Implementing LDAP for Enhanced Directory Services on PrimeLink C9065/C9070

LDAP

Lightweight Directory Access Protocol (LDAP) is a protocol used to process queries and updates to an information directory, also known as an LDAP directory, stored on an external server. LDAP directories are optimized heavily for read performance. Use this page to define how the device retrieves user information from an LDAP directory.

CONFIGURING LDAP SERVER SETTINGS

To configure LDAP server settings:

1. In the Embedded Web Server, click Properties > Connectivity > Protocols > LDAP > LDAP Server.

2. For Server Information, type the appropriately formatted main and backup LDAP server addresses, host names, and port numbers. The default port number is 389.

3. For LDAP Server, select the type of LDAP server.

4. In the Optional Information area, specify settings, as needed:

   • For Search Directory Root, type the search directory root path using Base DN format.

   • For Login Credentials to Search Entries, select Remotely Authenticated User, or System.

   • If necessary, type the login name, then type and retype the password.

   • For Maximum Number of Search Results, type the maximum number of addresses that can be returned matching the search criteria. Type a number between 5-100.

   • For Search Timeout, select Use LDAP Server Timeout or Wait. If you select Wait, type a duration between 5-120 seconds.

   • If your primary LDAP server is connected to other LDAP servers, to include the servers in your searches, for LDAP Referrals, select Enabled.

   • For LDAP Referral Hop Limit, type the maximum number of consecutive LDAP referrals. Specify a limit between 1-5.

5. In the Perform Query on area, select an option if necessary:

   • Mapped Name Field: This option specifies how the fields are mapped.

   • Surname and Given Name Fields: This option searches for the last name and first name of the user.

6. Click Apply.

DEFINING USER MAPPINGS

LDAP servers provide different results to search queries depending on how user data is mapped. Editing the mapping allows you to fine-tune server search results.

Note: If you are using Internet Fax, ensure that the Internet Fax field is not set to No attribute type that can be used. This setting prevents the LDAP Address Book from appearing on the Internet Fax screen on the device control panel. For the Internet Fax setting, select Mail.

To define LDAP user mappings:

1. In the Embedded Web Server, click Properties > Connectivity > Protocols > LDAP > LDAP User Mappings.

The information that you entered on the LDAP Server tab is summarized in the Server Information area.

2. To send a test query, in the User Name field, type the name of the user for whom you want to search, then click Search. Any matching user information appears.

3. If necessary, to remap fields, for Imported Heading, use the menus.

Note: Headings are defined by your LDAP server schema.

4. Click Apply.

CONFIGURING LDAP CUSTOM FILTERS

To configure LDAP filters:

1. In the Embedded Web Server, click Properties > Connectivity > Protocols > LDAP > Custom Filters.

2. In the User ID Query Filter field, type the LDAP search string or filter that you want to apply.

Note:

• The filter defines a series of conditions that the LDAP search must fulfill to return the information you want.

• The search string should be formatted as LDAP objects inside of parentheses. For example, to find the user with a sAMAccountName of Bob, type (objectClass=user)(sAMAccountName=Bob)

3. For Email Address Book Filter, select Enable Filter.

4. In the Email Address Book Filter field, type the LDAP search string or filter that you want to apply.

Note: Format the search string as LDAP objects placed inside parentheses. For example, to find all users that have an email attribute (mailenabled), type (objectClass=user)(mail=*).

5. For Fax Address Book Filter, select Enable Filter. Then type the LDAP search string or filter that you want to apply.

6. For Internet Fax Address Book Filter, select Enable Filter. Then type the LDAP search string or filter that you want to apply.

7. Click Apply.

PERFORMING AN LDAP CONNECTION TEST

To perform the LDAP connection test:

1. In the Embedded Web Server, click Properties > Connectivity > Protocols > LDAP > Connection Test.

2. Type a name for the test.

3. Click Search.

The test results appear in Search Result area.

FAQs