HP DSS 5 User Manual

							Table 3-20  Addressing tab (continued)
Callout Component Description
◦Type in the Path to Start Search (BaseDN, Search Root) or click
Auto Find to have DSS find the path.
◦Select a Source for Attribute Names or click Auto Find to have
DSS find the source.
◦Type in the attribute to match the recipient's name, e‑mail
address, and fax number.
◦In the Advanced Search Options section, Select the Maximum
LDAP Addresses and the Maximum Search Time from the drop-
down menus, and then type in the LDAP Filter Condition in the
text box.
●Test for LDAP Retrieval (Step 4). Type in at least 3 characters to test
the retrieval of address book entries using the LDAP setup, and then
click Test.
●Sync Schedule (Step 5). Select a sync schedule from the drop-down
menu, or click Sync now. The last replication shows in the text box.
4Address Book ManagerClick this button to launch the Address Book Manager. For more
information, see 
Address Book Manager on page 90.
Configuring Personal Contacts feature
When the Enable Personal Contacts check box on the Addressing tab is selected, users can gain
access to their personal Outlook contacts address books at the device. Exchange Contacts support is
only available if authentication is enabled and the authentication method is set to Microsoft Windows.
See 
Authentication on page 57 for more information.
Configuring DSS address books
DSS uses address books to store e‑mail addresses that a user types at the device. If user
authentication is enabled on the device, addresses are stored in a user's personal DSS address
book. Otherwise, the addresses are stored in a public DSS address book. These DSS address books
are available to every digital sender or device that DSS supports. If the addresses that are contained
in these address books are no longer needed, they can be deleted by clicking Clear in the DSS
Address Books section of the Addressing tab. This lists all existing address books, so that one or
more of them can be selected.
Configuring LDAP directory replication
The e‑mail addresses and fax numbers in the address book come from several sources:
●The LDAP server on the network
●Destinations that users have previously specified at the control panel
●E‑mail and fax address books that have been created by using the HP Address Book Manager
One of two methods can be used to synchronize the digital-sender address books with the LDAP
server. 
Table 3-21 Address book synchronization on page 94 contains descriptions of these
methods.
ENWWConfiguration 93 
						

							Table 3-21  Address book synchronization
Method Description Effect at the control panel
Using a replicated LDAP address book DSS takes a snapshot of the LDAP
server database and populates the
device address book with the
addresses that it finds. The
Configuration Utility can be used to
either initiate the task manually or
schedule it to run automatically at a
certain time.As the user types the initial characters
in a name, the device attempts to
complete the name from the names in
the address book. The user types more
characters until a match is found. When
the user selects a name, the associated
e‑mail address is automatically
selected.
Using an LDAP address book directly Firmware in the device initiates and
resolves name queries directly with the
LDAP server. The administrator does
not need to synchronize the address
book with the LDAP server, either
manually or according to a schedule.The user types a partial name. The
device shows the list of resulting names
from the LDAP server. When the user
selects a name, the associated e‑mail
address is automatically selected.
NOTE:If the device is configured to use an LDAP address book directly, it cannot gain access to
the replicated address book. If replication is used, only the display names and e‑mail addresses are
replicated.
94 Chapter 3   Installation and configuration ENWW 
						

							To set up automatic replication of the LDAP address book
1.On the DSS server, open the Configuration Utility, and then click the Addressing tab.
2.Click to select the Enable Network Contacts check box. The screen expands to show the steps
for configuring the LDAP server.
Figure 3-54  Enable Network Contacts section
3.Click the arrow next to Sync schedule. The screen expands to show sync options.
4.Select a replication schedule from the Sync drop-down menu. Click Sync Now to replicate now.
The Last Replication text box displays the last time the LDAP address book was replicated.
Personal address books
The Personal address book feature is automatically activated when users are authenticated at the
device. The feature allows users to access and maintain a Personal address book from the front
panel of any devices connected to the same DSS server.
An administrator can manage the contents of the Personal address books using the Address Book
Management tab in the Configuration Utility.
Exchange contacts
The Exchange Contacts feature allows users to access their Microsoft Exchange Contacts from the
front panel of devices. The feature must be activated in the DSS Configuration Utility. Users have
read only access to the Exchange Contacts – entries added from the front panel of the device go into
the Personal address book.
ENWWConfiguration 95 
						

