HP MFP Sending Software 4.9X manual Determining the Ldap server bind method for Windows

Figure 3-17Windows Active Directory authentication

LDAP server

		LDAPquery	Queryresults
		4.	5.
1.	User credentials		2. User credentials
	(DSMP-encrypted)		(API-encrypted)
6.	Authentication user’s		3. Authentication result
	e-mail address	HP DSS	(API-encrypted)

server

Domain

controller

Determining the LDAP server bind method for Windows

By default, Active Directory is not configured to accept anonymous queries for information that is contained in the Active Directory store. When an administrator configures LDAP addressing or authentication, he or she must decide between changing Active Directory to accept anonymous queries and configuring DSS to have authenticated access. If Active Directory is configured for anonymous access, DSS can be configured to do an anonymous LDAP query. If Active Directory is not configured for anonymous access, DSS must be configured for either Simple or SPNEGO authentication. Because Active Directory supports SPNEGO for backward compatibility with Windows clients, it is the preferred method for configuring DSS authentication. SPNEGO authentication uses either Kerberos or NTLM, depending on the environment.

NOTE: The username and password that are used in the Simple method of authentication are transmitted over the network in cleartext. This means that this information can be read by anyone who has access to the data on the network.

To configure Active Directory Services for an anonymous LDAP query

1.Open the Active Directory Users & Computers Microsoft Management Console program.

2.Right-click the Users container and then select Properties.

3.Click the Security tab.

4.Click Add.

5.Select Everyone and then click Add.

6.Click OK.

7.Click Advanced.

8.Select Everyone.

9.Click View/Edit.

50 Chapter 3 Installation and configuration ENWW