Manuals / TANDBERG / Photography / Security Camera

TANDBERG Security Camera manual Ldap Configuration, Downloading the Ldap schemas

Models: Security Camera

1 247

Download 247 pages 11.75 Kb

Page 186

Grey Headline (continued)

LDAP Configuration

TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE

About the LDAP Databases

The VCS can be configured to use a database on an LDAP Directory Server to store authentication credential information (usernames, passwords, and other relevant information)

This section describes how to download the schemas that must be installed on the LDAP server, and how to install and configure two common types of LDAP servers, Microsoft Active Directory and OpenLDAP, for use with the VCS.

Downloading the LDAP schemas

The following ITU specification describes the schemas which are required to be installed on the LDAP server:

H.350	Directory services architecture for multimedia conferencing - An LDAP schema to
	represent endpoints on the network.
H.350.1	Directory services architecture for H.323 - An LDAP schema to represent H.323
	endpoints.
H.350.2	Directory services architecture for H.235 - An LDAP schema to represent H.235
	elements.

The schemas can be downloaded in ldif format from the web interface on the VCS. To do this:

1.Navigate to VCS Configuration > Authentication > LDAP > Schemas. You will see a list of downloadable schemas.

2.Click on the Download button next to each file to open it.

Microsoft Active Directory

Prerequisites

These step-by-step instructions assume that Active Directory has already been installed. For details on installing Active Directory please consult your Windows documentation.

The following instructions are for Windows Server 2003 Enterprise Edition. If you are not using this version of Windows, your instructions may vary.

Installing the H.350 Schemas

Once you have downloaded the H.350 schemas, install them as follows:

Open a command prompt and for each file execute the following command:

ldifde -i -c DC=X <ldap _ base> -f filename.ldf

where:

<ldap _ base> is the base DN for your Active Directory server.

