Home » Ricoh Manuals » Laser Printers » Ricoh P C200W » Manual Viewer

Ricoh P C200W Embedded Web Server Administrator s Guide - Page 38

Using Kerberos

Add to My Manuals
Save this manual to your list of manuals

Page 38 highlights

Securing printers 38 y Search Attributes-Select LDAP attributes used as search filters. y Custom Attributes-Type LDAP custom attributes used as search filters. 5 Click Save and Verify. Editing or deleting LDAP or LDAP+GSSAPI login methods 1 From the Embedded Web Server, click Settings > Security > Login Methods. 2 From the Network Accounts section, click the LDAP or LDAP+GSSAPI login method. 3 Do either of the following: y To edit the login method, update the LDAP or LDAP+GSSAPI settings, and then click Save and Verify. y To delete login method, click Delete LDAP. Using Kerberos You can use this login method by itself or in conjunction with the LDAP+GSSAPI login method. Notes: y Only one Kerberos configuration file can be saved on the printer memory. This configuration file can apply to multiple realms and Kerberos Domain Controllers. y Uploading another configuration file or updating the Kerberos settings overwrites the saved configuration file. y If you want to delete a Kerberos file, then delete first the LDAP+GSSAPI login method that is using the file. y Administrators must anticipate the different types of authentication requests the Kerberos server might receive, and configure the configuration file to handle the requests. y Kerberos relies on an external server for authentication. If the server is down, then users are not able to access the printer using Kerberos. y To help prevent unauthorized access, log out from the printer after each session. Creating a Kerberos login method 1 From the Embedded Web Server, click Settings > Security > Login Methods. 2 From the Network Accounts section, click Add Login Method > Kerberos. 3 Do one of the following: Create a simple Kerberos configuration file From the Generate Simple Kerberos File section, configure the following: y KDC Address-Type the IP address or host name of the KDC IP. y KDC Port-Enter the port number used by the Kerberos server. y Realm-Type the realm used by the Kerberos server. The realm must be typed in uppercase. Import a Kerberos configuration file In the Import Kerberos File field, browse to the krb5.conf file.

