Oki CX 1145 MFP, Руководство по администрированию сети

Страница: 23 / 59

1 Setting up Network Server
22 Setting up LDAP Authentication Service
Setting up LDAP Authentication Service
When you want to enable the LDAP Authentication with Kerberos, you have to configure the net-
work as described below:
y Configure DNS Forward and Reverse Lookup Zones.
y If you want to use LDAP Authentication with Kerberos to Windows server, it is necessary to
configure Kerberos.
y Synchronize the time of the equipment and the LDAP server.
y Configure LDAP, DNS, and DDNS Sessions on the equipment.
y Configure Directory Service on the equipment.
This section describes how to set up the LDAP service for a Windows based domain controller
environment.
When LDAP Authentication fails
When the LDAP Authentication fails, please check the followings:
y Make sure that the date and time of the equipment and the LDAP server is synchronized.
y Make sure that the Forward and Reverse Lookup Zones are correctly set.
y Make sure that the Kerberos Principal Name is correctly set.
y Make sure that the LDAP Service in TopAccess is correctly set.
y Make sure that the option of DHCP server “015 Domain Name Server” is set correctly.
Configuring DNS Forward and Reverse Lookup Zones
For the LDAP Authentication environments:
1. Make sure Active Directory is installed in Windows 2000 Server or Windows Server 2003.
2. Enter the host name, domain name, and IP address of the Active Directory Server and this
equipment in the Forward Lookup Zones of the DNS Client.
- The server settings in the example above have the following setup:
IP Address: 172.16.16.138
Host Name: w2000s-en1
Domain Name: domino6.ldmj6.local
- The MFP settings in the example above have the following setup:
IP Address: 172.16.16.177
Host Name: MFP-00000176
Domain Name: domino6.ldmj6.local