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Maintenance

Appendices

Status

Configuration

Configuration

Neighbors

Processing

Control

Traversal

D14049.03

186

MAY 2008

Image 186

TANDBERG Security Camera manual Ldap Configuration, Downloading the Ldap schemas

Contents

Guide Introduction What’s in this Manual?Preamble Overview and StatusLAN Zones and Neighbors Call ProcessingMaintenance Appendices Bandwidth Control Maintenance What’s in this Manual? Legal Notices Copyright 2008, TandbergSafety Instructions and Approvals Safety InstructionsApprovals Environmental Issues Waste Handling Digital User GuidesEnvironmental Issues VCS Control Tandberg VCSOverview VCS Base Applications VCS ExpresswayDual Network Interfaces Standard Features What’s New in this Version?Optional Features User Policy FindMeCommand Line Interface Administrator GuideUsing this Administrator Guide Typographical conventionsGetting Started General Installation Precautions InstallationInstallation Site Preparations Connecting the CablesInitial Configuration Powering on the VCS Initial Configuration via Serial CableInitial Configuration via Front Panel UP keyDown key System Administrator Access OverviewWeb Interface Using the Web InterfaceSelect Administrator Login Supported BrowsersGeneral page features Types of Commands Command Line InterfaceUsing the Command Line Interface CLI How Command are Shown in this GuideOverview and Status Overview Viewing the Overview Understanding the OverviewSystem Information Ethernet Status System Ethernet MAC addressSpeed IP Status Viewing the IP Status Understanding the IP StatusResource Usage Viewing the Resource Usage Understanding the Resource UsageStatus System Resource Usage Traversal calls Registrations Viewing the Registrations Understanding the RegistrationsDuration Registration HistoryReason End TimeCalls Viewing the Calls Understanding the CallsCall History Viewing the Call History Understanding the Call HistoryStatus Call History Filter About Searches Search HistoryViewing the Search History Understanding the Search History Status Search HistoryLocal Zone Viewing the Local Zone Understanding the Local ZoneZones Viewing the Zones Understanding the ZonesStatus Zones Links Viewing the Links Understanding the LinksStatus Links Understanding the Pipes PipesViewing the Pipes Status PipesStun Relays Viewing the Stun Relays Understanding the Stun RelaysViewing the Warnings Understanding the Warnings Status WarningsEvent Log Color Coding Event LogViewing the Event Log Understanding the Event Log GreenInterpreting the Event Log Event Log FormatMessage Details Field Events Logged at Level User session Login failure System Configuration ChangedTLS Negotiation Error Policy ChangeRegistration Refresh Accepted Message ReceivedMessage Sent Registration Refresh RequestSystem Configuration About Administrator Access settings System AdministrationOverview Configuration About the System NameAbout Ethernet Speed System Configuration EthernetXConfiguration Ethernet Ethernet speedXConfiguration IP Route XCommand RouteAdd Overview IP ConfigurationXConfiguration IP XConfiguration IPProtocol About IPv4 to IPv6 GatewayingOverview LAN Configuration About LAN ConfigurationAbout Dual Network Interfaces XConfiguration IP DNS About DNS ServersAbout the DNS Domain Name About the NTP Server System Configuration NTPXConfiguration NTP Address XConfiguration TimeZone Name About the Time ZoneXConfiguration Snmp About SnmpAbout the External Manager XConfiguration ExternalManagerExternal Manager AddressBackups Backing up Configuration SettingsAbout Logging LoggingOverview Remote Logging About Remote LoggingLog Levels Setting the Event Log LevelXConfiguration Log Level About Event Log LevelsVCS Configuration 323 Overview Endpoint RegistrationConfiguring H.323 XConfiguration H323About SIP on the VCS Using the VCS as a SIP RegistrarSIP Overview SIP Registration ExpiryUsing the VCS as a SIP Proxy Server SIP protocols and portsConfiguring SIP Registrations, Protocols and Ports XConfiguration SIPCancel Configuring SIP DomainsVCS Configuration Protocols SIP Domains View/EditSave SIP interworking mode Configuring InterworkingXConfiguration Interworking Mode InterworkingRegistration Overview MCU, Gateway and Content Server RegistrationRegistration Control Endpoint RegistrationPreventing automatic registrations Finding a VCS with which to Register323 H323 Gatekeeper AutoDiscoveryConfiguring Authentication for Local Registrations AuthenticationAbout Authentication for Local Registrations XConfiguration AuthenticationConfiguring External Registration Credentials About External Registration CredentialsAuthentication Databases Alias Origin SettingAuthentication using an Ldap Server Configuring Ldap Server settings XConfiguration Ldap XConfiguration Authentication LdapAuthentication using a Local Database Configuring the Local DatabaseAbout Alias Registration Attempts to Register using an Existing AliasRegistering Aliases Alias RegistrationAbout Allow and Deny Lists XConfiguration Registration