User ID

You must specify a value for the user ID on Cisco Unified Communications Manager. This value is required for the default IM address scheme and for users to log in. The default value is sAMAccountName.

Directory URI

You should specify a value for the directory URI if you plan to:

• Enable URI dialing in Cisco Jabber.
• Use the directory URI address scheme on Cisco Unified Communications Manager IM and Presence version 9.1(1) and higher.

Specify credentials in Cisco Unified Presence or Cisco Unified Communications Manager

Specify credentials in a profile on the server. The client can then retrieve the credentials from the server to authenticate with the directory.

This method is the most secure option for storing and transmitting credentials.

Set common credentials in the client configuration file

You specify a shared username and password in the client configuration file. The client can then authenticate with the directory server.

Important:

The client transmits and stores these credentials as plain text.

You should use only a well-known or public set of credentials. The credentials should also be linked to an account that has read-only permissions.

Use anonymous binds

Configure the client to connect to the directory source with anonymous binds.

• sAMAccountName
• displayName
• sn
• name
• proxyAddresses
• mail
• department
• givenName
• telephoneNumber
  Additionally, ensure you index the following attributes for secondary number queries:

  • otherTelephone
  • mobile
  • homePhone
• msRTCSIP-PrimaryUserAddress You should index msRTCSIP-PrimaryUserAddress for intradomain federation only.

(&(objectClass=user)(memberOf=cn=group-name,ou=Groups,dc=example,dc=com))

(&(objectClass=user)(memberOf:search-oid:=cn=group-name,ou=Groups,dc=example,dc=com))

(&(objectCategory=person)(objectClass=user)(!(userAccountControl:search-oid:=2))
(!(sAMAccountName=*_dbo))(!(sAMAccountName=*-admin)))

URI substitution

Cisco Jabber dynamically builds a URL to contact photos with a directory attribute and a URL template.

To use this method, set the following values in your configuration file:

1. Specify true as the value of the BDIPhotoUriSubstitutionEnabled parameter.
2. Specify a directory attribute to use as a dynamic token as the value of the BDIPhotoUriSubstitutionToken parameter; for example,

   <BDIPhotoUriSubstitutionToken>sAMAccountName</BDIPhotoUriSubstitutionToken>

3. Specify the URL and the dynamic token as the value of the BDIPhotoUriWithToken parameter; for example,

   <BDIPhotoUriWithToken>http://staffphoto.example.com/sAMAccountName.jpg</BDIPhotoUriWithToken>

With the example values in the preceding steps, the sAMAccountName attribute might resolve to msmith in your directory. Cisco Jabber then takes this value and replaces the token to build the following URL: http://staffphoto.example.com/msmith.jpg.

Binary objects

Cisco Jabber retrieves the binary data for the photo from your database.

To use this method to retrieve contact photos, specify the attribute that contains the binary data as the value of the BDIPhotoSource parameter in the configuration; for example,

<BDIPhotoSource>thumbnailPhoto</BDIPhotoSource>

• Does not use SSL.
• Uses simple authentication.
• Uses custom credentials.

<BDIEnableTLS>True</BDIEnableTLS>
<BDIConnectionUsername>username</BDIConnectionUsername>
<BDIConnectionPassword>password</BDIConnectionPassword>

• Uses SSL.
• Uses simple authentication.
• Uses custom credentials.

• The value of the BDISipUri parameter is msRTCSIP-PrimaryUserAddress.
• The value of the BDIUseSIPURIToResolveContacts parameter is true.
• The value of the BDIUriPrefix parameter is sip:.
• The directory contains sip:msmith@domain.com as the value of the msRTCSIP-PrimaryUserAddress attribute for a user named Mary Smith.

Cisco Jabber connects to your directory to resolve contact information

1. Your presence server passes msmith@domain.com to Cisco Jabber.
2. Cisco Jabber appends sip: to msmith@domain.com and then queries your directory.
3. sip:msmith@domain.com matches the value of the msRTCSIP-PrimaryUserAddress attribute.
4. Cisco Jabber retrieves contact information for Mary Smith.

Cisco Jabber users search for Mary Smith

Cisco Jabber removes the prefix of sip: from sip:msmith@domain.com and gets the contact ID of msmith@domain.com.