Configuring External Authentication for Standalone and Built-in SCs
Background
Two external authentication modes are available: H.350 and LDAP.
- H.350: The SC requests the external server through H.350 to authenticate the device.
- LDAP: The SC requests the external server through LDAP to authenticate the device. LDAP authentication is classified into domain account authentication and non-domain account authentication.
- Domain account authentication: If you want to authenticate a device through its domain account, set the external authentication mode to this option.
- Non-domain account authentication: If you want to authenticate a device through a non-domain account, set the external authentication mode to this option.
Procedure
- Log in to the SMC2.0 web interface.
- Choose .
Access the SC list. - Select the SC to be configured and click Edit.
The Edit page is displayed. - In External Authentication Mode, configure the SC external authentication mode, as shown in Figure 1. Table 1 describes the parameters.Figure 1 External authentication mode
Table 1 H.350 Parameter
Description
How to Set
Authentication mode
Indicates the authentication mode that the SC uses to authenticate an external device when the device initiates a registration request to the SC.
Default value: None
Select H.350. Server Address
Indicates the IP address of the external device.
Set this parameter to the actual IP address of the external device. User name
Indicates the user name used to connect to the H.350 server when the SC uses the H.350 authentication mode.
Set this parameter to the actual H.350 server user name. Key
Indicates the key used to connect to the H.350 server when the SC uses the H.350 authentication mode.
Set this parameter to the actual H.350 server key. Transmission protocol
Indicates the protocol used by the SC to communicate with the external device.
Default value: LDAPS
Set this parameter to LDAP or LDAPS based on the site requirements. NOTE:If this parameter is set to LDAPS, click Import LDAP Certificate and upload an LDAP certificate based on the onscreen instruction.Base DN (distinguished name)
Indicates the directory where authentication information is stored on an external device. After you set this parameter, the SC can determine the device information at which location to be used during authentication.
Set this parameter to the actual base DN of the external device. For example, if the authentication information for an external device is stored in cn=user00x,ou=users,o=example,c=com, set this parameter to cn=user00x,ou=users,o=example,c=com.
Table 2 LDAP - domain account authentication Parameter
Description
How to Set
Authentication mode
Indicates the authentication mode that the SC uses to authenticate an external device when the device initiates a registration request to the SC.
Default value: None
Select LDAP. NOTE:If the LDAP option is unavailable for Authentication mode, change the value of ShowLdapAuth to true in the database. For details, see the HUAWEI SMC2.0 V500R002C00 Uncommon Function Configuration Guide.Server IP address
Indicates the IP address of the external device.
Set this parameter to the actual IP address of the external device. Transmission protocol
Indicates the protocol used by the SC to communicate with the external device.
Default value: LDAPS
Set this parameter to LDAP. Support domain account
Indicates whether to enable domain account authentication.
Ensure that Support domain account is selected. Table 3 LDAP - non-domain account authentication Parameter
Description
How to Set
Authentication mode
Indicates the authentication mode that the SC uses to authenticate an external device when the device initiates a registration request to the SC.
Default value: None
Select LDAP. NOTE:If the LDAP option is unavailable for Authentication mode, change the value of ShowLdapAuth to true in the database. For details, see the HUAWEI SMC2.0 V500R002C00 Uncommon Function Configuration Guide.Server IP address
Indicates the IP address of the external device.
Set this parameter to the actual IP address of the external device. Transmission protocol
Indicates the protocol used by the SC to communicate with the external device.
Default value: LDAPS
Set this parameter to LDAP or LDAPS based on the site requirements. NOTE:If this parameter is set to LDAPS, click Import LDAP Certificate and upload an LDAP certificate based on the onscreen instruction.Base DN (distinguished name)
Indicates the directory where authentication information is stored on an external device. After you set this parameter, the SC can determine the device information at which location to be used during authentication.
Set this parameter to the actual base DN of the external device. For example, if the authentication information for an external device is stored in cn=user00x,ou=users,o=example,c=com, set this parameter to cn=user00x,ou=users,o=example,c=com.
Naming attribute
Indicates the user name of the external device server.
Set this parameter to the naming attribute of the external device. For example, if the naming attribute of an external device is cn, set this parameter to cn.
Support domain account
Indicates whether to enable domain account authentication.
Ensure that Support domain account is selected.
Verification
- The authentication mode for the SC has been set to domain account authentication on the SMC2.0 web interface.
- A domain account and its password have been obtained. The account and password are used for registering with the SC and logging in to the TE Desktop.
- Open TE Desktop and click Server Settings in the login window.
The registration server configuration window is displayed. - On the Registration Server tab page, enter the server IP address and URI in Address and SIP URI respectively, as shown in Figure 2.Figure 2 Registration Server
- On the Advanced Settings tab page, set Transmission Type, as shown in Figure 3.Figure 3 Advanced Settings
- Click Save.
The system returns to the TE Desktop login window. - Enter the user name and password for logging in to the TE Desktop, as shown in Figure 4.Figure 4 Logging in to the TE Desktop
- Log in to the SMC2.0 web interface.
- Choose .
Access the SC list. - Click the SC with which the TE Desktop has registered.
- Click the Registered Nodes tab on the page that is displayed.
- Select the registered TE Desktop in the registration list.
Details of the TE Desktop are displayed in the lower part of the page. - On the Details tab page, view information under Other Parameters.Figure 5 Other Parameters
If the authentication type is External, as shown in Figure 5, the domain account authentication for the SC has been configured successfully.