RestrictionPolicyAllow and Deny Lists Activating use of Allow or Deny ListsXCommand AllowListAdd XConfigurationAllowList Registration Managing Entries in the Allow ListManaging Entries in the Deny List VCS Configuration Registration Deny ListXCommand DenyListAdd XConfigurationDenyList Registration Add Deny List PatternZones and Neighbors Example Network Diagram IntroductionAbout your Video Communications Network Local Zone and Subzones Overview Configuring the Local Zone and its SubzonesConfiguring the Traversal Subzone Ports Traversal SubzoneAbout Zones Traversal Client Zone Traversal Server Zone Neighbor ZoneEnum Zone DNS Zone Default Zone XCommand DefaultLinksAddXCommand ZoneAdd Adding Zones Configuring ZonesVCS Configuration Zones XConfiguration Zones ZoneConfiguring Zones All Types Hop countMatch1 Match5 SIP transport Configuring Neighbor ZonesSIP port Primary address Alternate 1 to Alternate 5 addressRetry interval Configuring Traversal Client ZonesAuthentication username Primary addressConfiguring Traversal Server Zones Configuring Enum Zones Configuring DNS ZonesDNS suffix XConfiguration Alternates About Alternates Configuring AlternatesVCS Configuration Alternates AlternatesDial Plans Call Processing Call Processing Diagram Search ProcessDialing by Enum Dialing by Address TypesDialing by IP Address Dialing by H.323 or SIP URI Endpoints registered to a VCS ExpresswayAbout Hop Counts Configuring Hop Counts XConfiguration Zones Zone 1..200 HopCountHop Counts Administrator Policy Authentication Mode OnAuthentication Mode Off Enabling the use of Administrator Policy Administrator Policy ModeConfiguring Administrator Policy via the Web Interface Uploading a CPL Script About CPL XSD filesUser Policy FindMe XConfiguration Policy UserPolicy Configuring User Policy ManagerVCS Configuration Policy User 100About User Accounts 101Managing FindMe User Accounts Creating a New User AccountChanging a User Password Viewing Existing User Account Settings102 103 Deleting a User AccountAre you sure...? 104 Using TANDBERG’s FindMeAccessing the FindMe Configuration About your FindMe User AccountConfiguring your FindMe User Account 105106 Searches and TransformsConfiguring Local Alias Transforms XConfiguration Transform107 108 Zone Searching and TransformingXConfiguration Zones Zone 1..200 Match Configuring Zone Searches TransformsDefault Settings 109Combining Match Types and Priorities 110Examples Never Query a Zone111 Filter Queries to a Zone Without Transforming112 Query a Zone for Original and Transformed Alias113 Query a Zone for Two or More Transformed Aliases114 URI DialingH323 URI Dialing for Outgoing Calls Configuring Matches for DNS Zones115 Process116 Adding and Configuring DNS ZonesXCommand ZoneAdd XConfiguration Zones Zone Click Create ZoneConfiguring DNS Servers XConfiguration IP DNS Server117 118 URI Dialing for Incoming Calls119 Example DNS Record ConfigurationRecommended Configuration URI Dialing and Firewall Traversal120 Enum DialingOverview Process Enabling Enum Dialing Prerequisites 121Enum Dialing for Outgoing Calls ExampleMode of PatternMatch Pattern string Pattern type of Prefix Configuring Matches for Enum ZonesConfiguring Transforms for Enum Zones 122Configuring Enum Zones 123124 Enum Dialing for Incoming Calls Configuring DNS Naptr Records125 About DNS Domains for Enum126 Recommended Configuration for Firewall TraversalXConfiguration Call Services Unregistered Endpoints127 Overview Configuration Example UsageXConfiguration Call Services Fallback Alias Fallback AliasDisconnecting Calls 128Identifying a Particular Call Issues when Disconnecting SIP Calls Disconnecting a Call via the Web InterfaceDisconnecting a Call via the CLI 129130 Bandwidth Control131 Bandwidth Control OverviewBandwidth Control on the VCS Example Network Deployment Subzones About the Default Subzone132 Specifying the Subzone IP Addresses Subzone LinksXCommand SubZoneAdd 133Creating a Subzone Configuring a Subzone XConfiguration Zones LocalZone SubZone134 Types of Limitations 135Applying Bandwidth Limitations to Subzones How Different Bandwidth Limitations are Managed136 Default LinksXCommand LinkAdd About Links Creating LinksXConfiguration Bandwidth Link 137Editing Links Pre-Configured Links Default LinksAbout Default Links 138XCommand PipeAdd 139About Pipes Creating Pipes Editing Pipes XConfiguration Bandwidth Pipe140 Editing an Existing PipeOne Pipe, One Link 141Applying Pipes to Links One Pipe, Two or More LinksConfiguring Default Call Bandwidth and Downspeeding Default Bandwidth and DownspeedingAbout the Default Call Bandwidth 142143 Bandwidth Control ExamplesExample Without a Firewall 144 VCS Expressway Subzone ConfigurationVCS Control Subzone Configuration Example With a Firewall145 Firewall TraversalAbout Expressway VCS as a Firewall Traversal Client 146Firewall Traversal Overview How does it work?Quick Guide to VCS Traversal Client Server Configuration 147VCS Expressway Server Overview Expressway Process Firewall Traversal Protocols 148Firewall Traversal Protocols and