188, OpenLDAP | TANDBERG Security Camera specs

Grey Headline (continued)

LDAP Configuration

TANDBERG VIDEO COMMUNICATIONS SERVER ADMINISTRATOR GUIDE

OpenLDAP

Prerequisites

These instructions assume that an OpenLDAP server has already been installed. For details on installing OpenLDAP see the documentation at http://www.openldap.org.

The following examples use a standard OpenLDAP installation on the Linux platform. For installations on other platforms the location of the OpenLDAP configuration files may be different. See the OpenLDAP installation documentation for details.

Installing the H.350 Schemas

1.Copy the OpenLDAP files to the OpenLDAP schema directory:

/etc/openldap/schemas/commobject.ldif

/etc/openldap/schemas/h323identity.ldif

/etc/openldap/schemas/h235identity.ldif

/etc/openldap/schemas/sipidentity.ldif

2.Edit /etc/openldap/slapd.conf to add the new schemas. You will need to add the following lines: include /etc/openldap/schemas/commobject.ldif

include /etc/openldap/schemas/h323identity.ldif include /etc/openldap/schemas/h235identity.ldif

include /etc/openldap/schemas/sipidentity.ldif

The OpenLDAP daemon (slapd) must be restarted for the new schemas to take effect.

Introduction

Getting Started

Overview and

System

VCS

Zones and

Call

Bandwidth

Firewall

Maintenance

Appendices

Status

Configuration

Configuration

Neighbors

Processing

Control

Traversal

D14049.03

188

MAY 2008

Image 188

TANDBERG Security Camera manual 188, OpenLDAP, Include /etc/openldap/schemas/sipidentity.ldif

