Use the 46xxsettings.txt file to set the following parameters for the LDAP directory:
Parameter name
Default value
Description
DIRENABLED_PLATFORM
Determines whether the LDAP directory search and application are enabled on the phone.
Value operation:
DIRUSERNAME
Null
Specifies the LDAP client username.
The following characters are allowed:
0–9
a-z
A-Z
The preferred way of configuring this parameter is through the web interface.
DIRPASSWORD
Null
Specifies the LDAP client password.
The following characters are allowed:
0–9
a-z
A-Z
The preferred way of configuring this parameter is through the web interface.
DIRSRVR
Null
Specifies the IP address or a fully qualified domain name (FQDN) of the LDAP directory server.
The valid value is an IPv6 or IPv4 address in the dotted decimal format or a FQDN.
For example,SET DIRSRVR 192.168.161.54orSET DIRSRVR domain.com
DIRSRVRPRT
389
Specifies the port number for the LDAP directory server.
Valid values are positive integers from 1 to 65535.
For example,SET DIRSRVRPRT 389
DIRTOPDN
Null
Specifies the LDAP search base.
For example,
SET DIRTOPDN "dc=global,dc=avaya,dc=com"
DIRSECURE
Specifies whether to use TLS or TCP for the LDAP server.
Value operation:
For example,
SET DIRSECURE 1
There is a difference between STARTTLS and LDAPS: STARTTLS uses the same port as the LDAP protocol. The DIRSRVRPRT parameter value must be the same as the port configured for the LDAP (not for LDAPS) protocol on the server side.
The LDAPS protocol uses a port different from LDAP. The value for DIRSRVRPRT needs to correspond to server port for the LDAPS connection.
DIRAUTHTYPE
Specifies the kind of authentication that is used if the value of the DIRUSERNAME parameter is not null.
Value operation:
If a connection is established over TLS (DIRSECURE is set to 1 or 2), DIGEST-MD5 or PLAIN authentication mechanisms are supported.
If the connection established over TCP (DIRSECURE is set to 0) DIGEST-MD5 is the only supported mechanism.
DIRSEARCH_FIELDS
"cn,sn,telephoneNumber"
Specifies LDAP search attributes. The exact number and names of the search attributes depend on the LDAP server configuration and can vary from one LDAP directory to another.
When configuring the DIRSEARCH_FIELDS parameter, you must use attribute names that coincide with the selected LDAP server attribute names.