Ports SIP Firewall Traversal ProtocolsMedia Call signaling149 SIP PortsConfiguration Zones Edit Zone, in the Configuration section Firewall Traversal and AuthenticationAuthentication and NTP 150Other Issues 151Adding a New Traversal Client Zone Configuring the VCS as a Traversal Client152 TraversalClient Create ZoneConfiguring a Traversal Client Zone 153Alternate 1..5 Address Adding a New Traversal Server Zone Configuring the VCS as a Traversal Server154 TraversalServer Create ZoneDemux mode Configuring a Traversal Server ZoneClient authentication username 155Configuring Traversal for Endpoints XConfiguration Zones LocalZone Traversal H323156 Configuring Traversal Server Ports 157Stun Services 158Configuring Stun Services 159Maintenance 160Overview Upgrading Using SCP/PSCP 161Upgrading Software 162 Upgrading via the Web InterfaceOption Keys XConfiguration Option 1..64 Key163 Overview Adding Options via the CLIAdding Options via the Web Interface Maintenance Option Keys164 Add option key165 SecurityOverview Enabling Security XConfiguration SystemUnitPassword PasswordsOverview Configuring Administrator Password 166System Snapshot Error Reports167 Overview Creating a System SnapshotRestarting XCommand Boot168 Overview Restarting the VCSShutting Down Maintenance Shutdown169 Overview Shutting DownXCommand DefaultValuesSet Level 3 must be Restoring Default ConfigurationOverview DefaultValuesSet Level 170171 AppendicesCPL Reference Address-switch172 Overview of CPL on the VCS173 Field174 SubfieldOtherwise Not-present Location Rule-switch175 RejectCPL Examples Call Screening of Authenticated Users176 Call Screening Based on AliasChange of Domain Name 177Call Screening Based on Domain Dont accept calls from this source178 Block Calls from Default Zone and Default SubzoneAddress Address is=DefaultSubZone Allow Calls from Locally Registered Endpoints OnlyUsing the rule-switch node Restricting Access to a Local GatewayUsing the address-switch node 179Overview Common Regular Expressions 180Regular Expression Reference Matches 0 or more repetitions of the previous match181 Pattern Variable Reference182 XConfiguration H323 Gatekeeper Registration UDP PortXConfiguration H323 Gatekeeper CallSignaling TCP Port VCS Port Reference183 XConfiguration Traversal Media Port Start 184Overview Microsoft DNS Server DNS Configuration185 Verifying the SRV Record186 Ldap ConfigurationDownloading the Ldap schemas About the Ldap DatabasesSecuring with TLS 187Adding H.350 Objects Create the Organizational HierarchyInclude /etc/openldap/schemas/sipidentity.ldif 188OpenLDAP 189 # MeetingRoom1 endpointSlapadd -l ldif file Command Reference xConfiguration 190191 192 Example xConfiguration Bandwidth Link 1 Node1 Name HQ Example xConfiguration Bandwidth Downspeed PerCall Mode OnExample xConfiguration Bandwidth Downspeed Total Mode On 193Example xConfiguration Bandwidth Pipe 1 Name 512Kb Asdl Example xConfiguration Error Reports Mode Off194 Example xConfiguration Ethernet 1 Speed Auto Example xConfiguration Ethernet 1 IP V4 AddressExample xConfiguration Ethernet 1 IP V4 SubnetMask Example xConfiguration ExternalManager AddressExample xConfiguration H323 Gatekeeper CallTimeToLive Example xConfiguration H323 Gatekeeper TimeToLive196 197 198 199 Example xConfiguration Registration RestrictionPolicy None 200201 202 203 Example xConfiguration Traversal Media Port Start Example xConfiguration Transform 1 PriorityExample xConfiguration Traversal Media Port End Example Traversal Server H323 H46018 CallSignaling Port205 Example xConfiguration Traversal Server Stun Discovery PortExample xConfiguration Traversal Server Stun Relay Mode On Example Traversal Server Stun Relay Port206 207 208 Example xConfiguration Zones Zone 1 H323 Mode On 209Example xConfiguration Zones Zone 1 HopCount 210211 CommandHeadline TextReferenceGoes Here- xConfiguration 212Example xConfiguration Zones Zone 3 TraversalServer SIP Port 213Example xConfiguration Zones Zone 1 Type Neighbor 214Command Reference xCommand 215Example xCommand AllowListDelete AllowListId Example xCommand boot216 Example xCommand CredentialDelete CredentialId Example xCommand DefaultLinksAdd217 Example xCommand DomainAdd DomainName example.com Example xCommand DefaultValuesSet LevelExample xCommand DenyListDelete DenyListId 218Example xCommand DomainDelete DomainId Example xCommand FeedbackDeregister ID219 220 Example xCommand LinkDelete LinkId Example xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD221 Example xCommand OptionKeyDelete OptionKeyId Example xCommand PipeDelete PipeId222 223 Example xCommand SubZoneDelete SubZoneId2 Example xCommand TransformDelete TransformId224 Example xCommand ZoneDelete ZoneId Example xCommand ZoneList Alias john.smith@example.com225 Command Reference xStatus 226CommandHeadline TextReferenceGoes Here- xStatus 227228 Ethernet229 NTP230 Calls231 232 Registrations233 Zones234 235 236 237 Links238 Alternates239 H323240 SIP241 Stun242 Bibliography243 Glossary244 Secure Socket Layer Hop count245 PEM246 VCS247 Contact Information