Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

TMS PE and OpenLDAP

Hello,

We have problem with authorization the Jabber's (Movi) users from LDAP database.

The synchronization between LDAP and TMS is working very well, but any user can't sign in - it's look like, the problem is with passwords.

When I changed the password manually in TMS, everything is ok.

Do You have any special scheme for LDAP and Provisioning users? Or maybe, we need to use any other encription for passwords then md5/clear?

Thanks,

2 ACCEPTED SOLUTIONS

Accepted Solutions
Bronze

TMS PE and OpenLDAP

Hello Krzysztof,

Import form LDAP to the TMS is working fine, but it will create just accounts in TMS. Authentication happens on VCS and VCS can send authentication requests only to AD.

In your case you should create manually passwords for all users and send emails to them with credentials or connect TMS and VCS to the MS Active Directory.

Best Regards,

Artem Borodai

TMS PE and OpenLDAP

Also LDAP can be used to authenticate users, have it running here with the legacy mode

and it might be possible to do the same with TMS PE.

On TMS PE the local authentication DB gets populated that could cause issues.

On the other hand TMS can not import passwords, ... I think the password handling

is really not the biggest strength of Jabber Video, ...

Anyhow, authentication can be done via a h350 directory, you would need to have

passwords in clear text which is not so great neither. Not sure if MD5 hashes could work as well.

So if you have full control over your users and cleartext passwords its possible to generate

one ldap tree for your users to get imported (the password does not matter here) by TMS and

one h350 for the VCS.

The other option is just to let TMS create a password and send this password to the user via the email function.

But you will not be able to syncrhonze the password from some other source.

Please remember to rate helpful responses and identify

4 REPLIES
Bronze

TMS PE and OpenLDAP

Hello Krzysztof,

Import form LDAP to the TMS is working fine, but it will create just accounts in TMS. Authentication happens on VCS and VCS can send authentication requests only to AD.

In your case you should create manually passwords for all users and send emails to them with credentials or connect TMS and VCS to the MS Active Directory.

Best Regards,

Artem Borodai

New Member

TMS PE and OpenLDAP

Artem,

Thank You so much for your response.

It's impossible to manually change/create passwords, AD also. Any other idea? ;-)

Bronze

TMS PE and OpenLDAP

Then you can go to the Administrative tools-Configuration-Provisioning Extension settings and enable Password Generation.

Passwords will be automatically generated for imported users.

Best Regards,

Artem Borodai

TMS PE and OpenLDAP

Also LDAP can be used to authenticate users, have it running here with the legacy mode

and it might be possible to do the same with TMS PE.

On TMS PE the local authentication DB gets populated that could cause issues.

On the other hand TMS can not import passwords, ... I think the password handling

is really not the biggest strength of Jabber Video, ...

Anyhow, authentication can be done via a h350 directory, you would need to have

passwords in clear text which is not so great neither. Not sure if MD5 hashes could work as well.

So if you have full control over your users and cleartext passwords its possible to generate

one ldap tree for your users to get imported (the password does not matter here) by TMS and

one h350 for the VCS.

The other option is just to let TMS create a password and send this password to the user via the email function.

But you will not be able to syncrhonze the password from some other source.

Please remember to rate helpful responses and identify

279
Views
0
Helpful
4
Replies
CreatePlease login to create content