HP Digital Sending Software V4, Техническое описание

Страница: 60 / 116

Methods of authentication
This section describes the three methods of authentication:
●
Windows Active Directory
●
Novell authentication
●
LDAP authentication
Windows Active Directory authentication method
HP DSS Windows authentication uses Microsoft Active Directory, a special-purpose database that
contains information about objects, including users, that are contained within the domain. The Active
Directory database resides on domain controllers and is automatically replicated across all domain
controllers in the domain. Active Directory provides an LDAP interface to the data in the directory
database.
As shown in Figure 3-20 Windows Active Directory authentication , the following steps occur during
Windows authentication:
1. The user types his or her username and password at the device. This information is securely
transmitted to the HP DSS server.
2. The HP DSS program authenticates to the domain through the Windows API to validate the
user’s credentials.
3. If the user’s credentials are correct, the Domain Controller returns either the security identifier
(SID) or the BSID (Binary SID).
4. Using the LDAP interface, HP DSS queries the LDAP directory for the authenticated user’s
e-mail address.
5. The LDAP directory returns the authenticated user’s e-mail address.
6. HP DSS inserts the authenticated user’s e-mail address in the From: text box of the e-mail and
prohibits the user from changing the field.
52 Chapter 3 Software features ENWW
Software features