[Setting Up Ldap] - Konica Minolta AU-211P User Manual

3.3 Address Search (LDAP) Using PKI card

[Setting Up LDAP]

Register the LDAP server used to search for a destination.
Select [Utility] - [Administrator] - [Network] - [LDAP Setting] - [LDAP Setting] - Select any list in the server
list. - [Edit], and configure the following settings.
Item
[LDAP Server Name]
[Server Address]
[Port No.]
[Enable SSL]
[Certificate Verification Level
Settings]
[Search Base]
[Timeout]
[Max.Search Results]
[General Settings]
[Use Referral]
[Search Condition Attrib-
utes]
[Search]
[Initial Setting for Search De-
tails]
AU-211P
Description
Enter the name of the LDAP server (using up to 32 characters).
Enter the LDAP server address.
When specifying the host name instead of the address, select the [Please
check to enter host name.] check box.
If necessary, change the LDAP server port number (default: [389]).
When using SSL communications, set this option to ON (default: OFF).
• [Port No.(SSL)]: Change the port number for SSL communication as
needed (default: [636]).
To verify the certificate for SSL communication, select items to be veri-
fied.
• [Expiration Date]: Confirm whether the certificate is within the validity
period (default: ON).
• [CN]: Confirm whether CN (Common Name) of the certificate matches
the server address (default: OFF).
• [Key Usage]: Confirm whether the certificate is used according to the
intended purpose approved by the certificate issuer (default: OFF).
• [Chain]: Confirm whether there is a problem in the certificate chain
(certificate path) (default: OFF). The chain is validated by referencing
the external certificates managed on the MFP.
• [Expiration Date Confirmation]: Confirm whether the certificate has
expired (default: OFF). The expiration date confirmation is performed
in the order of OCSP (Online Certificate Status Protocol) service, and
CRL (Certificate Revocation List).
Specify the starting point to search for a destination (using up to 255
characters).
The range from the entered starting point, including the following tree
structure, is searched.
If necessary, change the time-out time to limit a communication with the
LDAP server (default: [60] sec.).
Change the maximum number of destinations to be displayed as search
results, if necessary (default: [100] destinations).
Select the authentication method to log in to the LDAP server depending
on your environment (default: [anonymous]).
• [Domain Name]: If [GSS-SPNEGO] is selected for [General Settings],
enter the domain name of Active Directory (using up to 64 characters).
Select whether to use the referral function (default: [ON]).
Select attributes to be specified when performing the LDAP search (de-
fault: [Name]). The setting can be switched between [Name] (cn) and
[Nickname] (displayName).
Select whether to display candidate destinations when entering a part of
the name to perform LDAP search (default: [OFF]).
Specify the default LDAP search conditions for each item (default: [OR]).
• [Search Attributes Authentication]: This setting is not available.
[Search Attribute]: This setting is not available.
3
3-6