User's Manual

Avaya Branch Gateway Manager 10.0 Page 171
15-601011 Issue 29r (Friday, November 02, 2012)B5800 Branch Gateway
Configuration Settings: System
5.3.7.1 LDAP
The system supports LDAP Version 2. LDAP (Lightweight Directory Access Protocol) is a software protocol for enabling
anyone to locate organizations, individuals, and other resources such as files and devices in a network, whether on the
Internet or on a corporate intranet. LDAP is a "lightweight" (smaller amount of code) version of DAP (Directory Access
Protocol), which is part of X.500, a standard for directory services in a network. LDAP is lighter because in its initial
version, it did not include security features.
· The system supports the import of directory records from one system to another using HTTP. That includes using
HTTP to import records that another system has learnt using LDAP. HTTP import , which is simpler to configure,
can be used to relay LDAP records with LDAP configured on just one system.
· LDAP records can contain several telephone numbers. Each will be treated as a separate directory record when
imported into the system directory.
In a network, a directory tells you where in the network something is located. On TCP/IP networks, including the
Internet, the Domain Name System (DNS) is the directory system used to relate the domain name to a specific network
address. However, you may not know the domain name. LDAP allows you to search for an individual without knowing
where they're located (although additional information will help with the search).
An LDAP directory is organized in a simple "tree" hierarchy consisting of the following levels:
· The "root" directory (the starting place or the source of the tree), which branches out to
· Countries, each of which branches out to
· Organizations, which branch out to
· Organizational units (divisions, departments, and so forth), which branches out to (includes an entry for)
· Individuals (which includes people, files, and shared resources such as printers)
An LDAP directory can be distributed among many servers. Each server can have a replicated version of the total
directory that is synchronized periodically. An LDAP server is called a Directory System Agent (DSA). An LDAP server that
receives a request from a user takes responsibility for the request, passing it to other DSA's as necessary, but ensuring a
single coordinated response for the user.
LDAP Directory Synchronization allows the telephone number Directory held in the Control Unit to be synchronized with
the information on an LDAP server. The feature can be configured to interoperate with any server that supports LDAP
Version 2.
174