100/180 mm PAPERLESS GRAPHIC RECORDER: USER GUIDE
User Guide
Page 211
HA028910
Issue 13 Sep 16
4.4.6 Clear Password Cache
This menu item appears only for units fi tted with the Security Manager option and only for users with ‘Full
Security’ access (
section 4.4.1
).
USER PASSWORD AUTHENTICATION
If the user has a domain confi gured, then when an attempt is made to log in, the password entered by the
user is authenticated by the Active Directory server (see Network/Address menu description). In other
words, the recorder attempts to do an LDAP* bind with the confi gured Active Directory server, and if the
‘bind’ is successful, the user is logged in.
* Lightweight Directory Access Protocol
PASSWORD CACHE
Once a password has been authenticated, it is added to a list of up to 100 valid passwords (the Password
cache) held in the recorder. This means that if the Active Directory server is unavailable the next time the
user attempts to log in, then if the password is in the cache, the login will proceed without further authen-
tication.
CLEAR PASSWORD CACHE
If necessary the password cache can be cleared by using the Clear Password Cache button (confi rmation
required). The cache is also cleared:
1. whenever a new user is added to the user list (
section 4.4.3
),
2. the login for an existing user is removed (
section 4.4.4
).
3. if the ‘Password Cache expiry’ value has been exceeded (
section 4.5.1
).
4.4.7 Active Directory server setup
For users with Security Manager option only.
It is assumed that the person responsible for operating the Active Directory server is familiar with the ba-
sics of setting up a suitable server. The details given below explain the fi le structure necessary in order
that the Security Manager software may communicate with the server. Briefl y, a ‘User’ must be a member
of a ‘Group’, which must be part of an ‘Organizational unit’ (fi gure 4.4.7a).
User 2-1
Group 2
User 1-1
Group 1
User 2-2
User 2-n
Group r
User r-1
User r-2
User r-n
Organizational
Unit
Figure 4.4.7a Structure overview
