Jump to content

netpro78

Members
  • Posts

    79
  • Joined

  • Last visited

Posts posted by netpro78

  1. I had T.38 working well on version 56.1 Win64 both with the built in fax to email, as well as a T.38 ATA.  When upgrading to 59.0 Win64 they stop functioning, however downgrading to 56.1 solves the problem without changing any other settings.  Any suggestions?

  2. Yes, and you cannot trust an end user to update their phone's provisioning password in the phone if they happen to update their web password.  Possibly each extension should have separate passwords for each function:

    LDAP password

    SIP Password

    Provisioning password

    Web portal Password

    Voicemail PIN

  3. It is not as much of a LDAP issue is it is an issue with the way the system builds the config files.  I would propose that there be an account type at the domain level that has permissions to download config files for the domain.  Then when the system generates the config file, it fills it with the credentials of the account that the MAC is bound to, and not the credentials of who is logging in to get the file (like it currently does).  It would probably also make sense if there was a separate password for LDAP since web, sip, and VM all have individual passwords. 

  4. This worked well, and I also realized some details that I were not in the documentation.  One of the confusing issues I was having is my wildcard, and my regular cert both have the same base domain name. 

    My regular cert is xxx.yyy.mydomain.com.  Wildcard certificate was *.mydomain.com.  The problem was with regards to the web portal (the main reason I have the SSL cert is for the web portal, most all recent browsers support server name identification). If I put the wildcard at the domain level, then the server would utilize it when accessing xxx.yyy.mydomain.com.  Technically it should not, and only match yyy.mydomain.com, and therefore it would not get to the server level traditional cert of xxx.yyy.mydomain.com that I needed to put there in the default position for phones that do not support server name identification.  So the solution I found was to put the traditional cert at both the domain, and server level, and the wildcard only at the domain level, and everything worked fine. 

    This should not pose much of an issue since very few customers require SIPS/SRTP, so by the time I get another customer that requires it, chances are their phones will support server name identification, or I will have filled the server up, and be on to the next one.

    This does lead to a potential feature request.  If a domain could be bound to both a specific IP and port, then you could bind a certificate to the domain.  This would make for a much more granular approach.  It would also make sense to be able to select certs separately for HTTP versus SIP access

  5. I am referring to a username/password that can be used on all phones in the domain to download their config, that would be a great feature for a future version, and make me more likely to utilize the built in provisioning of the PBX instead of hand writing config files, and hosting them on a separate server.

  6. Is there a way to create a username/password per domain that will allow downloading of config files?  Right now only the extension web usernames/passwords seem to work, and while it is more secure, it would be much easier to have the option of a domain level username/password that would permit provisioning.

  7. I really do not care about bulk import of anything other than extensions, however not being able to preset all of the values of the extension is a big step backwards.  The number of steps required to click through all of the extensions, set intercom permissions, set park orbits, and enable/disable mailboxes after creation is a huge waste of time.  At first I was slightly upset by loosing the ability to create 10 extensions at once in the GUI, however it was more than made up for by the ability to set any extension parameter that I desired via CSV.  Now that option has been taken away, I feel like it is just a large step backwards.

  8. I am trying to utilize multiple certificates.  I have a wildcard certificate as the server certificate.  I have a regular certificate as well that I have uploaded as a domain certificate.  When using the web portal, the system seems to always utilize the proper certificate for what I am accessing.  The problem is when I have a phone trying to register to a specific domain, the system does not utilize the certificate that matches the domain I am trying to register to, it is utilizing the wildcard certificate instead.  Since the phone does not like the wildcard certificate, the registration fails.

    My current setup is version 58.3

    Polycom VVX 410 firmware version 5.60

×
×
  • Create New...