Lexmark X864 PKI-Enabled Device Installation and Configuration Guide - Page 25

LDAP lookups fail almost immediately

Page 25 highlights

REVERSE DNS LOOKUPS ARE DISABLED ON THE NETWORK The printer uses reverse DNS lookups to verify IP addresses. If reverse lookup is disabled on the network: 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 Select Disable Reverse DNS Lookups. 3 Click Apply. LDAP REFERRALS ARE ENABLED 1 From the Embedded Web Server, click Settings > Embedded Solutions > PKI Authentication > Configure. 2 Select Disable LDAP Referrals. Note: Leaving LDAP referrals enabled can increase LDAP search times. 3 Click Apply. THE LDAP SEARCH BASE IS TOO BROAD IN SCOPE Narrow the LDAP search base to the lowest possible scope that will include all necessary users. LDAP lookups fail almost immediately This normally occurs during address book searches, user E-mail address searches, or user home directory searches. THE ADDRESS BOOK SETUP CONTAINS AN IP ADDRESS FOR THE LDAP SERVER 1 From the Embedded Web Server, click Settings > Network/Ports > Address Book Setup. 2 Verify that the Server Address has been entered as the hostname (not the IP address), of the LDAP server. 3 Click Submit to save any needed changes. PORT 389 IS BEING USED, BUT THE LDAP SERVER REQUIRES SSL 1 From the Embedded Web Server, click Settings > Network/Ports > Address Book Setup. 2 Verify or adjust the following settings: • Server Port-Should be 636. • Use SSL/TLS-Select SSL/TLS. • LDAP Certificate Verification-Select Never. 3 Click Submit to save any needed changes. THE LDAP SEARCH BASE IS INCORRECT Narrow the LDAP search base to the lowest possible scope that will include all necessary users. THE LDAP ATTRIBUTE BEING SEARCHED FOR IS NOT CORRECT Verify that the LDAP attributes for the user's E-mail address and/or home directory are correct. Troubleshooting 25

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38

R
EVERSE
DNS
LOOKUPS
ARE
DISABLED
ON
THE
NETWORK
The printer uses reverse DNS lookups to verify IP addresses. If reverse lookup is disabled on the network:
1
From the Embedded Web Server, click
Settings
>
Embedded Solutions
>
PKI Authentication
>
Configure
.
2
Select
Disable Reverse DNS Lookups
.
3
Click
Apply
.
LDAP R
EFERRALS
ARE
ENABLED
1
From the Embedded Web Server, click
Settings
>
Embedded Solutions
>
PKI Authentication
>
Configure
.
2
Select
Disable LDAP Referrals
.
Note:
Leaving LDAP referrals enabled can increase LDAP search times.
3
Click
Apply
.
T
HE
LDAP
SEARCH
BASE
IS
TOO
BROAD
IN
SCOPE
Narrow the LDAP search base to the lowest possible scope that will include all necessary users.
LDAP lookups fail almost immediately
This normally occurs during address book searches, user E-mail address searches, or user home directory searches.
T
HE
A
DDRESS
B
OOK
S
ETUP
CONTAINS
AN
IP
ADDRESS
FOR
THE
LDAP
SERVER
1
From the Embedded Web Server, click
Settings
>
Network/Ports
>
Address Book Setup
.
2
Verify that the Server Address has been entered as the hostname (not the IP address), of the LDAP server.
3
Click
Submit
to save any needed changes.
P
ORT
389
IS
BEING
USED
,
BUT
THE
LDAP
SERVER
REQUIRES
SSL
1
From the Embedded Web Server, click
Settings
>
Network/Ports
>
Address Book Setup
.
2
Verify or adjust the following settings:
Server Port
—Should be 636.
Use SSL/TLS
—Select
SSL/TLS
.
LDAP Certificate Verification
—Select
Never
.
3
Click
Submit
to save any needed changes.
T
HE
LDAP
SEARCH
BASE
IS
INCORRECT
Narrow the LDAP search base to the lowest possible scope that will include all necessary users.
T
HE
LDAP
ATTRIBUTE
BEING
SEARCHED
FOR
IS
NOT
CORRECT
Verify that the LDAP attributes for the user's E-mail address and/or home directory are correct.
Troubleshooting
25