HP CM4730 manual Initializing Kerberos authentication

Page 58

Settings

Before following the steps outlined here, you must have completed the following steps:

1.Install the Microsoft LDP tool.

2.Discover the LDAP server.

3.Set up LDP.

After you have performed these steps, perform the steps in the following section, Initializing Kerberos authentication.

Initializing Kerberos authentication

Follow these steps to initialize Kerberos Authentication for your product.

NOTE Embedded Kerberos Authentication uses session tickets in the authentication process. The session tickets are time stamped by both the Key Distribution Center (KDC) and the product. It is essential that the stamped times are within five minutes of each other. This can be accomplished by setting identical time on both the KDC and product.

1.Open the HP EWS in a web browser.

2.Select the Settings tab, and then Kerberos Authentication.

3.Under the Accessing the Kerberos Authentication Server section, perform the following steps:

a.Type the domain name in the Kerberos Default Realm (Domain) field. The domain name is case-sensitive and must use only uppercase letters, for example: TECHNICAL.MARKETING.

b.Type the server IP address in the Enter the Kerberos Server Hostname field, for example: 15.62.64.203 (IP address)

NOTE The Kerberos Server Port field fills automatically as 88.

4.Under the Accessing the LDAP Server section, perform the following steps:

a.Select Kerberos from the LDAP Server Bind Method drop-down menu.

b.Click to select the Credential method you want to use.

If choosing Use Public Credentials, type in a username and password.

NOTE Remember how you set up the username on the LDP screen. The username is defined within the device user DN value in the LDP trace and is not in standard Windows domain account format. The format is often your entire e-mail address, including the @xx.xx.

c.Type the LDAP server in the LDAP Server field.

d.Type 389 in the Port field.

5.Under the Searching the LDAP Database section, perform the following steps:

a.Paste the Search Prefix into the Search Root field.

b.Type in the sAMAccountName into the Match the name entered with the LDAP attribute of field.

48 Chapter 3 Configuring the product from the Settings screens

ENWW

Image 58

Contents HP Color LaserJet CM4730 MFP Page HP Embedded Web Server Copyright Hewlett-Packard Development Company, L.P Copyright and WarrantyTrademarks and credits Table of contents Setting the digital sending options Managing network operation from the Networking screens103 Using the Other Links as a resourceIndex List of tables List of figures 100 What is an embedded Web server? FeaturesSystem requirements HP Web Jetadmin and the HP Embedded Web ServerOpening the HP Embedded Web Server IPv6 TCP/IP address http//20010ba0000000000000000000001234 To log in as an administrator Login and logoffTo log off as an administrator Navigating through the HP Embedded Web Server HP Embedded Web Server1HP Embedded Web Server Viewing product status from the HP EWS Information screens Device Status 1Device StatusMedia Change SettingsStatus is Out Configuration 2Configuration Page screen 1HP EWS tabs and menus 2ConfigurationFollowing information appears Direct Ports check box Supplies Status 4Supplies Status screen3Supplies Status Event Log Event LogSize page side that it prints or copies Usage Usage Diagnostics Menus Calibration6Diagnostics Toner is less than 100%Device Information 9Device Information screenControl Panel Snapshot 10Control Panel Snapshot screenColor Usage Job Log 7Color Usage Job LogPrint screen PrintPrint Printing a file or updating firmware from the Print screen 8PrintConfigure Device 1Configure Device screen1Configure Device Using the menus on the Configure Device screenClick Information Click Sample Pages/Fonts Tray Sizes and Tray Tray Sizes/Types2Tray Sizes/Types TypesMail Server screen Mail ServerE-mail Server Configuring the return e-mail address Configuring outgoing e-mailSelect the Enable Outgoing E-mail check box Alerts Alerts screenAlerts Using the Alerts screen with a product 5Alerts setup screen To configure alerts To test the configuration of a destination list 6Alerts test screenAutoSend To delete destinations and destination listsMail destinations field To turn on the AutoSend featureAutoSend This file will be created in EnglishSecurity Set PasswordLink. For more information, see Login and logoff Security screenDevice is printing internal pages Disabled6Security Direct PortsAuthentication Manager 7Authentication ManagerFuture Installations Digital Sending Service DSS Secondary E-mailDigital Sending Service DSS Workflow FutureLdap Authentication 8LDAP AuthenticationAdministrator DN field Administrators To construct it CredentialsAccess to the directory. Read access is sufficient Same CAMatch the name entered with the Ldap attribute Kerberos Authentication 11Kerberos Authentication screen9Kerberos Authentication Kerberos Authentication Tasks Initializing Kerberos authentication Select the Settings tab, and then Kerberos AuthenticationConfigure Address Settings for Kerberos Authentication Use the MFP control panel for Kerberos Authentication Device PIN Authentication 12Device PIN Authentication screenUser PIN Authentication Add New Users Adding a new userEditing a user Edit or delete existing usersDeleting a user Edit Other Links 10Edit Other LinksClick Add Link Adding a linkRemoving a link Click Remove Selected Link15Device Information screen 11 Language LanguageView Pages in Browser Language Refresh Date & Time12 Date & Time Information, see Date/Time FormatDate/Time Format Clock Drift CorrectionSelect the Enable Clock Drift Correction check box 19Date & Time clock drift correction screenWake Time 13 Wake TimeRestrict Color 21Restrict Color screenPermission list Using the Restrict Color screen with a product14Restrict Color Application Permission listType the System User Name in this field 15Restrict Color Color if AllowedPermission System User Name PermissionColor Usage Job Log To set System User or Technical Application permissionsUser Permission List ApplicationGeneral Settings General Settings screen1General Settings Sending tab2Send to Folder settings Send to FolderAdding a predefined folder Editing or viewing a predefined folderRemoving a predefined folder Testing a predefined folderRemoving all folders E-mail Settings Mail SettingsMail Settings screen Is not responding or is not a valid Smtp Gateway Server3E-mail Settings 4Advanced E-mail Settings Advanced E-mail SettingsMessage Text Mail Address Book Mail Address Book tasksEditing an e-mail address Adding an e-mail addressDeleting an e-mail address Fax Settings screen Fax SettingsMenus Help 5Send to Fax Advanced Fax Settings 6Advanced Fax SettingsIs busy or does not answer Jbig compression and Error Correction on or offGeneral Receive9Modem Diagnostics screen Fax Address Book Fax Address Book tasksEditing a fax number Adding a fax numberDeleting a fax number Import/Export Import an address bookImporting an address book Smith, JoeFax number User recordMail distribution list Fax speed-dialExport an address book Clear address booksAddressing Settings 7Addressing SettingsSimple AnonymousSimple over SSL Active Directory Defaults Exchange 5.5 DefaultsCustom Advanced Addressing Settings 8Advanced Addressing SettingsLog Log15 Details screen 9LogPreferences 16Troubleshoot screenGraphics 10Preferences SettingsText MixedUsing the HP DSS software 1Network Settings OverviewSelect Language Using the Other Links as a resource How hp instant support works Hp instant supportShop for Supplies Information you can get from hp instant supportMy Service Provider and My Service Contract Product SupportIndex Enww Enww Hewlett-Packard Development Company, L.P