Contents

Guide What’s in this Manual? PreambleIntroduction Overview and Status LAN Zones and Neighbors Call Processing Maintenance Appendices Bandwidth Control Maintenance What’s in this Manual? Legal Notices Copyright 2008, Tandberg Approvals Safety Instructions and ApprovalsSafety Instructions Environmental Issues Waste Handling Digital User Guides Environmental Issues Tandberg VCS Overview VCS Base ApplicationsVCS Control VCS Expressway Standard Features What’s New in this Version? Optional FeaturesDual Network Interfaces User Policy FindMe Administrator Guide Using this Administrator GuideCommand Line Interface Typographical conventions Getting Started Installation Installation Site PreparationsGeneral Installation Precautions Connecting the Cables Initial Configuration Powering on the VCS Initial Configuration via Serial Cable Down key Initial Configuration via Front PanelUP key System Administrator Access Overview Using the Web Interface Select Administrator LoginWeb Interface Supported Browsers General page features Command Line Interface Using the Command Line Interface CLITypes of Commands How Command are Shown in this Guide Overview and Status Overview Viewing the Overview Understanding the Overview System Information Speed EthernetStatus System Ethernet MAC address IP Status Viewing the IP Status Understanding the IP Status Status System Resource Usage Traversal calls Resource UsageViewing the Resource Usage Understanding the Resource Usage Registrations Viewing the Registrations Understanding the Registrations Registration History ReasonDuration End Time Calls Viewing the Calls Understanding the Calls Status Call History Filter Call HistoryViewing the Call History Understanding the Call History Search History Viewing the Search History Understanding the Search HistoryAbout Searches Status Search History Local Zone Viewing the Local Zone Understanding the Local Zone Status Zones ZonesViewing the Zones Understanding the Zones Status Links LinksViewing the Links Understanding the Links Pipes Viewing the PipesUnderstanding the Pipes Status Pipes Stun Relays Viewing the Stun Relays Understanding the Stun Relays Viewing the Warnings Understanding the Warnings Status Warnings Event Log Viewing the Event Log Understanding the Event LogEvent Log Color Coding Green Interpreting the Event Log Event Log Format Message Details Field Events Logged at Level System Configuration Changed TLS Negotiation ErrorUser session Login failure Policy Change Message Received Message SentRegistration Refresh Accepted Registration Refresh Request System Configuration System Administration Overview ConfigurationAbout Administrator Access settings About the System Name System Configuration Ethernet XConfiguration EthernetAbout Ethernet Speed Ethernet speed Overview IP Configuration XConfiguration IP XConfiguration IPProtocolXConfiguration IP Route XCommand RouteAdd About IPv4 to IPv6 Gatewaying About Dual Network Interfaces Overview LAN ConfigurationAbout LAN Configuration About the DNS Domain Name XConfiguration IP DNSAbout DNS Servers System Configuration NTP XConfiguration NTP Address XConfiguration TimeZone NameAbout the NTP Server About the Time Zone XConfiguration Snmp About Snmp XConfiguration ExternalManager External ManagerAbout the External Manager Address Backups Backing up Configuration Settings Logging Overview Remote LoggingAbout Logging About Remote Logging Setting the Event Log Level XConfiguration Log LevelLog Levels About Event Log Levels VCS Configuration 323 Overview Endpoint Registration Configuring H.323 XConfiguration H323 Using the VCS as a SIP Registrar SIP OverviewAbout SIP on the VCS SIP Registration Expiry Using the VCS as a SIP Proxy Server SIP protocols and ports Configuring SIP Registrations, Protocols and Ports XConfiguration SIP Configuring SIP Domains VCS Configuration Protocols SIP DomainsCancel View/Edit Configuring Interworking XConfiguration Interworking ModeSave SIP interworking mode Interworking MCU, Gateway and Content Server Registration Registration ControlRegistration Overview Endpoint Registration Finding a VCS with which to Register 323Preventing automatic registrations H323 Gatekeeper AutoDiscovery Authentication About Authentication for Local RegistrationsConfiguring Authentication for Local Registrations XConfiguration Authentication Configuring External Registration Credentials About External Registration Credentials Authentication using an Ldap Server Authentication DatabasesAlias Origin Setting Configuring Ldap Server settings XConfiguration Ldap XConfiguration Authentication Ldap Authentication using a Local Database Configuring the Local Database Attempts to Register using an Existing Alias Registering AliasesAbout Alias Registration Alias Registration XConfiguration Registration RestrictionPolicy Allow and Deny ListsAbout Allow and Deny Lists Activating use of Allow or Deny Lists XCommand AllowListAdd XConfigurationAllowList Registration Managing Entries in the Allow List VCS