Registering the LDAP server

Press [Administrator Tools] on the [System Settings] screen.

For details about how to access the [System Settings] screen, see Displaying the Printer Configuration Screens Using the Control Panel.

Press [] to display [Program/Change/Delete LDAP Server].

Press [Program/Change/Delete LDAP Server].

Press [Program/Change].

Select the LDAP server you want to program or change.

When programming a new server, select [*Not Programmed].

Press [Name].

Enter the name, and then press [OK].

Press [Server Name].

Enter the server name, and then press [OK].

Enter either the host name or IPv4 Address of the LDAP server within 128 characters.

Press [Search Base].

Select a root folder to start a search. E-mail addresses registered in the selected folder are search targets.

Enter the search base, and then press [OK].

For example, if the search target is the sales department of ABC company, enter "dc=sales department, o=ABC". (In this example, the description is for an active directory. "dc" is for the organization unit, and "o" is for the company.)

Search base registration may be required depending on your server environment. When the registration is required, unspecified searches will result in error.

Check your server environment and enter any required specifications.

Press [Port Number], and then press [Change].

Specify a port number for communicating with the LDAP server. The port must be compliant with your environment.

Enter the port number using the number keys, and then press the [] key.

Press [Use Secure Connection (SSL)], and then press [On].

Use SSL to communicate with the LDAP server.

For SSL to function, the LDAP server must support SSL.

If you set SSL to [On], the port number automatically changes to "636".

If you do not enable SSL, security problems may occur. To enable SSL, you must use the printer's settings. For details, see Security Guide.

Press [].

Press [Authentication], and then press [On].

If you selected [Off], proceed to step 25.

Press [Authentication], and then select an authentication method.

To make a search request to the LDAP server, the administrator account can be used for authentication.

Authentication settings must comply with your server's authentication settings. Check your server settings before setting this printer.

• [Kerberos Authentication]

  A password protected with encryption is sent to the KDC server where authentication is performed.

• [Digest Authentication]

  A password protected with encryption is sent to the LDAP server.

  Digest Authentication is only available with LDAP version 3.0.

• [Cleartext Authentication]

  A password without encryption is sent to the LDAP server.

Press [Name] under [Authentication].

When [Kerberos Authentication], [Digest Authentication], or [Cleartext Authentication] is selected for the authentication setting, the administrator account name and password can be used. Do not enter the administrator account name and password when using authentication for each individual or each search.

Enter the user name, and then press [OK].

Procedures for the user name setting differ depending on the server environment. Check your server environment before making the setting.

Example: Domain Name\User Name, User Name@Domain Name, CN=Name, OU=Department Name, DC=Server Name

Press [] to display [Password].

Press [Password].

Enter the password, and then press [OK].

The user name and password are required for administrator authentication to access the LDAP server.

You can connect to the LDAP server using a user name and password stored in the Address Book. For details, see LDAP authentication.

If you select [Digest Authentication] or [Cleartext Authentication], proceed to step 25.

If you have selected [Kerberos Authentication] in Step 17, press [Realm Name], and then select the realm.

Press [OK].

Press [Connection Test].

Access the LDAP server to check that the proper connection is established. Check that authentication works according to the authentication settings.

Press [Exit].

If the connection test fails, check your settings and try again.

This function does not check search conditions or the search base.

Press [OK].

Press [Search Conditions] for items you want to use as search conditions from the following: [Name], [Email Address], [Company Name], and [Department Name].

You can enter an attribute as a typical search keyword. Using the entered attributes, the function searches the LDAP server's Address Book.

Enter the attributes you want to use when searching for e-mail addresses, and then press [OK].

Each attribute must be within 64 characters.

The attribute value may change depending on the server environment. Check that the attribute value complies with your server environment before setting it.

You can leave items blank, but you cannot leave attributes blank when searching for e-mail addresses from the LDAP server Address Book.

Press [OK].

Press [Search Options] if you want to create optional search conditions.

Enter the attribute you want to use when searching for e-mail addresses, and then press [OK].

The attribute value may change depending on the server environment. Check that the attribute complies with your server environment before setting it.

Press [Key Display].

Enter the key display, and then press [OK].

The registered "Key Display" appears as a keyword for searching LDAP.

The key does not appear on the search screen unless both "Attribute" and "Key Display" are registered. Make sure you register both to use the optional search.

Press [OK] twice.

Press [Exit].

Press the [User Tools] key.