Hi, We have UC platform(CM,SM,SMGR

[miky2019]

Hi,
We have UC platform(CM,SM,SMGR,AADS,AAWG,EQ conferencing,AAMS,...etc), using windows equinox client 3.6 for testing phase, if we used manual configuration, everything is going well while in case using auto config, finally we could login automatically to Equinox after modifying the PPM to enterprise instead of Avaya but the issue now that the Equinox client request to enter the extension number and communication profile password, so please any suggestion to enable me to use the AD credentials only once to login to all services(Phone service,Equinox,multimedia and presence) noted that we are configuring the identity in the SMGR xxx.yyy@domain.com , presence/IM user xxx.yyy@domain.com , avaya SIP profile 5555@sip.com.

when login we use the AD credentials then enter Avaya SIP extension 5555 with password of communication profile defined in SMGR.

Any suggestion to use only AD credentials noted that we made a lot of changes in AADS config file(settings file) but without result .

 

[miky2019]

Yes, as told you it was our reference even doing many trials with different attributes config like , Directory User DN,User Mapping Directory Attribute
...etc but got the same result i see the document is very limited and poor in the troubleshooting,...etc

 

[kyle555]

read log files.

do whatever you do to make AMM work and read those. Compare to what's broke when you try SSO.

 

[miky2019]

i upgraded presence/IM plugin to 8.1.1 and everything going well

we need to give the user ability to upload his profile photo locally as the LDAP hasn't the users images , any idea?

 

[kyle555]

No. Just put them in LDAP.

AADS has an on-board OpenLDAP you can use if you want. It kinda sucks because you feed a csv of users and define the same password for all of them and they can't change it.
When you do that, you can make a zip file with the CSV and a folder of pictures. On each line you'd also specify the filename of the picture. Works fine.

And, I suppose in theory you could enable the on-board OpenLDAP and feed in your users and NOT use it as an authentication directory but just a directory to pull info.

So, I figure if you want to mess around with AADS, you probably can get something but you'd be managing it yourself, it wouldn't be self-serve for the users.

 

[bankingguy]

Hi @miky2019, did you manage to get this working? Can you share your 46xx settings if you got it working?

My setup is IX Workplace for endpoints and some J169 phones. Still unable to make presence work, not sure what is wrong. All services are up but when i do a traceBreeze I'm getting alot of 503 message.