Dell B3465dnf Mono Smart Card Authentication Client Administrators Guide - Page 25

Smart Card Authentication Client LDAP issues

Page 25 highlights

Troubleshooting 25 ADD THE USER'S GROUP TO THE AUTHORIZATION LIST FOR THE PRINTER Make sure the user's Active Directory group is listed in the Group Authorization List field in the application configuration settings. 1 Access the application configuration settings from the Embedded Web Server. 2 Under the Advanced Settings heading, add the user's Active Directory group to the Group Authorization List field. Separate multiple groups with a comma. 3 Click Apply. Smart Card Authentication Client LDAP issues LDAP lookups fail Try one or more of the following: MAKE SURE PORT 389 (NON‑SSL) AND PORT 636 (SSL) ARE NOT BLOCKED BY A FIREWALL The printer uses these ports to communicate with the LDAP server. The ports must be open for LDAP lookups to work. DISABLE REVERSE DNS LOOKUPS The printer uses reverse DNS lookups to verify IP addresses. If reverse DNS lookups are not used on your network, then do the following: On printers running the Embedded Solutions Framework (eSF) version 3.0 or later: 1 From the Embedded Web Server, click Settings > Security > Security Setup. 2 From Step 1 under the Advanced Security Setup heading, click Kerberos 5. 3 Under the Kerberos Settings heading, select Disable Reverse IP Lookups. 4 Click Submit. On printers running eSF version 2.0: 1 Access the application configuration settings from the Embedded Web Server. 2 Under the Advanced Settings heading, select Disable Reverse DNS Lookups. 3 Click Apply. Note: If you are unsure about which version of eSF your printer is running, then see "Checking which version of the Embedded Solutions Framework is installed on a printer" on page 28. IF THE LDAP SERVER REQUIRES SSL, THEN ENABLE SSL FOR LDAP LOOKUPS 1 Access the application configuration settings from the Embedded Web Server. 2 Under the Advanced Settings heading, select Use SSL for User Info. 3 Click Apply.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35

A
DD
THE
USER
S
GROUP
TO
THE
AUTHORIZATION
LIST
FOR
THE
PRINTER
Make sure the user’s Active Directory group is listed in the Group Authorization List field in the application
configuration settings.
1
Access the application configuration settings from the Embedded Web Server.
2
Under the Advanced Settings heading, add the user’s Active Directory group to the Group Authorization List field.
Separate multiple groups with a comma.
3
Click
Apply
.
Smart Card Authentication Client LDAP issues
LDAP lookups fail
Try one or more of the following:
M
AKE
SURE
P
ORT
389 (
NON
SSL)
AND
P
ORT
636 (SSL)
ARE
NOT
BLOCKED
BY
A
FIREWALL
The printer uses these ports to communicate with the LDAP server. The ports must be open for LDAP lookups to
work.
D
ISABLE
REVERSE
DNS
LOOKUPS
The printer uses reverse DNS lookups to verify IP addresses. If reverse DNS lookups are not used on your network,
then do the following:
On printers running the Embedded Solutions Framework (eSF) version 3.0 or later:
1
From the Embedded Web Server, click
Settings
>
Security
>
Security Setup
.
2
From Step 1 under the Advanced Security Setup heading, click
Kerberos 5
.
3
Under the Kerberos Settings heading, select
Disable Reverse IP Lookups
.
4
Click
Submit
.
On printers running eSF version 2.0:
1
Access the application configuration settings from the Embedded Web Server.
2
Under the Advanced Settings heading, select
Disable Reverse DNS Lookups
.
3
Click
Apply
.
Note:
If you are unsure about which version of eSF your printer is running, then see
“Checking which version of
the Embedded Solutions Framework is installed on a printer” on page
28
.
I
F
THE
LDAP
SERVER
REQUIRES
SSL,
THEN
ENABLE
SSL
FOR
LDAP
LOOKUPS
1
Access the application configuration settings from the Embedded Web Server.
2
Under the Advanced Settings heading, select
Use SSL for User Info
.
3
Click
Apply
.
Troubleshooting
25