Checklist for configuring LDAP discovery using DNS SRV records

Last Updated : Jun 10, 2026 |

The following checklist lists the configuration tasks you must perform to set up LDAP discovery using DNS SRV records.

No.

Task

Notes

1

If you use the secure LDAP connection, ensure that the Subject Alternative Name of the LDAP certificate contains FQDNs of all LDAP server instances that must be discoverable using SRV lookup.

You can use the following openssl command in the CLI to verify the certificate content:
openssl s_client -connect <ldap server:port> | openssl x509 -noout -text
If the Subject Alternative Name does not contain the required FQDNs, reissue the LDAP certificate.

2

Ensure that the /etc/resolv.conf file contains the appropriate domain name and DNS server addresses.

Ensure that the /etc/resolv.conf file contains the following information:

  • The name of the domain, for which Avaya Aura® Device Services must perform LDAP server discovery using DNS SRV records.

  • The list of DNS servers containing DNS SRV records for the LDAP servers.

For example, if you want to use DNS SRV records to discover LDAP servers for the example.com domain and use DNS servers with 198.51.100.2 and 203.0.113.5 IP addresses, the /etc/resolv.conf file might look as follows:

search example.com
nameserver 198.51.100.2
nameserver 203.0.113.5

3

Configure SRV records for LDAP server instances on DNS servers.

On DNS servers listed in the /etc/resolv.conf file, you must create a separate SRV record for each LDAP server instance that must be discoverable.

For more information about DNS SRV records, see DNS SRV record overview. For more information about configuring an SRV record on a DNS server, see the documentation for the DNS server you use in your deployment.

4

Configure LDAP server settings on the Avaya Aura® Device Services web administration portal.

See Configuring LDAP server discovery using DNS SRV records.