							Guest address book
The Guest address book is always available to all devices and cannot be disabled. This address book
is used to store addresses added by un-authenticated users ("guests") from the front panel of
devices.
Public address book
The Public address book is always available to all devices and cannot be disabled. An administrator
can use the Address Book Management tab in the Configuration Utility to manage the contents of the
address book.
When enabled any address book entries added from the front panel of devices by un-authenticated
users will be put into the Public address book – and thereby be available to all other devices
connected to the same DSS server.
Use the Public Address Book when certain e‑mail addresses and/or fax numbers need to be available
to all devices.
LDAP replication
The LDAP Replication feature is designed to off-load LDAP servers by replicating the information into
the DSS address book at a schedule set by the administrator. The address book information
replicated from LDAP is stored in a dedicated, read-only and hidden address book.
The configuration settings for LDAP Replication are very similar to those for LDAP Addressing. The
administrator needs to supply the address/name of the LDAP server, which port to connect to, the
"bind" method and credentials, as well as the "search root" (search context) and attribute settings.
LDAP filters
When doing an LDAP search, users and groups will appear in the result found.
To be able to filter the LDAP search, follow these steps.
1.Open the Configuration Utility, and then click the Device Configuration tab
2.Click to select the device that you would like to filter. Click Configure Devices.
NOTE:If all the devices need this filter, configure one and then copy the configuration to the
other devices.
3.The Configure Devices dialog box appears. Click the Addressing subtab.
96 Chapter 3   Installation and configuration ENWW 
						

							4.Click to select the Enable Network Contacts (use LDAP server) check box, and then click the
arrow next to LDAP Database Search Settings (Step 3).
Figure 3-55  The LDAP Database Search Settings section
5.In the LDAP Filter condition text box, type in the syntax to filter the LDAP search.
To exclude the groups setting for Exchange 5.5, the filter would be (!
(objectclass=groupofnames)).
Other e‑mail settings could include but not limited to the following:
●iPlanet: (!(objectclass=groupofuniquenames))
●Active Directory: (!(objectclass=group))
6.Click Apply.
Configure DSS for Windows Active Directory Services
You must install the Digital Sending Software and ensure that the Digital Sending Service is running
before you can configure the software for the Windows Active Directory environment.
Configure Authentication
Follow these steps to configure Authentication for the Windows Active Directory environment.
1.Open the DSS Configuration Utility and click on the Authentication tab.
ENWWConfiguration 97 
						

							2.Click to select the Enable Authentication check box, and then select Microsoft Windows from the
Authentication Method drop-down menu.
Figure 3-56  Authentication tab
3.Type in the domain name in the Trusted Domains text box, and then click Add.
4.In the Test Windows Sign In section, select the domain from the Domain drop-down menu, and
then type in the username and password for an authenticated user in the Username and
Password text boxes. Click Test to test the credentials.
5.Click Apply.
Configure Addressing
Devices configured to use the Digital Sending Software can be configured to use one of two different
types of address books: (1) an address book that resides on the server on which the Digital Sending
Software is installed, and (2) the Global Address List (GAL) that exists as data in Active Directory.
You can only configure a device to use one of these addressing methods at a time.
In option one, the Digital Sending Software can be configured to periodically export data from the
Global Address List to the service-based address book. Or, by using the Address Book Manager (an
optional component of the Digital Sending Software) administrators can create recipients by entering
names and e‑mail addresses or can import lists of recipients in several popular formats. In either
case, devices perform queries of the service-based address book as users enter a recipient's e‑mail
address at the control panel of the device. Option one has the advantage that NTLM can be used to
"bind" (authenticate) to the Active Directory server. Option two only provides Simple authentication.
98 Chapter 3   Installation and configuration ENWW 
						

