IP Phone Services SDK LDAPSearch filter

[Logicalis Managed Services]

I would like to add an LDAP Search filter so that only AD user objects with an ipPhone value will be displayed on an IP Phone's corporate directory - using an IIS server so that I can query AD and span multiple child domains without being restricted by CUCM appliance to only 5 directory associations.

Attached is an example code provided by the Cisco IP Phone Services SDK but don't know how to add the LDAP filter on the ipPhone attribute.

Any ideas?

[superjay007]

You've done a fantastic job with the script so far.

Thought you might like to know I couldn't get it working on Server 2003 with IIS6. When I moved the scripts to IIS7 on Server 08 with AD, the LDAP query worked first time.

Regards.

Jamie

[Aaron Harrison]

Hi

Hmm... I wrote it on 2003 originally. I guess it's a difference in the security setup in IIS, there's not much to the code :-)

Aaron

[Nelson Alonso]

I've been looking for this all over. Would this work with an authenticated bind to an ldap server? If so, which paramter do I update to enter the LDAP user and password?

Any help would be appreciated. Thanks in advance.

[Aaron Harrison]

Hi

Generally what I do is set the application in IIS to run under the account you want it to use - this can be a standard account by default (i.e. a normal, non-admin user has rights to read all that is required in AD). Setting it this way means you don't have to enter it into any text/config files, just the IIS dialog boxes.

On a domain-member machine you can just run it under an AD account directly.

On a non-member server you would have to create a local account with the same exact username/password as an equivalent domain account, and run it under that. It should passthrough authenticate the two.

Regards

Aaron

[wirawanagahari]

does this script work with openLDAP? because i'm still looking for the script that work not only with AD but also with OpenLDAP.