HP MFP Sending Software 4.0 to 4.20 Using authentication, LDAP bind methods

Using authentication

Authentication is a security feature that requires users to provide a network username and password before using digital-sending features. Authentication can be turned on or off for each device that the HP DSS supports.

NOTE At no time are the credentials that are used to authenticate at the device written to either the HP DSS server or the device hard disk. In addition, although the credentials that the HP DSS administrator uses to configure authentication or LDAP addressing are written to the HP DSS server hard disk, a hashing algorithm is incorporated to ensure that these credentials cannot be recovered.

LDAP bind methods

Authentication can be performed by using Microsoft Windows, an LDAP server, or Novell NetWare. The authentication process also retrieves the user's e-mail address, so that the sender's address is automatically supplied in the From: text box when the e-mail is sent. Because the address cannot be changed or erased, users are prevented from sending e-mail using a fictitious return address.

E-mail retrieval is carried out by connecting to a local LDAP server using one of four possible bind methods. The following table outlines the types of LDAP bind methods that are used for HP DSS.

Table 3-4Authentication bind methods

Bind method	Description	Can be used by
Anonymous	The selected LDAP server does not require user credentials to gain	Windows
	access to the LDAP database	Novell
Simple	The selected LDAP server requires user credentials but does not	Windows
	support NTLM or SPNEGO.	Novell
	● The password, if any, is sent non-encrypted across the network.
		LDAP
	● The process requires a username and password.
Simple over Secure	The selected LDAP server requires user credentials but does not	Windows
Channel (SSL)	support NTLM or SPNEGO.	LDAP
	● All data, including the username and password, is encrypted by
	using the Secure Sockets Layer (SSL).
	● The LDAP server must be set up to support SSL.
Windows Negotiated	The selected LDAP server requires user credentials and supports	Windows
(SPNEGO)	SPNEGO and SSL.
	● Use this selection negotiate the strongest authentication protocol
	that both the LDAP Server and the HP DSS server support.
	● Kerberos 5 is supported for Active Directory authentication.
	● NTLM is supported for Exchange 5.5 server authentication.

Software features

ENWW Using authentication 51