays all entries where the telephoneNumber begins with the same number entered so far. If you are typing in a name then the phone displays all entries where the displayName (or whatever name filter is set) begins with what has been entered so far. (This is not case-sensitive.)

Use the up and down arrows of the button to scroll through results and dial a highlighted entry by pressing .

Usage

There are two ways to perform a LDAP search on your phone:

1. Simply start a search against LDAP by pressing a number. All corresponding entries will be shown accordingly to your query setup. Default edit mode is numeric.
2. Allocate the Directory Search function to one of the function keys. To do so take the following steps:
   1. Navigate to the "Function Keys" Web User Interface page
      • Firmware Version Free Function Keys Section
      • Firmware Version Free Function Keys Section
   2. Choose one of the free function keys and select the "Context", i.e. the SIP identity.
   3. Choose the "Type" "Key Event"
   4. Enter the value F_DIRECTORY_SEARCH in the "Number" field and press "Save".

Configuration

The internal LDAP client can be configured at the LDAP Section of the webinterface.

Example Configuration

You can use the below settings as a starting point and adjust the filter and display attributes according to your needs.

LDAP name filter: (&(telephoneNumber=*)(sn=%))
LDAP number filter: (&(telephoneNumber=%)(sn=*))
Server Address: [IP address]
Port: [blank or specified LDAP port] 
Base: DC=domain,DC=com
Username: Admin
Password: *******
Max.Hits: 50
LDAP Name Attributes: cn sn displayName
LDAP Number Atrributes: Mobile telephoneNumber ipPhone
LDAP display Name: %displayName
Countrycode: +49
Areacode: 030

• Make also sure, that the Number Display Style is set accordingly to return either name, number or both.

Common attributes

Most common attributes used to configure LDAP lookup in your phone with:

Abbrevation	Name	Description
cn	commonName	Full name of the user.
company	company	Company or organisation name
gn	givenName	Firstname also called Christian name
homePhone	homeTelephoneNumber	Home Phone number
mobile	mobileTelephoneNumber	Mobile or cellular phone number
o	organizationName	Organization name or even organizational name
ou	organizationalUnitName	Usually department or any sub entity of larger entity
pager	pagerTelephoneNumber	pager telephone number
sn	surname	Surname, last name or family name
-	telephoneNumber	Office phone number

Troubleshooting

A good method to troubleshoot problems with LDAP implementation is to do a PCAP trace while performing a lookup. By tracing the search requests you can check if the phone connects and authenticates correctly and determine which requests are being sent from phone to LDAP server.

Below you can see an example of a successful LDAP lookup: