1. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions How TSAPI works with SDB Yanli

2. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 2 3 classes of Users on AE Services: AE Services Management Console Administrators This is used to manage the AES service, the administrator is authenticated against the Linux platform or Enterprise Directory (Active Directory, Domino, OpenLDAP, etc…) using the LDAP or LDAP-S (Secure LDAP) protocol User Management Administrators----provided via OAM This is used to manage all AE Services users (add, change or delete users). Client Application Users This is used to authenticated the applications which using TSAPI, JTAPI, DMCC and Telephony Web Service applications.

3. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 3 AE Service Management Console Administrator Accounts The appropriate role names are System Administrator, Security Administrator, Auditor, Maintenance, and Backup Restore. RoleLinux Group System_AdministratorSusers Security_AdministratorSecurityadmin Administrative role for User ManagementNot associated with Linux( the local LDAP data store). Auditorusers Backup_RestoreBackuprestore Avaya_MaintenanceAvayamaint

4. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 4 User Management Administrator Accounts User Management Administrators are authenticated against a Local LDAP store on the AE Server. 2 defaut accounts: craft and avaya A User Administrator must have the userservice.useradmin role set.

5. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 5 Client Application User Accounts(Usage of the Security Database) The AE Services TSAPI, JTAPI, Telephony Web Service and DMCC each authenticate a connecting client application and authorize the control of devices by the client application. For a CTI user which is associated with the client application: - Authenticated by LDAP -Authorized by SDB

6. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 6 User Management Administration AE Services users are authenticated by AE Services User Management (as opposed to Linux). User Management is the default user database that AE Services uses for user authentication (validating a user’s identity).

7. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 7 LDAP 2 methods to reach the user list: 1. Execute the command below to check the user list: ldapsearch -x -D "cn=Manager,dc=avaya,dc=com" –W Where the password is passw0rd 2. AE Services Management Console->User Management ->User Admin->List All Users

8. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 8 What’s SDB The Application Enablement Services (AE Services) Security Database (SDB) provides the ability to control a user’s access privileges. The SDB stores information about Computer Telephony (CT) users and the devices they control. The DMCC service, the TSAPI service, and Telephony Web Services use this information for permission checking.

9. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 9 SDB control Enabling the Security Database-TSAPI, JTAPI and Telephony Web Service Enable SDB for DMCC Service

10. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 10 Access Rights Options

11. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 11 Security Database objects Tlinks ： TSAPI links (Tlinks) are service identifiers (names) dynamically created by the TSAPI service. Tlink groups ： A Tlink group is a name you assign to one or more Tlinks. Devices ： A device can be a telephone, a fax machine, a modem, an ACD, a VDN, or an agent ID that CM controls. Device groups ： A device group refers to the name of a group and the devices that make up the group. Worktops ： A worktop refers to a collection of devices. CTI Users ： A CTI user is a person (or an application) administered as a CT user in the AE Services User Management database who logs in and uses the TSAPI service. Some additional TSAPI tests about these concepts in Slide 17 to 21

12. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 12 Security Database objects Relationship ① A CTI User can control a Device Group. ② A Device Group is composed of one or more devices. ③ A CTI User can control a Device via a Tlink which belongs to a Tlink Group. ④ A Tlink Group is composed of one or more Tlinks. ⑤ A device should be given a tlink group over which the requests from clients can be accepted.

13. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 13 SDB control test

14. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 14 SDB control for TSAPI enabled

15. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 15 SDB control for TSAPI disabled

16. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 16 SDB control for TSAPI ---- Tlinks, Tlike Group, Device and Device group

17. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 17 SDB control for TSAPI ---- Tlinks, Tlike Group, Device and Device group

18. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 18 SDB control for TSAPI ---- Tlinks, Tlike Group, Device and Device group

19. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 19 SDB control for TSAPI ---- Tlinks, Tlike Group, Device and Device group

20. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 20 SDB control for TSAPI ---- Tlinks, Tlike Group, Device and Device group Summarize When you associate a device with a Tlink group, a user can issue call control requests only for the device on a Tlink in the Tlink group.

21. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 21 SDB control for DMCC disabled

22. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 22 SDB control for DMCC enabled

23. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 23 DMCC applications and SDB authorization These enhancements allow a DMCC application to do the following: Get a list of the devices that are associated with a session Transfer devices from one session to another session Share the control of a devices among multiple sessions Some additional DMCC tests about these contents in Slide 24 to 33

24. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 24 Some other SDB control tests for DMCC Get a list of the devices that are associated with a session STEP1 ：

25. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 25 Some other SDB control tests for DMCC Get a list of the devices that are associated with a session STEP2 ：

26. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 26 Some other SDB control tests for DMCC Get a list of the devices that are associated with a session STEP3 ： Output: 4721:switch:0.0.0.0:0 2034:switch:0.0.0.0:0

27. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 27 Some other SDB control tests for DMCC Transfer devices from one session to another session STEP1:

28. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 28 Some other SDB control tests for DMCC Transfer devices from one session to another session STEP2:

29. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 29 Some other SDB control tests for DMCC Transfer devices from one session to another session STEP3: Result:

30. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 30 Some other SDB control tests for DMCC Share the control of a devices among multiple sessions STEP1:

31. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 31 Some other SDB control tests for DMCC Share the control of a devices among multiple sessions STEP2:

32. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 32 Some other SDB control tests for DMCC Share the control of a devices among multiple sessions STEP3:

33. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 33 Some other SDB control tests for DMCC Share the control of a devices among multiple sessions Result:

34. Copyright© 2003 Avaya Inc. All rights reserved Avaya – Proprietary Use pursuant to Company instructions 34 END Thank you!