Registering LDAP Servers
 |
|
If an LDAP server is implemented in the network, you can search the server for e-mail addresses, and then specify them as destinations or register them in the Address Book. Note also that if send function authentication (LDAP Server Authentication (imageRUNNER 2206N / 2006N)) is enabled, you must register the server used for authentication. You can register a maximum of five LDAP servers each for searching and for authentication to the machine. Register LDAP servers via the Remote UI.
|
 |
|
For information about LDAP servers that are supported by the machine, see Management Functions and System Environment.
|
1
Start the Remote UI and log on in System Manager Mode. Starting Remote UI
2
Click [Settings/Registration].
3
Click [Network Settings] 
[LDAP Server Settings].
[LDAP Server Settings].
4
Click [Register New Server] for [LDAP Server (For Search)] or [LDAP Server (For Authentication)].
LDAP server registration is separated, with registration either for searching or for authentication. To use an LDAP server for searching for e-mail destinations, register it for searching, and to use it for authenticating sending of scans, register it for authenticating.
To edit registered server information
Click a text link under [Server Name] for the edit screen.
To delete registered server information
Click [Delete] on the right of the server name you want to delete click [OK].
click [OK].5
Register the LDAP server.
Register the server used for searches
Register the server for searching for e-mail destinations.
[Server Name]
Enter up to 24 characters for identifying the LDAP server.
Enter up to 24 characters for identifying the LDAP server.
[Server Address]
Enter the IP address of the LDAP server or enter up to 47 alphanumeric characters for the host name of the server (example: ldap.example.com).
Enter the IP address of the LDAP server or enter up to 47 alphanumeric characters for the host name of the server (example: ldap.example.com).
 [Server Address] and DNS
To prevent errors from occurring when searching for destinations, make sure to check the following:
|
|
If the host name is entered for [Server Address], make sure that a DNS server is available in the network.
If the IP address is entered for [Server Address], check whether the DNS server supports only forward lookup. If the server supports only forward lookup, select [Do Not Use] or [Use] for [Login Information]. If you select [Use (Security Authentication)], make sure that the DNS server supports reverse lookup.
|
[Position to Start Search]
Specify the node in the directory information tree (DIT) that you want to start search from. Leaving the text box blank sets the machine to start search from an arbitrary node selected automatically.
Specify the node in the directory information tree (DIT) that you want to start search from. Leaving the text box blank sets the machine to start search from an arbitrary node selected automatically.
Depending on the type of characters used, up to 120 characters can be entered.
When specifying the node, enter "DC=", followed by a host name (a dot-delimited character string in the Active Directory domain name), and separate each of the entries with a comma. If the domain name is "john.example.com", for example, enter "DC=john,DC=example,DC=com."
[Use TLS]
Select the check box to encrypt communication with the LDAP server using TLS.
Select the check box to encrypt communication with the LDAP server using TLS.
|
This is enabled only when [Use] or [Use (Security Authentication)] is selected in [Login Information].
|
[Port Number]
Enter the port number used for communicating with the LDAP server.
Enter the port number used for communicating with the LDAP server.
[Search Timeout]
Specify how long the machine searches. Enter between 30 and 300 seconds.
Specify how long the machine searches. Enter between 30 and 300 seconds.
[Login Information]
Select [Do Not Use], [Use], or [Use (Security Authentication)] depending on the type of authentication implemented by the LDAP server. When [Use] or [Use (Security Authentication)] is selected, the user name and password must be specified.
Select [Do Not Use], [Use], or [Use (Security Authentication)] depending on the type of authentication implemented by the LDAP server. When [Use] or [Use (Security Authentication)] is selected, the user name and password must be specified.
|
[Do Not Use]
|
Select not to authenticate the machine using the login information.
|
|
[Use]
|
Select to authenticate the machine using the login information.
|
|
[Use (Security Authentication)]
|
Select to use data obtained by Kerberos, a network authentication protocol, for the authentication password. If this setting is selected, the clock of the machine needs to be synchronized with that of the LDAP server.
|
[Display Authentication Screen When Searching]
Select the check box to require the user to enter the user name and password when a search is requested. If the [Use Same Authentication Information as When Send Operation Started] check box is selected, the user name and password used for authentication when sending scans are also used here. If the check box is cleared, authentication is carried out using the information entered in [User Name] and [Password].
Select the check box to require the user to enter the user name and password when a search is requested. If the [Use Same Authentication Information as When Send Operation Started] check box is selected, the user name and password used for authentication when sending scans are also used here. If the check box is cleared, authentication is carried out using the information entered in [User Name] and [Password].
[Use Same Authentication Information as When Send Operation Started]
Set whether the authentication information when the scan function was used is also used when searching. This check box is normally displayed selected; however, it is only valid when the [Display Authentication Screen When Searching] check box is selected.
Set whether the authentication information when the scan function was used is also used when searching. This check box is normally displayed selected; however, it is only valid when the [Display Authentication Screen When Searching] check box is selected.
[User Name]
Enter the user name of the machine that was registered to the LDAP server. Depending on the type of characters used, up to 120 characters can be entered.
Enter the user name of the machine that was registered to the LDAP server. Depending on the type of characters used, up to 120 characters can be entered.
When [Use] is selected for [Login Information], enter the user name in the form "(domain name)\(user name)" (example: domain1\user1).
When [Use (Security Authentication)] is selected, enter the user name only (example: user1).
[Set/Change Password]
To specify or change the password, select the check box and enter up to 24 alphanumeric characters in the [Password] text box.
To specify or change the password, select the check box and enter up to 24 alphanumeric characters in the [Password] text box.
