Xerox ColorQube 9201 System Administrator Manual page 138

Authentication
12. To configure Filters for LDAP (if required)
a. Click on [Custom Filters] heading tab under the LDAP title.
b. On the Custom Filters screen, under LDAP Authentication area, check the [Append Base
DN] checkbox to select it.
When enabled, this will specify the distinguished name(s) that will lead to the entry in the
LDAP directory under which all users and groups will be retrieved. Distinguished name is a
unique name for an entry in your LDAP directory. For example: cn=USERID, o=xerox, c=us.
Note: Many UNIX/Linux LDAP servers require this attribute to be set and is used frequently when
Login Credentials to Access LDAP Server is set to [Authenticated User].
c. Select one or both of the [Enable Custom Filter] boxes, for the type of filter that you wish to
apply.
d. For the [E-mail Address Book filter], in the field provided, type in the LDAP search string
(filter) that you wish to apply. The filter defines a series of conditions that the LDAP search
must fulfill in order to return the information you seek. The form of the typed search string
(filter) is LDAP objects placed inside parenthesis. For example, to find all users that have an E-
Mail attribute (mail enabled), type (objectClass=user) (mail=*). If you are not familiar with
LDAP search strings, use an Internet browser search to find examples.
e. For the [User ID Query Filter], in the field provided, type in the LDAP search string (filter)
that you wish to apply. The filter defines a series of conditions that the LDAP search must
fulfill in order to return the information you seek. The form of the typed search string (filter) is
LDAP attributes placed inside parenthesis. For example, to find the user with a
sAMAccountName of Bob, type (objectClass=user) (sAMAccountName=Bob). If you are not
familiar with LDAP search strings, use an Internet browser search to find examples.
f. Click on the [Apply] button when done.
13. To set Authentication to control access to individual Services:
a. Click on [Setup] in the directory link under Access Rights to display Authentication
Configuration page, in the Current Configuration area, click on the [View] button for
Service Registration.
b. On the Service Registration screen, check the checkbox to select the services you want to
display on the machine touch interface.
c. Click on the [Save] button and return to the Authentication Configuration.
14. To set Authentication to control access to individual Features:
a. Select [Tools & Feature Access] in the directory tree under Access Right.
b. In the Tools & Feature Access page, under Presets, select either:
• Standard Access - Only Lock Tools
• Open Access - Unlock All Tools and Features
• Custom Access
If you select [Custom Access], for each Pathways and services within the pathway you can select
either [Unlocked] or [Locked] from the drop-down menu. For certain Services within the Service
Pathway you can also select [Hidden].
Click on the [Apply] button, then click on the [OK] button when you see the message
c.
"Properties have been successfully modified".
15. Select [Logout] in the upper right corner of your screen if you are still logged in as Administrator,
and click on the [Logout] button.
130 Xerox ColorQube™ 9201/9202/9203
System Administrator Guide