Registrations under a bogus name

[Eli Kagan]

Perhaps there is something I don't understand here....

I have a VCS Control that authenticates users via its local database that in turn is synched by TMS to AD.   It works and I have no problems with it so far.

However, it seems that I can register any name in my domain as long as I know at least one username/password.  For instance, I can register as john.doe@mydomain.com as long as I supply my own username and password to the VCS.  I am not using MOVI but a simple SIP client. It registers and everything seems to work.

Does it make any sense?  Is there a way to force a user to register only with his/her own name and credentials? That is, I'd like to make sure that John Doe doesn't register as Mike Smith by supplying his own username/password.

Thanks,

Eli

[Martin Koch]

Hi Eli!

Thats the ok behavior. WIth the local database you can just define which accounts exist,

so thats more an authorization. What you are looking for is an authentication.

You can archive that with an external LDAP server carrying a h.350 database.

Check out: VCS configuration > Authentication > Devices > H.350 directory service

There you will find an option "Source of aliases for registration" which will do as you asked.

Check out the vcs online help, as well as the admin guide, as well as:

• Cisco VCS Authenticating Accounts Using LDAP Deployment Guide (X7.2) (PDF - 430 KB)
• Cisco VCS Authenticating Devices Deployment Guide (X7.2) (PDF - 670 KB)

Please remember to rate helpful responses and identify helpful or correct answers.