Lexmark C54x Administrator's Manual page 17

Managing authentication and authorization methods
3
Select a setup from the list.
4
Click Delete Entry to remove the profile, or Cancel to return to previous values.
Notes:
•
Click Delete List to delete all LDAP setups in the list.
• An LDAP building block cannot be deleted if it is being used as part of a security template.
Validating an LDAP setup
1
From the Embedded Web Server, click Settings > Security > Security Setup.
2
Under Advanced Security Setup, click LDAP.
3
Click Test LDAP Authentication Setup next to the setup you want to test.
Using LDAP+GSSAPI
Note: This feature is available only in advanced‑security devices.
Some administrators prefer authenticating to an LDAP server using the more secure Generic Security Services
Application Programming Interface (GSSAPI) instead of simple LDAP authentication. Instead of authenticating directly
with the LDAP server, the user first authenticates with a Kerberos server to obtain a Kerberos "ticket." This ticket is
presented to the LDAP server using the GSSAPI protocol for access. LDAP+GSSAPI is typically used for networks running
Active Directory.
Notes:
• LDAP+GSSAPI requires Kerberos 5 to be configured.
•
Supported devices can store a maximum of five unique LDAP+GSSAPI configurations. Each configuration must
have a unique name.
•
LDAP relies on an external server for authentication. If an outage prevents the printer from communicating with
the server, users will not be able to access protected device functions.
•
To help prevent unauthorized access, log out from the printer after each session.
Adding an LDAP+GSSAPI setup
1
From the Embedded Web Server, click Settings > Security > Security Setup.
2
Under Advanced Security Setup, click LDAP+GSSAPI.
3
Click Add an LDAP+GSSAPI Setup. The setup dialog is divided into four parts:
General Information
•
Setup Name—This name is used to identify each particular LDAP+GSSAPI Server Setup when creating security
templates.
• Server Address—Type the IP address or the host name of the LDAP server where the authentication is
performed.
•
Server Port—The port used by the Embedded Web Server to communicate with the LDAP server. The default
LDAP port is 389.
•
Use SSL/TLS—From the drop‑down menu, select None, SSL/TLS (Secure Sockets Layer/Transport Layer
Security), or TLS.
17