Access Authentication Configuration - Xerox WorkCentre 5735 System Administrator Manual

Access Authentication Configuration

To configure this feature or these settings access the Properties tab as a System
Note:
Administrator. For details, refer to
1. From the Properties tab, click on the [Security] link.
2. Click on the [Authentication] link and select [Setup] in the directory tree.
3. The Xerox Access Setup page displays. In the Authentication, Authorization, and
Personalization area click on the [Edit..] button.
4. In the Enablement area:
a. Select the required option from the [Alternate Authentication method on the machine's
touch interface (Touch UI)] drop-down menu. The alternate login method provides an
alternative method of accessing the device's services if the smart card is unavailable. The
option selected from the menu defines how the device will validate the user's access rights.
• Select [Username / Password Validated Locally on the Xerox Machine] to validate
users listed in the Local User Information Database. This option requires you to
configure accounts in the Local User Information Database.
• Select [Username / Password Validated Remotely on the Network] to validate users
via an Authentication Server. This option requires you to have a server that will provide
authentication of user login details. Authentication via Kerberos (Solaris, Windows
2000), NDS (Novell), SMB (Windows NT4/2000) or LDAP is supported.
b. Select the required option from the [Authentication method on the machine's web user
interface (Web UI)] drop-down menu. When a user attempts to access Internet Services they
are prompted to enter their login information. The option selected from the web user
interface Authentication menu defines how the device will validate the user's rights to access
Internet Services. This is required because if the user normally authenticates at the device
with a card reader, there would be no method for the device to authenticate users who access
Internet Services from their workstations.
• Select [Username / Password Validated Locally on the Xerox Machine] to validate
users listed in the Local User Information Database. This option requires you to
configure accounts in the Local User Information Database.
• Select [Username / Password Validated Remotely on the Network] to validate users
via an Authentication Server. This option requires you to have a server that will provide
authentication of user login details. Authentication via Kerberos (Solaris, Windows
2000), NDS (Novell), SMB (Windows NT4/2000) or LDAP is supported.
c. Select required method from the [Authorization is stored] drop-down menu. The card reader
and Authentication Solution authenticates (validates) the user. The Authorization method
determines which areas of the device a user is allowed to access. There are two options:
• Select [Locally on the Machine] if you want the device to check the Local User
Information Database for levels of authorization.
• Select [Remotely on the Network] if you want to use an LDAP server to determine levels
of authorization.
If you selected Remotely on the Network (from the Location of Access Rights box), configure
LDAP communications as stated in the Configure Authentication for LDAP/LDAPS in the
Authentication section of this guide. For details refer to
LDAP/LDAPS on page 160.
332 WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide
Access Internet Services as System Administrator
Authentication Configuration for
on page 24.