This process comprises three parts:
The Active Directory configuration part is where you turn on Active Directory (AD), set the way the Sonus
The Cache Setting part is where you set up AD attribute caching.
The User Authentication Settings section is where you determine which domain controllers to use.
For additional information about Active Directory, see Call Routing Based on Active Directory User Attributes and Basic AD-based Call Routing for Dummies.
Before you begin, there some things you need to decide:
You must have already defined and added at least one domain controller to the Domain Controllers Table.
In the left navigation pane, go to Auth and Directory Services > Active Directory > Configuration.
Active Directory Configuration
The fields in the Active Directory Configuration panel determine the manner in which Sonus
Specifies the administrative state of the Active Directory resource.
Specifies whether or not Transport Layer Security (TLS) is used while communicating with Active Directory.
Since DCs do not support referral chasing or nested group lookups with MD5 Digest, you can't log in to Sonus
Referral chasing and nested group lookups are supported with TLS enabled. Again, this applies only to authenticating users attempting to log into the Sonus
AD lookups for call routing are executed the same regardless of the AD TLS configuration. DCs do not support referral chasing for call route lookups, therefore you must individually configure each DC that you wish to search for AD call routing querie
Specifies the method used by the Sonus
An SNMP alarm will be generated if the local AD cache reaches capacity.
If your cache reaches capacity when in Update Mode, the SBC will automatically query the DC for any entries that are not cached. Queries to the DC are never normalized. Routing may intermittently fail if your transformations rely on normalized cache entries.
Be aware that Cache Normalization is not performed on queries to the DC, even in Update Mode with Normalize Cache set to True. Therefore, transformations that rely on normalization (e.g. msRTCSIP-Line transformations that do not include tel: ) will fail for queries that resort to a DC lookup. If you're cache reaches capacity:
Specifies whether or not nested group lookups are performed to authorize users. Applies only to authentication domain controllers.
The fields in the Cache Settings panel determine how Active Directory attributes are cached locally and the frequency at which the local cache is updated. The Sonus
Specifies whether or not to strip special characters such as dashes "-", parenthesis "(", ")", spaces " ", "tel:" and "sip:" from the values while building a local active directory cache. However, normalization does not apply to name and email fields.
Specifies the interval, in minutes, between local Active Directory cache updates.
The Local AD Cache can be updated manually at any time by clicking the Refresh Cache text at the top of the Active Directory Configuration page.
Manually refreshing the cache is a one-time operation only. It will not affect the timing in which automatic cache refreshes occur.
Specifies when the AD Cache is updated upon initial SBC power up or after an AD Configuration has been edited and applied. If set to True, the system waits until the time specified in the First Update Time field before updating the AD Cache. If set to False the AD Cache is updated immediately upon start up or when a new/edited configuration is applied.
Specifies the time (system time) at which the first AD Cache update occurs after initial SBC power up or after an AD Configuration has been edited and applied. This field is visible only when the Configure Initial Update Time field is set to True.
The last saved AD Cache is used until the first update specified by this field occurs.
On the SBC 2000 or the SBC 1000 (if it has an external external USB or ASM module), it is recommended to do the following
The preceding procedure ensures that the cache refresh will always occur at a desired time instead of a random time. Only increase the cache Update Frequency to occur more often if there are frequent changes to the Windows Domain Controller; otherwise, once every 24 hours should be sufficient.
When Enabled, the SBC will raise an alarm and send an SNMP Trap if the AD Cache backup fails. This parameter controls the alarm and trap generation only. It does not control the AD Cache backup function.
Specifies which attributes are cached from Active Directory. The attribute names specified must be consistent with attribute names in Active Directory.