Basic Configuration. Key Operator Tools older products. Program/Change LDAP Server (page 3 of keyop tools) Use LDAP Server must be ON to work

Transcription

1

2 Where to configure: User Tools Basic Configuration Key Operator Tools older products Program/Change LDAP Server (page 3 of keyop tools) Use LDAP Server must be ON to work Administrator Tools newest products Program/Change/Delete LDAP Server (page 3) Use LDAP Server must be ON to work

3 What to configure: Identification Basic Configuration Put a user friendly name here, this area does not effect operation. Since newer products support up to 5 LDAP servers, this is used to make it easier for the end user to know which server to select.

4 What to configure: Server Name Basic Configuration This can be the IP address for the LDAP server If DNS is not working use the IP address Use the server name if possible, since IP addresses can change over time. After everything is working, try using the name instead of the IP address

5 Basic Configuration What to configure: Search Base This is where most people go wrong. This is the Base DN For Active Directory in a 2003 environment, do not point this to the root. Either point it to an OU (organizational unit) that has users under it, or point it to the CN (container) called Users. The Base DN is where the LDAP search starts» If left blank, or it is incorrect, the LDAP server will reject the request or return no information» By default the Users are in the Users container

6 What to configure: Basic Configuration Search Base (continued) The correct syntax is essential! For Active Directory, the following items are commonly used:» DC - for Domain, you need one of these for each part of the domain for example: if the domain is tsc.ricoh.com, then you would need to put in the following: dc=tsc, dc=ricoh, dc=com With just this Base DN you would begin your search at the root of the Active Directory tree» CN for containers like Users. Using the above example domain, to start the search at the Users container put in the following: cn=users, dc=tsc, dc=ricoh, dc=com

7 What to configure: Basic Configuration Search Base (continued) OU - for Organizational Unit if a complex Active Directory structure exists, it typically will be organized into several levels of Organizational Units Users can be placed into the Organizational units Other Organizational units can be placed into an organizational unit

8 Active Directory Example Domain (root) dc=cwr,dc=com Organizational Units { Container cn=users

9 Active Directory Example Organizational Unit MyCorp: ou=mycorp To start the search at MyCorp, set the search base to ou=mycorp,dc= cwr,dc=com

10 Active Directory Example To start the search at Atlanta, set the search base to ou=atlanta,ou= MyCorp,dc=cwr,dc=com This will find users in the Atlanta ou and in the two ou s beneath Atlanta, but not anywhere else in the tree

11 Finding the Base DN Ask the administrator for the Active Directory structure especially where the users are located in the structure Look at the Active Directory itself using the Active Directory Users and Computers utility to see the structure Use the Softerra LDAP browser and have it find the Base DN for you see example: Click this button To get DNs It will normally return several, you may need to try each of them until one works

12 Softerra LDAP Browser

13 Basic Configuration What to configure: Port Number: default is 389 (for Exchange) Exchange (Active Directory) use 389 normally Lotus Notes uses 390 normally SSL uses 636 by default Authentication Anonymous Bind use OFF Normal use ON and enter Name and Password of a user that has rights to browse the LDAP directory you will probably need to put the NetBios name of the domain as well as the user name Example: cwr\administrator (administrator on the domain cwr.com) cwr is the NetBios name of the cwr.com domain High use HIGH for SSL (not normally needed) Need Name and Password same as for Normal

14 If a user doesn t have an address entered here, he will not show up in our LDAP searches Typical User Properties

15 Model Differences Older Models such as B089 Only supports 1 LDAP server Manually have to put in SSL port if needed Newer Models such as B140 or B200 Supports up to 5 LDAP servers Key Operator tools are called Administrator Tools Under Port Number there is a Use Secure Connection (SSL) selection sets port to 636