Xerox WorkCentre 7345 User Manual

							179 Configure communications between the Accounting server and the device
Refer to the remote Accounting server manufacturers documentation for the specific procedures to follow 
to configure communications between the server and the multifunction device.
The server will contact the device based upon Accounting service parameters set up at the server, such as 
the devices IP address and polling frequency.
Required network communications and server settings will be stated by the servers manufacturer.
Sample list of set up requirements for Equitracs Accounting service
• Enable TCP/IP and HTTP on the multifunction device.
• Set up a static or reserved DHCP IP address for the device.
• Enable TCP/IP port 80 communications at the device.
• Download the Controller Interface for Xerox from the Equitrac™ web site.
• Install the Controller Interface for Xerox at the server.
• Verify that you have purchased a license for the Controller Interface for Xerox, as well as a license for 
each device communicating with the server.
• Register each multifunction device at the server (using the devices IP address for identification).
Downloaded From ManualsPrinter.com Manuals 
						

							180 Enable the Accounting option in workstation print drivers
Use the Windows Add Printer dialogs to add the multifunction devices print driver to individual, networked 
workstations.  For instructions, if needed, refer to the Print Drivers section of this guide.
In the print driver default setting dialogs, locate and then enable the Accounting option.  This step assures 
that print jobs from individual workstations will be recognized by the authentication system, rather than 
being unrecognized and deleted by the multifunction device.
For Windows operating systems, the default setting dialogs are accessed by right mouse clicking on the 
printers icon in the Printers window for Windows 2000, or the Printers and Faxes window for Windows XP.  
Select Properties from the displayed menu, then locate and enable the Accounting option.
Downloaded From ManualsPrinter.com Manuals 
						

							181
Configuring Xerox Secure Access (Authentication)
Xerox Secure Access enables customers to leverage Xerox Partner Solutions to provide user 
authentication with an optional card reader.  Users can access the features available at the device once 
they have been authenticated.
Secure Access and Accounting
Secure Access can be enabled with Network Accounting or the Xerox Standard Accounting feature for 
accounting purposes.  To configure Xerox Secure Access with Network Accounting, refer to the 
Configuring Network authentication (by a remote Accounting server) topic in this Security – 
Authentication section.  To configure Xerox Secure Access with Xerox Standard Accounting, refer to the 
Optional information, in the Information Checklist below, then refer to the Xerox Standard Accounting 
section of this guide.
Note: Secure Access cannot be enabled at the same time as Foreign Device Interface.
Information Checklist
1. Ensure that the device is fully functional on the network.  TCP/IP and HTTP protocols must be 
configured so that Internet Services can be accessed.
2. Ensure that the Xerox Partner authentication solution (Secure Access Server, Controller, and Card 
Reader) is installed and communicating with the multifunction device.  Follow the installation 
instructions from the manufacturer of the authentication solution to correctly set the devices up.
3. Ensure that SSL (Secure Sockets Layer) is configured on the multifunction device.  The Xerox Partner 
authentication solution communicates with the multifunction device via HTTPS.
4.(Optional)  Ensure that Network Accounting is configured if you want the multifunction device to send 
user account information to a Network Accounting server.  In Internet Services (the web pages running 
on the multifunction device) use your web browser to enter the multifunction device’s IP address, then 
click the Properties tab, then click the Security folder, click Authentication Configuration, and 
select Xerox Secure Access for Login Type, matched to Network Accounting for Accounting Type.  
For use with Xerox Standard Accounting, you select Xerox Secure Access for Login Type, then select 
Xerox Standard Accounting for Accounting Type.  For instructions on setting up Xerox Standard 
Accounting, refer to the Xerox Standard Accounting section of this guide.  For instructions on 
setting up your Network Accounting server, refer to the instructions that came with your accounting 
package, as well as the Configuring Network authentication (by a remote Accounting server) 
topic in this Security – Authentication section.
You may also need another Authentication Server (running LDAP in an ADS environment, for 
example) to communicate with the Secure Access Server providing that server with user credentialing 
information.  A second Authentication Server may be necessary for web User Interface Authentication, 
if this feature is additionally desired.
5. If you have LDAP available on your network, it would be wise to configure LDAP on the multifunction 
device, preferably from the Remote Authentication Server / Directory Service folder, as stated in the 
Configure Authentication for LDAP topic in this section of this guide.
Downloaded From ManualsPrinter.com Manuals 
						

