Ricoh IM C530 Series User Manual page 240

8. Troubleshooting
• Check whether "Global Scope" is specified as the scope of the group in a property for the user
group created in DC, and the group type specified in "Security". Also check whether an account is
registered to the user group that has been created. If more than one DC exists, check whether a
trust relationship between DCs is established.
*2 To resolve the domain name, see the following:
• Check whether [Domain Name Configuration] and [DNS Configuration] is specified correctly in
[Settings]
• Enter the IP address in [Domain Name Configuration] to check the connection. If authentication can
be performed using the IP address, check [DNS Configuration] again.
• If authentication by IP address is not possible, check whether LM/NTLM is set to be denied in the
domain controller security policy or domain security policy. Also check that the port is not closed in
the firewall between the device and the domain controller or in the firewall settings of the domain
controller. When the Windows firewall is enabled, create a new rule that allows communication on
port 137 and port 139 in "Advanced" of the Windows firewall. Open the TCP/IP properties from
the network connection properties, select the "Enable NetBIOS Over TCP/IP" check box on
[Advanced]
*3 For Kerberos authentication, check the following:
• Check that "Realm Name", "KDC Server Name", "Domain Name" are specified correctly in
[Settings]
[Administrator Authentication/User Authentication/App Auth.]
Realm]. Enter "Realm Name" in upper case.
• Configure the setting so that the difference in time between the clocks on KDC and device is less
than five minutes. The clock on the machine can be adjusted in [Settings]
[Date/Time/Timer]
• Kerberos authentication fails if auto-obtaining of KDC in Windows authentication fails. When auto-
obtaining cannot be activated, switch to manual.
*4 For LDAP settings, check the following:
• Check whether the LDAP server is correctly specified in [Settings]
for Administrator]
Authentication/App Auth.]
Login Name Attribute is registered correctly.
• Select the server in [Settings]
[Authentication/Charge]
[Register/Change/Delete LDAP Server], press [Register/Change] and set "Authentication" to
[Kerberos Authentication], and then execute [Connection Test].
• If the connection test fails, check whether [Domain Name Configuration] and [DNS Configuration]
are specified correctly on [Settings]
238
[System Settings] [Network/Interface].
[WINS] tab, and open port 137.
[System Settings] [Settings for Administrator]
[Date/Time]
[Authentication/Charge]
[User Authentication Management]
[System Settings]
[Administrator Authentication/User Authentication/App Auth.]
[Authentication/Charge]
[Set Time].
[Administrator Authentication/User
[Settings for Administrator]
[System Settings] [Network/Interface].
[Register/Change/Delete
[System Settings]
[System Settings] [Settings
[Custom Authentication] and