Cisco TelePresence Administrator's Manual page 292

Field Description
FQDN address Defines how the LDAP server address is
resolution resolved if it is specified as an FQDN.
Address record: DNS A or AAAA record
n
lookup.
SRV record: DNS SRV record lookup.
n
The default is Address record.
Port The IP port to use on the LDAP server.
Encryption Determines whether the connection to the
LDAP server is encrypted using Transport
Layer Security (TLS).
TLS: uses TLS encryption for the
n
connection to the LDAP server.
Off: no encryption is used.
n
The default is Off.
Certificate Specifies whether certificate revocation lists
revocation list (CRLs) are checked when forming a TLS
(CRL) connection with the LDAP server.
checking
None: no CRL checking is performed.
Peer: only the CRL associated with the CA
that issued the LDAP server's certificate is
checked.
All: all CRLs in the trusted certificate chain of
the CA that issued the LDAP server's
certificate are checked.
The default is None.
Authentication configuration: this section specifies the VCS's authentication credentials to use when binding to
the LDAP server.
VCS bind DN The distinguished name used by the VCS
when binding to the LDAP server.
VCS bind The password used by the VCS when
password binding to the LDAP server.
SASL The SASL (Simple Authentication and
Security Layer) mechanism to use when
binding to the LDAP server.
None: no mechanism is used.
DIGEST-MD5: the DIGEST-MD5 mechanism
is used.
The default is DIGEST-MD5.
VCS bind The username used by the VCS when
username binding to the LDAP server with SASL.
Directory configuration: this section specifies the base distinguished names to use when searching for account
and group names.
Cisco VCS Administrator Guide (X7.2)
Usage tips
Typically, non-secure connections use 389 and
secure connections use 636.
When TLS is enabled, the LDAP server's
certificate must be signed by an authority within
the VCS's trusted CA certificates file.
Click Upload a CA certificate file for TLS
the Related tasks section) to go to the
CA certificate page.
If you are using revocation lists, any required
CRL data must also be included within the CA
certificate file.
The maximum plaintext length is 60 characters,
which is then encrypted.
Maintenance
(in
Trusted
Page 292 of 498