Lexmark X925 Lexmark Document Distributor - Page 44

Enabling LDAP server authentication for LMC, Example

Get Lexmark X925 PDF manuals and user guides View all Lexmark X925 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 44 highlights

4 Re-type the new password to confirm it. 5 Click Apply. Enabling LDAP server authentication for LMC The administrator can set up a connection with an LDAP server to authenticate user names and passwords other than those for the administrator account. 1 Select LDAP Setup from the System list. 2 Select the Enable LDAP Authentication check box. 3 If your LDAP server requires a secure connection, select Use Secure Connection (SSL/TLS). 4 Type the LDAP Server Address and Server Port. Note: Port 389 is typically used for non-secure communication, and port 636 is typically used for secure communication. 5 Beside Search Base, type the distinguished name where the directory search should begin, such as o=MyOrganization. 6 Beside User Search Filter, type the attribute used in the directory to identify a user name, such as cn, sn, uid, or sAMAccountName. 7 Beside User Search Base, type the relative distinguished name where a Subtree search for a user should begin in the directory, such as ou=Employees. 8 To filter the search to users in specific groups that use the groupOfNames or groupOfUniqueNames object class: a Beside Group Search Filter, type the attribute used to identify a member of the group, such as member or uniquemember. b Beside Group Search Base, type the relative distinguished name where a Subtree search should begin in the directory for groups, such as ou=Groups. c Beside Member of Groups(s), type a comma-delimited list of group names to search. The user name must be a member of at least one of the groups listed. Example • Search Base: o=MyOrganization • User Search Filter: uid • User Search Base: ou=Employees • Group Search Filter: uniquemember • Group Search Base: ou=Groups • Member of Group(s): Dept A,Dept C If the user name testuser is used to log on to LMC, the user can be authenticated if each of the following is true: - The distinguished name uid=testuser,ou=Employees,o=MyOrganization is found in the directory. - The distinguished name cn=Dept A,ou=Groups,o=MyOrganization or cn=Dept C,ou=Groups,o=MyOrganization is found in the directory and contains the attribute uniquemember: uid=testuser,ou=Employees,o=MyOrganization. Monitoring and maintaining the system 44

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
4
Re-type the new password to confirm it.
5
Click
Apply
.
Enabling LDAP server authentication for LMC
The administrator can set up a connection with an LDAP server to authenticate user names and passwords other
than those for the administrator account.
1
Select
LDAP Setup
from the System list.
2
Select the
Enable LDAP Authentication
check box.
3
If your LDAP server requires a secure connection, select
Use Secure Connection (SSL/TLS)
.
4
Type the LDAP Server Address and Server Port.
Note:
Port 389 is typically used for non-secure communication, and port 636 is typically used for secure
communication.
5
Beside Search Base, type the distinguished name where the directory search should begin, such as
o=MyOrganization
.
6
Beside User Search Filter, type the attribute used in the directory to identify a user name, such as
cn
,
sn
,
uid
, or
sAMAccountName
.
7
Beside User Search Base, type the relative distinguished name where a Subtree search for a user should begin in
the directory, such as
ou=Employees
.
8
To filter the search to users in specific groups that use the groupOfNames or groupOfUniqueNames object class:
a
Beside Group Search Filter, type the attribute used to identify a member of the group, such as
member
or
uniquemember
.
b
Beside Group Search Base, type the relative distinguished name where a Subtree search should begin in the
directory for groups, such as
ou=Groups
.
c
Beside Member of Groups(s), type a comma-delimited list of group names to search. The user name must be
a member of at least one of the groups listed.
Example
•
Search Base:
o=MyOrganization
•
User Search Filter:
uid
•
User Search Base:
ou=Employees
•
Group Search Filter:
uniquemember
•
Group Search Base:
ou=Groups
•
Member of Group(s):
Dept A,Dept C
If the user name
testuser
is used to log on to LMC, the user can be authenticated if each of the following
is true:
–
The distinguished name
uid=testuser,ou=Employees,o=MyOrganization
is found in the
directory.
–
The distinguished name
cn=Dept A,ou=Groups,o=MyOrganization
or
cn=Dept C,ou=Groups,o=MyOrganization
is found in the directory and contains the
attribute
uniquemember: uid=testuser,ou=Employees,o=MyOrganization
.
Monitoring and maintaining the system
44