							182 Configuring Xerox Secure Access to work with Remote Authentication
At Your Workstation:
1. Open your Web browser and enter the TCP/IP address of the machine in the Address or Location field, 
then select [Enter].
2. Click the [Properties] tab.
3. Select the [Security] folder, then the [Authentication Configuration] link.
The Properties tab refreshes and the Authentication Configuration > Step 1 of 2 area appears.
4. In the Authentication Configuration > Step 1 of 2 area:
a. Select [Xerox Secure Access] from the Login Type drop-down list.
b. Select the [Enabled] box for each service that you wish to restrict access to.  For explanations of 
each service, select the [Help] button.
Note: If a Guest User box is available and configurable, consider whether it is advisable in your 
network environment to allow simple password, guest access to this restricted service device.  The 
default setting is Off.
c. Do not place a checkmark in the [Non-account Print] box if you wish to enable people without 
accounts to continue to print.
d. Select [Apply], then reboot the device following the prompt.
e. Select [Next]. 
The Properties tab refreshes and the Authentication Configuration > Step 2 of 2 area appears.
5. In the Authentication Configuration > Step 2 of 2 area, on the Authentication System line, select 
[Configure].
The Properties tab refreshes and the Authentication System area appears.
6. In the Authentication System area:
a. Settings drop-down list box, select [Authentication Agent]. 
b. Select [Apply], then reboot the device following the prompt.
Downloaded From ManualsPrinter.com Manuals 
						

							183 Configure Remote Authentication for Kerberos (Windows 2000)
At your Workstation:
1. With the Authentication Configuration web page still running, click Configure next to the server you 
wish to use for Authentication.  If not still running, perform steps 2 and 3 below.
2. If the web page is not still running, open your Web browser and enter the TCP/IP address of the 
machine in the Address or Location field. Press Enter.
3. Click the Properties tab.  Note that (as of February 2007) you can either return to the Security folder 
and the Authentication Configuration hot link (discussed on the previous page), or use the alternative 
path, stated below.
4. Select the Remote Authentication Server / Directory Service folder in the list of hot links, select 
Authentication System and pick Kerberos (Solaris) from the drop-down list.  Click Apply.
5. Select Kerberos Server Settings.
6. Enter the IP Address of the Primary Server (Domain Controller running the Key Distribution Center 
service).
7. Enter the IP Address of the Secondary Server (Domain Controller), if necessary.
8. Enter details of the Windows 2000 Domain in the Realm Name box.  For example: example.com.
9. Enter details for up to 4 alternate Domain Controllers and backups, if required.
10. Click Apply, and supply the Administrator User name and password if prompted.
Downloaded From ManualsPrinter.com Manuals 
						

							184 Configure Remote Authentication for Kerberos (Solaris)
At Your Workstation:
1. With the Authentication Configuration web page still running, click Configure next to the server you 
wish to use for Authentication.  If not still running, perform steps 2 and 3 below.
2. If the web page is not still running, open your Web browser and enter the TCP/IP address of the 
machine in the Address or Location field. Press Enter.
3. Click the Properties tab.  Note that (as of February 2007) you can either return to the Security folder 
and the Authentication Configuration hot link (discussed on the previous page), or use the alternative 
path, stated below.
4. Select the Remote Authentication Server / Directory Service folder in the list of hot links, select 
Authentication System and pick Kerberos (Solaris) from the drop-down list.  Click Apply.
5. Select Kerberos Server Settings.
6. Enter the IP Address of the Primary Server (the server running the Key Distribution Center service).
7. Enter the IP Address of the Secondary Server, if necessary.
8. Enter details for the Realm.  For example (in upper case): EXAMPLE.COM.
9. Enter details for up to 4 alternate servers and backups, if required.
10. Click Apply, and supply the Administrator User name and password if prompted.
Downloaded From ManualsPrinter.com Manuals 
						

							185 Configure Remote Authentication for SMB
At Your Workstation:
1. With the Authentication Configuration web page still running, click Configure next to the server you 
wish to use for Authentication.  If not still running, perform steps 2 and 3 below.
2. If the web page is not still running, open your Web browser and enter the TCP/IP address of the 
machine in the Address or Location field. Press Enter.
3. Select the [Properties] tab.  Note that (as of February 2007) you can either return to the Security 
folder and the Authentication Configuration hot link (discussed on the previous page), or use the 
alternative path, stated below.
4. Select the Remote Authentication Server / Directory Service folder in the list of hot links, select 
Authentication System and pick SMB from the drop-down list.  Click Apply.
5. Select SMB Server Settings.
6. From the SMB Server Setup drop-down menu, select your desired method.  The selections include: 
By Domain Name, and By Domain Name and Server Address / IP Address.
7. Enter the Domain name (up to 15 characters) in the SMB Server – Domain Name box, for every 
Domain Controller specified.  This entry is required regardless of the selection made from the SMB 
Server Setup drop-down menu.
8. Enter the IP Address of the Domain Controller in the SMB Server – Server Name / IP Address box (if 
By Domain Name and Server Address / IP Address was selected for SMB Server Setup).
9. Enter the IP Addresses of up to 4 additional Backup Domain Controllers, if applicable.
10. If you choose not to enter IP addresses, enter the Server Name (up to 64 characters) in the SMB 
Server – Server Name / IP Address box (if By Domain Name and Server Address / IP Address was 
selected for SMB Server Setup).
11. Click Apply, and supply the Administrator User name and password if prompted.
Downloaded From ManualsPrinter.com Manuals 
						