Configuration Registration Deny List XCommand DenyListAdd XConfigurationDenyList RegistrationManaging Entries in the Deny List Add Deny List Pattern Zones and Neighbors About your Video Communications Network Example Network DiagramIntroduction Overview Configuring the Local Zone and its Subzones Configuring the Traversal Subzone PortsLocal Zone and Subzones Traversal Subzone About Zones Traversal Client Zone Traversal Server Zone Neighbor Zone Enum Zone DNS Zone Default Zone XCommand DefaultLinksAdd Adding Zones Configuring Zones VCS Configuration ZonesXCommand ZoneAdd XConfiguration Zones Zone Match1 Match5 Configuring Zones All TypesHop count Configuring Neighbor Zones SIP portSIP transport Primary address Alternate 1 to Alternate 5 address Configuring Traversal Client Zones Authentication usernameRetry interval Primary address Configuring Traversal Server Zones DNS suffix Configuring Enum ZonesConfiguring DNS Zones About Alternates Configuring Alternates VCS Configuration AlternatesXConfiguration Alternates Alternates Dial Plans Call Processing Call Processing Diagram Search Process Dialing by Address Types Dialing by IP Address Dialing by H.323 or SIP URIDialing by Enum Endpoints registered to a VCS Expressway Hop Counts About Hop Counts Configuring Hop CountsXConfiguration Zones Zone 1..200 HopCount Authentication Mode Off Administrator PolicyAuthentication Mode On Enabling the use of Administrator Policy Administrator Policy Mode Configuring Administrator Policy via the Web Interface Uploading a CPL Script About CPL XSD files User Policy FindMe Configuring User Policy Manager VCS Configuration Policy UserXConfiguration Policy UserPolicy 100 101 Managing FindMe User AccountsAbout User Accounts Creating a New User Account 102 Changing a User PasswordViewing Existing User Account Settings Are you sure...? 103Deleting a User Account Using TANDBERG’s FindMe Accessing the FindMe Configuration104 About your FindMe User Account Configuring your FindMe User Account 105 106 Searches and Transforms 107 Configuring Local Alias TransformsXConfiguration Transform 108 Zone Searching and Transforming Configuring Zone Searches Transforms Default SettingsXConfiguration Zones Zone 1..200 Match 109 110 ExamplesCombining Match Types and Priorities Never Query a Zone 111 Filter Queries to a Zone Without Transforming 112 Query a Zone for Original and Transformed Alias 113 Query a Zone for Two or More Transformed Aliases H323 114URI Dialing Configuring Matches for DNS Zones 115URI Dialing for Outgoing Calls Process Adding and Configuring DNS Zones XCommand ZoneAdd XConfiguration Zones Zone116 Click Create Zone 117 Configuring DNS ServersXConfiguration IP DNS Server 118 URI Dialing for Incoming Calls Example DNS Record Configuration Recommended Configuration119 URI Dialing and Firewall Traversal Overview Process Enabling Enum Dialing 120Enum Dialing 121 Enum Dialing for Outgoing CallsPrerequisites Example Configuring Matches for Enum Zones Configuring Transforms for Enum ZonesMode of PatternMatch Pattern string Pattern type of Prefix 122 Configuring Enum Zones 123 124 Configuring DNS Naptr Records 125Enum Dialing for Incoming Calls About DNS Domains for Enum Recommended Configuration for Firewall Traversal XConfiguration Call Services126 Unregistered Endpoints Overview Configuration Example Usage XConfiguration Call Services Fallback Alias127 Fallback Alias Identifying a Particular Call Disconnecting Calls128 Disconnecting a Call via the Web Interface Disconnecting a Call via the CLIIssues when Disconnecting SIP Calls 129 130 Bandwidth Control Bandwidth Control on the VCS Example Network Deployment 131Bandwidth Control Overview About the Default Subzone 132Subzones Specifying the Subzone IP Addresses Subzone Links Creating a Subzone XCommand SubZoneAdd133 134 Configuring a SubzoneXConfiguration Zones LocalZone SubZone 135 Applying Bandwidth Limitations to SubzonesTypes of Limitations How Different Bandwidth Limitations are Managed Default Links XCommand LinkAdd136 About Links Creating Links Editing Links XConfiguration Bandwidth Link137 Default Links About Default LinksPre-Configured Links 138 About Pipes Creating Pipes XCommand PipeAdd139 XConfiguration Bandwidth Pipe 140Editing Pipes Editing an Existing Pipe 141 Applying Pipes to LinksOne Pipe, One Link One Pipe, Two or More Links Default Bandwidth and Downspeeding About the Default Call BandwidthConfiguring Default Call Bandwidth and Downspeeding 142 Example Without a Firewall 143Bandwidth Control Examples VCS Expressway Subzone Configuration VCS Control Subzone Configuration144 Example With a Firewall 145 Firewall Traversal 146 Firewall Traversal OverviewAbout Expressway VCS as a Firewall Traversal Client How does it work? VCS Expressway Server Quick Guide to VCS Traversal Client Server Configuration147 148 Firewall Traversal Protocols and PortsOverview Expressway Process Firewall Traversal Protocols SIP Firewall Traversal Protocols Call signaling 149Media SIP Ports Firewall Traversal and