Section	Page
RICOH M C240FW/P C200W <Embedded Web Server Administrator's Guide>	1
Contents	2
Overview	4
Supported printers	4
Supported web browsers	5
Accessing the Embedded Web Server	5
Parts of the Embedded Web Server	5
Understanding helper text	6
Managing printers	7
Checking the status of parts and supplies from the Embedded Web Server	7
Generating reports and logs	7
Conﬁguring supply notiﬁcations	8
Managing contacts	8
Adding contacts	8
Adding groups	9
Editing contacts or groups	9
Deleting contacts or groups	9
Scanning	10
Conﬁguring the scan settings	10
Configuring the copy settings	10
Configuring the e‑mail settings	11
Configuring the FTP settings	14
Configuring the flash drive settings	16
Creating a shortcut	18
Managing Scan Center destinations	18
Configuring a network destination	18
Configuring an e‑mail destination	19
Configuring a fax destination	19
Configuring a remote printer destination	19
Faxing	21
Configuring the fax settings	21
Setting the fax mode	21
Configuring analog fax	21
General Fax Settings	21
Fax Send Settings	21
Fax Receive Settings	23
Fax Cover Page	24
Fax Log Settings	24
Speaker Settings	24
Configuring the fax server	25
General Fax Settings	25
Fax Server E‑mail Settings	25
Fax Server Scan Settings	26
Networking	27
Configuring the HTTP/FTP Settings	27
Selecting the active network adapter	27
Connecting to a wireless network	28
Securing printers	29
Securing network connections	29
Configuring TCP/IP port access settings	29
Configuring IP Security settings	29
Configuring 802.1x authentication	30
Setting the restricted server list	31
Managing devices remotely	31
Using HTTPS for printer management	31
Setting up SNMP	31
Configuring SNMP versions 1 or 2c settings	31
Configuring SNMP version 3 settings	31
Configuring SNMP traps	32
Configuring security audit log settings	32
Updating firmware	33
Managing login methods	34
Restricting public access to functions, applications, printermanagement, and security options	34
Using local accounts	34
Creating local accounts	34
Editing and deleting local accounts	34
Creating local account groups	35
Editing or deleting local account groups	35
Using LDAP or LDAP+GSSAPI	35
Creating an LDAP or LDAP+GSSAPI login method	36
Editing or deleting LDAP or LDAP+GSSAPI login methods	38
Using Kerberos	38
Creating a Kerberos login method	38
Setting the date and time	39
Using Active Directory	40
Creating an Active Directory login method	40
Editing or deleting an Active Directory login method	40
Creating LDAP, LDAP+GSSAPI, or Active Directory groups	42
Editing or deleting LDAP, LDAP+GSSAPI, or Active Directory groups	42
Understanding access controls	43
Managing certificates	45
Configuring printer certificate defaults	45
Creating a printer certificate	45
Installing certificates manually	46
Installing certificates automatically	46
Viewing, downloading, and deleting a certificate	46
Managing other access functions	47
Scheduling access to USB devices	47
Setting login restrictions	47
Configuring confidential printing	47
Enabling solutions LDAP settings	48
Showing secured applications or functions on the home screen	48
Enabling print permission	49
Enabling the security reset jumper	49
Securing data	50
Configuring printer settings	50
Erasing printer memory	51
Erasing printer hard disk memory	52
Configuring printer hard disk encryption	52
Restoring factory default settings	52
Statement of Volatility	52
Troubleshooting	54
Login troubleshooting	54
User is locked out	54
Update the allowed number of login failures and lockout time	54
Reset or replace the smart card	54
User is logged out automatically	54
Increase the Screen Timeout value	54
User cannot access applications or functions	54
Make sure that the user is assigned to a group that has access to the applications and functions	54
KDC and MFP clocks are out of sync	54
Make sure that the date and time settings on the printer are correct	54
Domain controller certificate is not installed	55
Make sure that the correct certificate is installed on the printer	55
KDC is not responding within the required time	55
Make sure that the IP address or host name of the KDC is correct	55
Make sure that the KDC is available in the configuration file	55
Make sure that the server and firewall settings are configured to allow communication between the printerand the KDC server on port 88	55
LDAP troubleshooting	55
LDAP lookups fail	55
Make sure that the server and firewall settings are configured to allow communication between the printerand the LDAP server on port 389 and port 636	55
If reverse DNS lookup is not used in your network, then disable it in the Kerberos settings	55
If the LDAP server requires SSL, then enable SSL for LDAP lookups	55
Narrow the LDAP search base to the lowest possible scope that includes all necessary users	55
Make sure that all LDAP attributes that are being searched for are correct	55
Scanning problems	56
Cannot scan to the selected destination	56
Make sure that the destination is valid	56
If the printer and destination are in different domains, then make sure that the domain information isspecified	56
Make sure that the printer is connected to the network	56
Make sure that the user name and password are correct	56
Make sure that the user has permission to save scans to the destination	56
Make sure that a file with the default file name does not exist in the destination	56
Configure the firewall to allow communication with the subnet in which the printer is located	56
Make sure that the printer and destination have the same subnet	56
Make sure that the LDAP settings are configured properly in your printer setup and in the setup dialog	56
Contact your system administrator	56
License error	57
Contact your Ricoh representative	57
An error occurs when opening a secure PDF file	57
Make sure that the PDF version for the device is not set to A‑1a	57
Faxing problems	57
Cannot receive fax from one sender	57
Make sure that the sender used the correct fax number	57
Check if the fax has no caller ID and station name	57
Check if the sender fax number is not blocked	57
Generate fax logs and identify the status message	57
Cannot receive fax from all senders	57
Make sure that the printer is configured to receive faxes	57
If using a distinctive ring service, then confirm that the printer is configured properly to pick up the correctring pattern	58
Reduce the Max Receive speed	58
Check the fax forwarding setting	58
Make sure that no other phone number is competing with the printer	58
Generate fax logs and identify the status message	58
Cannot send fax to one destination	58
Make sure that you entered the correct fax number	58
Reduce the maximum send speed1 From the Embedded Web Server,	58
Generate fax logs and identify the status message	59
Cannot send to all fax destinations	59
Make sure that the printer is not configured for Fax Server mode	59
Make sure that the printer is configured to send faxes	59
Check if you are using a PABX telephone system	59
Check if you have entered the proper dialing prefix	59
Reduce the Max Send speed	59
Make sure that you have entered a station ID and station number	59
Generate fax logs and identify the status message	60
Networking problems	60
Printer is not communicating on the network	60
Check the network status	60
Check the printer port access	60
Check the Restricted Server List	60
Make sure that communication is not blocked by a firewall or workplace VPN	60
Notices	61
Edition notice	61
GOVERNMENT END USERS	61
Trademarks	61
GifEncoder	62
ZXing 1.7	62
Apache License Version 2.0, January 2004	62

Match case Limit results 1 per page

Securing printers

Search Attributes—

Select LDAP attributes used as search filters.

Custom Attributes—

Type LDAP custom attributes used as search filters.

Click

Save and Verify

Editing or deleting LDAP or LDAP+GSSAPI login methods

From the Embedded Web Server, click

Settings

Security

From the Network Accounts section, click the LDAP or LDAP+GSSAPI login method.

Do either of the following:

To edit the login method, update the LDAP or LDAP+GSSAPI settings, and then click

Save and Verify

To delete login method, click

Delete LDAP

Using Kerberos

You can use this login method by itself or in conjunction with the LDAP+GSSAPI login method.

Notes:

Only one Kerberos configuration file can be saved on the printer memory. This configuration file can apply to

multiple realms and Kerberos Domain Controllers.

Uploading another configuration file or updating the Kerberos settings overwrites the saved configuration file.

If you want to delete a Kerberos file, then delete first the LDAP+GSSAPI login method that is using the file.

Administrators must anticipate the different types of authentication requests the Kerberos server might

receive, and configure the configuration file to handle the requests.

Kerberos relies on an external server for authentication. If the server is down, then users are not able to

access the printer using Kerberos.

To help prevent unauthorized access, log out from the printer after each session.

Creating a Kerberos login method

From the Embedded Web Server, click

Settings

Security

From the Network Accounts section, click

Add Login Method

Kerberos

Do one of the following:

Create a simple Kerberos configuration file

From the Generate Simple Kerberos File section, configure the following:

KDC Address—

Type the IP address or host name of the KDC IP.

KDC Port—

Enter the port number used by the Kerberos server.

Realm—

Type the realm used by the Kerberos server. The realm must be typed in uppercase.

Import a Kerberos configuration file

In the Import Kerberos File field, browse to the krb5.conf file.