							NOTE:NTLM authentication can be used as the bind method for option one. Option two only
provides Simple authentication. If Simple is chosen, the username and password are transmitted over
the network as ‘cleartext.’ This means that this information can be read by anyone with access to the
data on the network.
Configure the Service-Based Address Book
Follow these steps to configure the service-based address book.
1.Open the DSS Configuration Utility and click the Addressing tab.
2.Click to select the Enable Network Contacts (use LDAP server) check box.
3.In the Network Directory Server (LDAP) Step 1 section, type in the IP address or Hostname of
the Domain Controller or Global Catalog Server in the LDAP Server Address text box.
NOTE:If the Global Catalog Server is used, the default LDAP port must be changed to 3268.
4.In the Server Authentication Requirements (Step 2) section, click to select the Server requires
authentication option, and then select NTLM from the drop-down menu.
5.Type the credentials of an authenticated user into the Username, Password, and Domain text
boxes.
6.In the Sync Schedule section, select the replication frequency.
7.Click Apply.
Configure individual devices to connect to the LDAP interface of Active Directory
1.Open the DSS Configuration Utility, and then click the Device Configuration tab.
2.Click to select the device you want to configure, and then click Configure Device.
3.Click the Authentication subtab. Set the Authentication Method to Microsoft Windows.
4.Set the Login Method to Simple.
5.Type in the credentials of an authenticated user into the Username, Password, and Domain text
boxes.
6.Type the IP Address or Hostname of the Domain Controller or Global Catalog Server.
7.Make sure the LDAP Database is Alphabetized check box is not selected. When configuring for
Active Directory Services, in most cases, having this check box selected will cause names
shown in the list of matching names to not appear in alphabetical order.
8.Click Apply.
DSS templates
DSS templates are collections of device configuration settings that can be applied to individual
products or groups of products. Templates configure a product’s settings at the time that they are
applied to the product. There is no automated mechanism to maintain a product’s settings to match a
template. A product’s settings can change after a template has been applied due to manual editing or
the application of different template(s).
DSS template types are divided into the two following product-family classes:
ENWWConfiguration 99 
						

							●Pre-FutureSmart
●FutureSmart
Pre-FutureSmart templates are derived from the configuration settings of pre-FutureSmart products.
FutureSmart templates are derived from the configuration settings of FutureSmart products. For more
information on creating templates, see 
Create a template on page 100.
The Template Product Family column in the Template List area of the Template Configuration tab
lists the product-family class for each template. Move your cursor over the 'i' 
 icon to view the
firmware version of the product used to create the template and the products supported by the
template family.
Figure 3-57  DSS template family firmware and supported products view
This section contains the following topics:
●
Create a template
●
Use the Template Configuration tab to manage templates
●
Apply a template
Create a template
Create a DSS template:
1.Click the Device Configuration tab.
2.Select a product from the Device List area.
3.Right-click the selected product, and then click Create Template from the menu.
4.Type a name for the template in the Name field.
5.Type a description for the template in the Description field.
NOTE:The Configurable Features section of this dialog window is read-only when creating a
template.
100 Chapter 3   Installation and configuration ENWW 
						

							6.Click the OK button to complete the creation of the template.
7.Check the template to be sure there are no issues. To check for issues, configure the template
and make sure none of the tabs within the template show an exclamation mark (!) next to the tab
name. If an exclamation mark is present, go to that tab and fix the problem, and then save the
changes. See 
Configure a template on page 105 for information on configuring templates.
NOTE:New templates can have issues if the settings copied from the device are incomplete or
conflict with other settings. For example, if a device is configured to send faxes via its internal
modem but no Country/Region is configured.
A second source of template issues can occur because, due to security controls, passwords
cannot be retrieved from FutureSmart devices. For example, if a device has a quickset that
requires a password, then when the template is first created it will need a password for that
quickset but no password will be present. FutureSmart templates require that passwords that
exist on the device when a template is created be re-entered into the template after the template
is created.
Failure to correct template issues such as these will result in errors when trying to apply the
template to devices.
After a template is created, it becomes available for editing on the Template Configuration tab and
can be applied to products present on the Device Configuration tab. For more information on applying
templates, see 
Apply a template on page 105.
Use the Template Configuration tab to manage templates
Use the Template Configuration tab to view and edit DSS templates and template groups.
ENWWConfiguration 101 
						

							Figure 3-58  DSS Template Configuration tab
12 
Table 3-22  DSS Template Configuration tab
Callout Component Description
1Template
GroupsA list of the template groups defined on the DSS server.
2Template ListA list of the templates defined on the DSS server.
Template groups
The Template Groups area of the Template Configuration tab allows you to create, organize, and
group templates for application to products.
Create a template group
Use the following steps to create a template group:
1.Click the Add Group... button in the Template Groups area.
2.Type a name for the group in the Group Name field.
3.Click the OK button to save the group.
Template groups can be nested beneath other template groups. To nest an existing template group,
drag and drop the group onto another group. To create a nested template group, select an existing
group before creating the new group. The new template group will be created beneath the selected
existing group.
102 Chapter 3   Installation and configuration ENWW