Advanced kerberos realm settings, Settings – HP 9250c Digital-Sender User Manual

Page 49

Advertising
background image

Callout

Area on the screen

Information or capability that the area provides

12

Search Root

The Search Root is the Distinguished Name (DN) of the
entry in the LDAP directory structure where address
searching is to begin. A DN is made up of ' attribute=value
' pairs, separated by commas.

NOTE

On some LDAP Servers, the Search

Root can be left blank (in which case its root node
will be assumed). The search root is not case
sensitive.

13

Match the name entered with LDAP
attribute of

When searching for the device user's information in the
LDAP database, the contents of the attribute specified in
this field are compared to the username that was typed
during authentication. In the Windows Active Directory
environment, this attribute is typically sAMAccountName.

14

Retrieve the device user's email address
using attribute of

After the device user has been located in the LDAP
database, the user's e-mail address is retrieved from the
database by using the LDAP attribute specified in the
Retrieve the device user's e-mail address using attribute
of field. In the Windows Active Directory environment, this
attribute is typically mail.

15

and name using the attribute of

The user's display name is obtained from the LDAP
attribute that is specified in the "and name using the
attribute of" field. In the Windows Active Directory
environment, this attribute is typically displayName.

Advanced Kerberos Realm Settings

Embedded Kerberos Authentication requires Forward and Reverse Lookup to be enabled on the DNS
server. During some DNS migrations, DNS may return different results during Forward and Reverse
Lookup (i.e. ACME.CORP.COM, ACME.CORP.NET).

The Advanced Kerberos Realm Settings can be used to configure Embedded Kerberos Authentication
to work in these heterogeneous DNS environments.

Enter either a hostname or a domain name that is to be mapped to the realm name. Domain names
must be entered with a prefix character of "." For example .ACME.CORP.NET.

The following illustration shows the Advanced Kerberos Realm Settings screen.

Table 3-9

Kerberos Authentication (continued)

ENWW

Kerberos Authentication

39

Settings

Advertising