Muratec MFX-C2828, Руководство пользователя

Страница: 136 / 364

7-28
7.6 Restricting users of this machine (LDAP) 7
7.6.6 LDAP over SSL
[External Server Settings]
In the administrator mode of
Web Connection
, select [User Auth/Account Track] ö [External Server Set-
tings] ö [Edit].
[Setting Up LDAP]
In the administrator mode of
Web Connection
, select [Network] ö [LDAP Setting] ö [Setting Up LDAP] ö
[Edit].
Reference
- To verify a certificate, specify the certificate verification method, and register the same information as
for the LDAP server specified in [External Server Settings]. For details, refer to page 10-7.
Item Description Prior check
[Enable SSL] Select this check box to encrypt SSL communication be-
tween this machine and the LDAP server. Does the server sup-
port SSL?
[Port No.(SSL)] Enter the port number to be used for SSL communication. Server port number
Item Description Prior check
[Certificate Verifi-
cation Level Set-
tings] To verify the server certificate, configure settings to verify
the certificate.
[Validity Period] Select whether to check that the server certificate is within
the validity period.
[CN] Select whether to check that the CN of the server certifi-
cate matches the server address.
[Key Usage] Select whether to check that the server certificate is used
according to the purpose approved by the issuer.
[Chain] Select whether to check that the server certificate chain
(certification path) is correct.
The chain is validated by referencing the external certifi-
cates managed on this machine. For details, refer to
page 8-34.
[Expiration Date
Confirmation] Select whether to check that the server certificate is within
the validity period.
The OCSP service and CRL (Certificate Revocation List)
are checked in this order when the expiration date of the
certificate is checked.