Fuji Xerox ApeosPort Print C5570 Reference Manual page 164

Configuring an LDAP server for external authentication
When [Authentication System] is configured to [LDAP], register the information of the LDAP server to this machine.
Note
 This machine is compatible with Active Directory and OpenLDAP LDAP servers.
 For the method to check the distinguished name (DN) formats and attribute values and the method to add accounts to
groups in Active Directory described in this procedure, please refer to the official Microsoft website.
 When attribute names or other text that cannot be entered from the control panel are used, configure them from
CentreWare Internet Services.
1.
Tap the display area of authentication information at the top left of the Home screen, and then login as a
machine administrator.
2.
Tap [Device].
3.
Tap [Connectivity & Network Setup] > [Remote Authentication Server Settings].
4.
Tap [LDAP Server Settings]>[Primary Server Name / Address].
5.
Enter the IP address (or host name) of the LDAP server, and then tap [Enter] > [OK].
6.
Tap [Authentication Method], and then configure the authentication method for the LDAP server.
[Direct Authentication]
Use User IDs to authenticate for the LDAP server.
[Authentication of User Attributes]
Authentication for LDAP servers is based on special attribute information. For example, enter an e-mail address to
log on when the "mail" attribute has been configured.
When [Authentication of User Attributes] has been configured, configure the attribute name to [Attribute of Typed
User Name].
Note
 Configure an attribute that guarantees a unique value for each user.
7.
Tap [Attribute of Login User Name], enter a user display name or an attribute name to be an identifier, and
then tap [OK].
Note
 Configure an attribute that guarantees a unique value for each user.
 Login is not possible when the configured attribute cannot be acquired from the LDAP server.
 When the authentication method is [Direct Authentication], configure the same attribute as the attribute of the user ID
entered during authentication from the control panel.
8.
Configure whether to add supplementary information to character strings entered during login.
For example, if you configure to add "@myhost.example.com", users can log in by entering only their user name
when an e-mail address (user@myhost.example.com) is used for authentication.
Configure [Use Added Text String] to [Enabled], and then configure the character string to be added for [Text String
Added to User Name].
9.
Configure the search range in the directory tree.
Note

The entry specified here becomes the standard for user searches. Specify an entry of the hierarchy that contains the users
to log in. However, it may take time to login to this machine if the hierarchy under the entry contains many users or
groups. Configure the appropriate search range.
164
7 Making Better Use of Your Machine