[Domain Name]
When [Use (Security Authentication)] is selected for [Login Information], enter up to 120 alphanumeric characters for the directory tree name in Active Directory (example: example.com).
When [Use (Security Authentication)] is selected for [Login Information], enter up to 120 alphanumeric characters for the directory tree name in Active Directory (example: example.com).
[Confirm TLS Certificate for LDAP Server Access]
Select the check box to verify the certificate when encrypting communication with the LDAP server using TLS. Also, select the [Add CN to Verification Items] check box as necessary.
Select the check box to verify the certificate when encrypting communication with the LDAP server using TLS. Also, select the [Add CN to Verification Items] check box as necessary.
Registering the authentication server
If the use of the scan function is restricted, register the server used for authentication.
[Server Name]
Enter up to 24 characters for identifying the LDAP server.
Enter up to 24 characters for identifying the LDAP server.
[Server Address]
Enter the IP address of the LDAP server or enter up to 47 alphanumeric characters for the host name of the server (example: ldap.example.com).
Enter the IP address of the LDAP server or enter up to 47 alphanumeric characters for the host name of the server (example: ldap.example.com).
|
[Server Address] and DNS
To prevent errors from occurring when searching for destinations, make sure to check the following:
|
|
If the host name is entered for [Server Address], make sure that a DNS server is available in the network.
If the IP address is entered for [Server Address], check whether the DNS server supports only forward lookup. If the server supports only forward lookup, select [Use] for [Login Information]. If you select [Use (Security Authentication)], make sure that the DNS server supports reverse lookup.
|
[Position to Start Search]
Specify the node in the directory information tree (DIT) that you want to start search from. Leaving the text box blank sets the machine to start search from an arbitrary node selected automatically.
Specify the node in the directory information tree (DIT) that you want to start search from. Leaving the text box blank sets the machine to start search from an arbitrary node selected automatically.
Depending on the type of characters used, up to 120 characters can be entered.
When specifying the node, enter "DC=", followed by a host name (a dot-delimited character string in the Active Directory domain name), and separate each of the entries with a comma. If the domain name is "john.example.com", for example, enter "DC=john,DC=example,DC=com."
[Use TLS]
Select the check box to encrypt communication with the LDAP server using TLS.
Select the check box to encrypt communication with the LDAP server using TLS.
|
This is enabled only when [Use] is selected in [Login Information].
|
[Port Number]
Enter the port number used for communicating with the LDAP server.
Enter the port number used for communicating with the LDAP server.
[Authentication/Attribute Acquisition Timeout]
Specify how long authentication and attribute acquisition can continue in a range from 15 to 150 seconds.
Specify how long authentication and attribute acquisition can continue in a range from 15 to 150 seconds.
[User Name Attribute]
Enter the attribute name, to be compared with a user name entered during authentication, of up to 64 alphanumeric characters (Example: "sAMAccountName").
Enter the attribute name, to be compared with a user name entered during authentication, of up to 64 alphanumeric characters (Example: "sAMAccountName").
|
No entry is required when [Use (Security Authentication)] is selected in [Login Information].
|
[E-Mail Address Attribute]
Enter the attribute name, to be used for obtaining an e-mail address from the authentication server, of up to 64 alphanumeric characters (Example: "mail").
Enter the attribute name, to be used for obtaining an e-mail address from the authentication server, of up to 64 alphanumeric characters (Example: "mail").
[Login Information]
Select [Use] or [Use (Security Authentication)] depending on the type of authentication implemented by the LDAP server.
Select [Use] or [Use (Security Authentication)] depending on the type of authentication implemented by the LDAP server.
|
[Use]
|
Select to authenticate the machine using the System Manager ID.
|
|
[Use (Security Authentication)]
|
Select to use data obtained by Kerberos, a network authentication protocol, for the authentication password. If this setting is selected, the clock of the machine needs to be synchronized with that of the LDAP server.
|
[Use System Manager ID]
If [Use] is selected in [Login Information], this specifies whether authentication using the system manager ID is used. To use the system manager ID, select the check box and specify the user name and password for used for authentication. If you deselect this check box, login is anonymous (no user name).
If [Use] is selected in [Login Information], this specifies whether authentication using the system manager ID is used. To use the system manager ID, select the check box and specify the user name and password for used for authentication. If you deselect this check box, login is anonymous (no user name).
[User Name]
Enter the user name of the machine that was registered to the LDAP server in the form "(domain name)\(user name)" (example: domain1\user1). Depending on the type of characters used, up to 120 characters can be entered.
Enter the user name of the machine that was registered to the LDAP server in the form "(domain name)\(user name)" (example: domain1\user1). Depending on the type of characters used, up to 120 characters can be entered.
[Set/Change Password]
To specify or change the password, select the check box and enter up to 24 alphanumeric characters in the [Password] text box.
To specify or change the password, select the check box and enter up to 24 alphanumeric characters in the [Password] text box.
[Domain Name]
When [Use (Security Authentication)] is selected for [Login Information], enter up to 120 alphanumeric characters for the directory tree name in Active Directory (example: example.com).
When [Use (Security Authentication)] is selected for [Login Information], enter up to 120 alphanumeric characters for the directory tree name in Active Directory (example: example.com).
[Confirm TLS Certificate for LDAP Server Access]
Select the check box to verify the certificate when encrypting communication with the LDAP server using TLS. Also, select the [Add CN to Verification Items] check box as necessary.
Select the check box to verify the certificate when encrypting communication with the LDAP server using TLS. Also, select the [Add CN to Verification Items] check box as necessary.
6
Click [OK].