Polycom 3725-76302-001O manual Domain Search, Service Account Search

Integrations with Other Systems

Domain Search

This search queries LDAP.

The system runs this query only when it restarts (if already integrated with the Active Directory) and when

you click the Update button on the Microsoft Active Directory page.

●Base: CN=Configuration,DC=dma,DC=eng,DC=local

The base variable depends on the forest root DN (the distinguished name of the Active Directory forest root domain). See Active Directory Integration Report on page 409.

●Filter: (&(objectCategory=crossRef)(systemFlags=3))

●Indexes used: idx_objectCategory:11:N

The search used these indexes in our testing environment, using a standard AD configuration (no indexes added). Results may be different for a different configuration.

●Attributes returned: cn, dnsRoot, nCName

Service Account Search

This search queries the global catalog. In a standard AD configuration, all the filter attributes and attributes returned are replicated to the global catalog.

The system runs this query only when you click the Update button on the Microsoft Active Directory page. It validates the service account ID.

●Base: <empty>

The base variable depends on the Base DN setting on the Microsoft Active Directory page. If it’s set to the default, All Domains, the base variable is empty, as shown. Otherwise, the base variable is the same as Base DN. See Understanding Base DN on page 160.

●Filter: (&(objectCategory=person)(UserAccountControl: 1.2.840.113556.1.4.803:=512)(sAMAccountName=*) (&(!(userAccountControl:1.2.840.113556.1.4.803:=2))

(sAMAccountName=<userID>)))

The first filter variable depends on the User LDAP filter setting. See Microsoft Active Directory® Integration on page 152. The second variable depends on the value entered in the Service account ID field on the Microsoft Active Directory page. See Microsoft Active Directory® Integration on page 152.

●Index used: idx_objectCategory:32561:N

The search used this index in our testing environment, using a standard AD configuration (no indexes added). Results may be different for a different configuration, especially a different User LDAP filter setting.

●Attributes returned: sAMAccountName, userAccountControl, givenName, sn

See also:

Microsoft Active Directory® Integration on page 152

Microsoft Active Directory Page on page 153

Active Directory Integration Procedure on page 157

Understanding Base DN on page 160

Polycom, Inc. 166