Authentication Authentication and NTPConfiguration Zones Edit Zone, in the Configuration section 150 Other Issues 151 Configuring the VCS as a Traversal Client 152Adding a New Traversal Client Zone TraversalClient Create Zone Alternate 1..5 Address Configuring a Traversal Client Zone153 Configuring the VCS as a Traversal Server 154Adding a New Traversal Server Zone TraversalServer Create Zone Configuring a Traversal Server Zone Client authentication usernameDemux mode 155 156 Configuring Traversal for EndpointsXConfiguration Zones LocalZone Traversal H323 Configuring Traversal Server Ports 157 Stun Services 158 Configuring Stun Services 159 Maintenance 160 Upgrading Software Overview Upgrading Using SCP/PSCP161 162 Upgrading via the Web Interface XConfiguration Option 1..64 Key 163Option Keys Overview Adding Options via the CLI Maintenance Option Keys 164Adding Options via the Web Interface Add option key Overview Enabling Security 165Security Passwords Overview Configuring Administrator PasswordXConfiguration SystemUnitPassword 166 Error Reports 167System Snapshot Overview Creating a System Snapshot XCommand Boot 168Restarting Overview Restarting the VCS Maintenance Shutdown 169Shutting Down Overview Shutting Down Restoring Default Configuration Overview DefaultValuesSet LevelXCommand DefaultValuesSet Level 3 must be 170 171 Appendices Address-switch 172CPL Reference Overview of CPL on the VCS 173 Field Otherwise Not-present 174Subfield Rule-switch 175Location Reject Call Screening of Authenticated Users 176CPL Examples Call Screening Based on Alias 177 Call Screening Based on DomainChange of Domain Name Dont accept calls from this source Block Calls from Default Zone and Default Subzone Address Address is=DefaultSubZone178 Allow Calls from Locally Registered Endpoints Only Restricting Access to a Local Gateway Using the address-switch nodeUsing the rule-switch node 179 180 Regular Expression ReferenceOverview Common Regular Expressions Matches 0 or more repetitions of the previous match 181 Pattern Variable Reference XConfiguration H323 Gatekeeper Registration UDP Port XConfiguration H323 Gatekeeper CallSignaling TCP Port182 VCS Port Reference 183 XConfiguration Traversal Media Port Start 184 DNS Configuration 185Overview Microsoft DNS Server Verifying the SRV Record Ldap Configuration Downloading the Ldap schemas186 About the Ldap Databases 187 Adding H.350 ObjectsSecuring with TLS Create the Organizational Hierarchy OpenLDAP Include /etc/openldap/schemas/sipidentity.ldif188 Slapadd -l ldif file 189# MeetingRoom1 endpoint Command Reference xConfiguration 190 191 192 Example xConfiguration Bandwidth Downspeed PerCall Mode On Example xConfiguration Bandwidth Downspeed Total Mode OnExample xConfiguration Bandwidth Link 1 Node1 Name HQ 193 194 Example xConfiguration Bandwidth Pipe 1 Name 512Kb AsdlExample xConfiguration Error Reports Mode Off Example xConfiguration Ethernet 1 IP V4 Address Example xConfiguration Ethernet 1 IP V4 SubnetMaskExample xConfiguration Ethernet 1 Speed Auto Example xConfiguration ExternalManager Address 196 Example xConfiguration H323 Gatekeeper CallTimeToLiveExample xConfiguration H323 Gatekeeper TimeToLive 197 198 199 Example xConfiguration Registration RestrictionPolicy None 200 201 202 203 Example xConfiguration Transform 1 Priority Example xConfiguration Traversal Media Port EndExample xConfiguration Traversal Media Port Start Example Traversal Server H323 H46018 CallSignaling Port Example xConfiguration Traversal Server Stun Discovery Port Example xConfiguration Traversal Server Stun Relay Mode On205 Example Traversal Server Stun Relay Port 206 207 208 Example xConfiguration Zones Zone 1 H323 Mode On 209 Example xConfiguration Zones Zone 1 HopCount 210 211 CommandHeadline TextReferenceGoes Here- xConfiguration 212 Example xConfiguration Zones Zone 3 TraversalServer SIP Port 213 Example xConfiguration Zones Zone 1 Type Neighbor 214 Command Reference xCommand 215 216 Example xCommand AllowListDelete AllowListIdExample xCommand boot 217 Example xCommand CredentialDelete CredentialIdExample xCommand DefaultLinksAdd Example xCommand DefaultValuesSet Level Example xCommand DenyListDelete DenyListIdExample xCommand DomainAdd DomainName example.com 218 219 Example xCommand DomainDelete DomainIdExample xCommand FeedbackDeregister ID 220 221 Example xCommand LinkDelete LinkIdExample xCommand OptionKeyAdd Key 1X4757T5-1-60BAD5CD 222 Example xCommand OptionKeyDelete OptionKeyIdExample xCommand PipeDelete PipeId 223 224 Example xCommand SubZoneDelete SubZoneId2Example xCommand TransformDelete TransformId 225 Example xCommand ZoneDelete ZoneIdExample xCommand ZoneList Alias john.smith@example.com Command Reference xStatus 226 CommandHeadline TextReferenceGoes Here- xStatus 227 228 Ethernet 229 NTP 230 Calls 231 232 Registrations 233 Zones 234 235 236 237 Links 238 Alternates 239 H323 240 SIP 241 Stun 242 Bibliography 243 Glossary 244 Secure Socket Layer Hop count 245 PEM 246 VCS 247 Contact Information