Directory Management Supported Configurations Understanding Directories
Polycom, Inc. 461
Accounts Required for the System
RealPresence Resource Manager System Service Account
Before integrating the RealPresence Resource Manager system with an Active
Directory forest, you must create a service account for it in Active Directory.
This service account is a read-only user account that the RealPresence
Resource Manager system uses to perform LDAP queries against your Active
Directory Global Catalog.
RealPresence Resource Manager System Computer Account
The RealPresence Resource Manager system requires a computer account to
enable secure channel communications with the Active Directory forest that is
being leveraged for authentication. This account must be pre-created and the
password set by an administrator from a Domain Controller.
Understanding Base DN
When the RealPresence Resource Manager system is integrated with an
enterprise directory, the system uses the baseDN to determine domains and
manage directory searches.
The Base DN field is where you specify the distinguished name (DN) of a subset
of the Active Directory hierarchy (a domain, subset of domains, or
organizational unit) to which you want to restrict the RealPresence Resource
Manager system search. It acts like a filter.
By default, the Base DN field is empty. The first time you tell the system to
connect to the enterprise directory server, leave the Base DN field empty.
Once you have established a working connection with your Active Directory,
then you enter a Base DN.
When setting up a redundant RealPresence Resource Manager system, the
redundant servers use the same computer account to create their secure
channel connection. The computer account name does not have to match the
host name of your RealPresence Resource Manager system server.
