17 Configuring Enterprise Objects

Enterprise services work by using an existing directory name service in conjunction with client programs that access that service to look up user entries. By configuring the ME to recognize a particular enterprise service, you are drawing that service under the security protection of the ME, preventing application-level attacks.

Enterprise services are SIP-enabled real-time communication systems and collaboration services. You are configuring the ME so that it can access the required databases to derive the recognized SIP addresses within your enterprise. These services allow an organization to support, among others:

  • IP PBX hosted VoIP services

  • Enterprise instant messaging systems

  • Mobile devices

  • Presence-based applications

    Note:

    While you can configure enterprise services at any time, you must enable the master-services directory object for the ME to use the service. See Configuring Master Services Objects for more information.

For detailed information on ME enterprise gateways, refer to the Oracle Communications OS-E Session Services Configuration Guide.

enterprise

Opens the enterprise configuration group object, which is the container for the directory services and application configurations.The enterprise object contains three objects that house these additional configurations: directories, servers, and federations. In addition, it is the parent object of the unknown server policy, which sets the policies to apply to users that are not identified as belonging to a specific server.

Note:

You must enable the directory object in master-services before the enterprise object can become active. See Configuring Master Services Objects for more information.

Syntax

config vsp enterprise

Properties

user-group-policy <group-name><policy-reference>: Specifies the policy to apply to users of any server who are members of the specified group. The group can be either a user group from the directory service schema or a virtual group constructed in the configuration for policy application purposes.

Enter a group name, and the system applies the specified policy to any user belonging to that group, regardless of the server for which they are intended. Also enter the complete path to a previously configured policy reference.

If this value is set both here and at the server level, through the server object, the system applies both settings.

Default: There is no default setting

Example: set user-group-policy lcsAdmin ”vsp policies session policies policy noIM”

directories

Opens the directories configuration object for editing. The directories container includes those objects that represent the directory services available in your enterprise. See the following chapter for a description of each type of enterprise directory and its objects and properties:

  • Configuring Directory Objects

Syntax

config vsp enterprise directories

Properties

admin: Specifies whether the directory configurations are available to the system. When enabled, the system uses the configuration; when disabled, directory services are not available to the system.

Default: enabled
Values: enabled | disabled

Example: set admin disabled

on-failure: Specifies the length of time, in milliseconds, that the ME pauses between playing each digit in the conference code.

Default: ignore
  • Values: abort: Cancels the current attempt at establishing a session with the communications server and disregards any data generated for other enterprise services. (If one service fails, they all fail.) The system cancels all attempts to bring up any of the configured name services directories. Without a directory loaded, most likely all configured policy will fail.

  • ignore: Ignores the attempt at establishing a session with the failed communications server, but maintains data from other services.

  • retry: Sets the parameters for retrying the name server. Specify:

    • The number of times, between 1 and 5, to attempt to establish a session with the communications server. The default is 3 attempts.

    • The interval, in seconds, between attempts. The default is 10 seconds.

    • The next desired action if all retry attempts fail (either abort or ignore). The default is ignore.

Example: set on-failure retry 5 15 abort

resolve-on-update: Specifies whether to resolve SIP addresses after a directory update. When set to true, the system checks its SIP address database against the updated directory, and changes the address database accordingly. When set to false, the system does not change the address database. (You update the directories automatically at boot or by executing the directory-reset action.)

Default: false
Values: true | false

Example: set resolve-on-update true

servers

Opens the servers configuration object for editing. The servers container includes those objects that represent the servers that provide applications in your enterprise. See the following chapter for a description of each type of enterprise server and its objects and properties

  • Configuring Server Objects

Syntax

config vsp enterprise servers

Properties

default-server: Sets the server to use for all situations in which a packet arrives and does not match any criteria for server selection. Enter the server name as a reference to a previously configured server.

Default: There is no default setting

Example: set default-server vsp enterprise servers sametime abcCo

federations

Opens the federations configuration object for editing. The federations container includes the objects that represent junction points between the servers in your enterprise. A federation is formed by including previously configured servers into the named object. See the following chapter for information on creating a federation:

  • Configuring Federation Objects

Syntax

config vsp enterprise federations

Properties

None

unknown-server-policy

Sets the policy to apply to sessions going to or coming from unknown users. You can configure the ME to apply policy when it detects a sender or receiver of a packet that is not registered in the enterprise directory service.

The unknown-server-policy object allows you to specify separate ”from” and ”to” policies for unregistered users. When configuring this object, you reference previously created policies. See the following for more information on policy:

  • Configuring Policy Objects

Syntax

config vsp enterprise unknown-server-policy

Properties

to-policy: Sets the policy to use for all situations in which a packet is destined for a user that is not registered in any enterprise directory service. Enter the policy name as a reference to a previously configured policy.

Default: There is no default setting

Example: set to-policy vsp policies session-policies toPolicy

from-policy: Sets the policy to use for all situations in which a packet arrives from a user that is not registered in any enterprise directory service. Enter the policy name as a reference to a previously configured policy.

Default: There is no default setting

Example: set from-policy vsp policies session-policies fromPolicy