Yealink Forums
Problem: LDAP search in v83 does not work as in v81 - Printable Version

+- Yealink Forums (http://forum.yealink.com/forum)
+-- Forum: IP Phone Series (/forumdisplay.php?fid=4)
+--- Forum: T4x Series (/forumdisplay.php?fid=31)
+--- Thread: Problem: LDAP search in v83 does not work as in v81 (/showthread.php?tid=42052)

Problem: LDAP search in v83 does not work as in v81 - zonder - 08-21-2018 03:29 PM

Good day,
Last week I upgraded firmware from 81.0.110 to 83.0.35 on SIP-T23/42/46 phones and faced the problem with LDAP search which has been working for past 4 years with v73 and v81.

Below are name and number filters used in LDAP search config:
ldap.name_filter = (|(givenName=%)(sn=%))
ldap.number_filter = (|(ipPhone=%)(Mobile=%))

with v73 and v81 search results never returned persons who have empty ipPhone AD attribute, which is correct logic.
[attachment=5049][attachment=5050]

after upgrading to v83 search results started to return all persons, even if they have empty ipPhone AD attribute, but showing NONE next to name.
[attachment=5051][attachment=5052]

Please advise how to overcome this problem. I believe it could be a bug in v83.

Thank you

RE: Problem: LDAP search in v83 does not work as in v81 - proofy - 09-23-2020 06:33 AM

(08-21-2018 03:29 PM)zonder Wrote:  Good day,
Last week I upgraded firmware from 81.0.110 to 83.0.35 on SIP-T23/42/46 phones and faced the problem with LDAP search which has been working for past 4 years with v73 and v81.

Below are name and number filters used in LDAP search config:
ldap.name_filter = (|(givenName=%)(sn=%))
ldap.number_filter = (|(ipPhone=%)(Mobile=%))

with v73 and v81 search results never returned persons who have empty ipPhone AD attribute, which is correct logic.


after upgrading to v83 search results started to return all persons, even if they have empty ipPhone AD attribute, but showing NONE next to name.


Please advise how to overcome this problem. I believe it could be a bug in v83.

Thank you

Try to simulate the search with a program like "Apache Directory Studio". The standard search is usually not sufficiently restricted.
My filters look like this:

Code:
ldap.name_filter = (&(|(cn=%)(sn=%))(|(objectClass=person)(objectClass=group)(objectClass=contact​))(|(homePhone=*)(telephoneNumber=*)(mobile=*)))
ldap.number_filter = (&(|(homePhone=%)(telephoneNumber=%)(mobile=%))(cn=*)(|(objectClass=person)(ob​jectClass=group)(objectClass=contact)))
it is also important to define the appropriate attributes
Code:
ldap.numb_attr = telephoneNumber mobile homePhone

some more examples:
https://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters.aspx