Lexmark Color Laser Installation And Administration Manual page 31

5
From the General Information screen, select General Information, and then adjust the following settings as
needed:
• Setup Name—Used to identify each particular LDAP+GSSAPI Server Setup when creating security templates.
• Server Address—The IP address or the hostname of the LDAP server where authentication will be performed.
• Server Port—Used to communicate with the LDAP server. The default LDAP port is 389.
•
Use SSL/TLS—Select None, SSL/TLS (Secure Sockets Layer/Transport Layer Security), or TLS.
• Userid Attribute—Specify either sAMAccountName (the default), uid, userid, user-defined, or cn
(common name).
• Search Base—The node in the LDAP server where user accounts reside. Multiple search bases can be entered,
separated by semi-colons.
Note: A Search Base consists of multiple attributes—such as cn (common name), ou (organizational unit),
o (organization), c (country), or dc (domain)—separated by semi-colons.
•
Search Timeout—Specify a value of from 5-30 seconds.
Touch Submit, to save settings and return to General Information.
6
From the General Information screen, select Device Credentials, and then adjust the following settings as needed
(optional):
• MFP Kerberos Username— The distinguished name of the print server(s).
• MFP Password—The Kerberos password for the print server(s).
Touch Submit, to save settings and return to General Information.
7
From the General Information Screen, select Search Specific Object Classes, and then adjust the following
settings as needed (optional):
• person—Select On or Off, to determine whether the "person" object class will also be searched.
• Custom Object Classes (optional)—For each custom object class you want to define, select On or Off, to
determine whether that class will be searched; and then type a name for that class.
Touch Submit, to save settings and return to General Information.
8
From the General Information Screen, select LDAP Group Names, and then adjust the following settings as
needed:
• Group Search Base—Administrators can associate as many as 32 named groups stored on the LDAP server,
by entering identifiers for those groups under the Group Search Base list. Both the Short name for group,
and Group Identifier must be provided.
• LDAPGSSAPI Groups 1-32—For each LDAPGSSAPI Group you want to define, select a numbered group, and
then specify the Short name for the group, and the Group Identifier. Touch Submit to save changes and
return to the LDAP Group Names screen.
When creating Security Templates, you will pick groups from this setup for controlling access to device functions.
31