							186 Configure Remote Authentication for LDAP
Refer to your LDAP server documentation for the full range of information that can be entered into this 
LDAP dialog to fully support both E-mail applications and authentication using your LDAP server.
The path to the LDAP dialog is as follows:
At Your Workstation:
1. With the Authentication Configuration web page still running, click Configure next to the server you 
wish to use for Authentication.  If not still running, perform steps 2 and 3 below.
2. If the web page is not still running, open your Web browser and enter the TCP/IP address of the 
machine in the Address or Location field. Press Enter.
3. Click the Properties tab.  Note that (as of February 2007) you can either return to the Security folder 
and the Authentication Configuration hot link (discussed on the previous page), or use the alternative 
path, stated below.
4. Select the Remote Authentication Server / Directory Service folder in the list of hot links, select 
Authentication System and pick LDAP from the drop-down list.  Click Apply.
5. Select LDAP Server / Directory Service.
6. Enter the Primary Server IP address (or host name) in the box supplied.  Note: If entering a fully 
qualified host name (for example, ldapserver.xerox.com), make sure that the specified domain name 
matches the device’s TCP/IP configuration (domain name shown under DNS on the device’s 
Configuration Report). 
7. Enter the Primary Server Port Number (default of 389).
8. If available
, decide whether or not to use encryption (Authentication with SSL) when accessing the 
LDAP server.
9. For Authentication Method, choose either Direct Authentication or Authentication of User Attributes.  
Direct Authentication sets authentication with the LDAP server with the user ID and password 
supplied by the user.  If you choose Direct Authentication, when a user presses a button at the device 
for a restricted service, they will be prompted for their LDAP credentials.  If you select Authentication 
of User Attributes, authentication will be based on the attributes entered into this dialog, such as 
samAccountName or uid, for Attribute of Login User Name, or mail for Attribute of Typed User Name.  
Note that there are a number of other LDAP attributes that can be entered into this dialog.
10. The Search Login Name box can be left blank.
11. The Search Password and Re-enter Search Password boxes can be left blank.
Downloaded From ManualsPrinter.com Manuals 
						

							187 12. Fill in the Search Root Entry DN (for example, ou=users, dc=xerox, dc=com), and select All Levels 
below Root Entry for Scope of Search.
13. In the Referral and Referral Hop Limit boxes, decide whether or not to perform referrals and specify 
the hop limit.
14. For Server Application, select your application from the drop-down list including Microsoft Active 
Directory, IBM Lotus Domino, or other Applications.
15. Enter any other attributes for LDAP to search for, such as cn, sn, givenName, mail, and 
telephoneNumber.  Note that the default setting for Directory Service for Address Book is Use, which 
allows LDAP to be used with machine options that can benefit from LDAP address lookups (such as E-
mail).
16. Click Apply, and supply the Administrator User name and password if prompted.
Downloaded From ManualsPrinter.com Manuals 
						

							188 Enable Specific Xerox Secure Access Settings
1. Open your Web browser and enter the TCP/IP address of the machine in the Address bar.  Press 
Enter.
2. Select the Properties tab.
3. Select the Security folder.
4. In the Security folder, select the Remote Authentication Servers folder.
5. In the Remote Authentication Servers folder, select Xerox Secure Access Settings.
6. In the Xerox Secure Access Settings area:
a. Enter text in the Default Prompt and Default Title boxes to create the prompt and prompt title that 
will be displayed on the multifunction device’s screen informing users how to authenticate 
themselves at the device.  
Note: If the Title and Prompt have been configured on the Secure Access Server, then that 
information will override the information entered here.
b. Select the Enable box for Local Login to allow users to log in locally at the device.
c. Select the Enable box for Get Accounting Code to get user accounting data from a networked 
Accounting Server (if used).
d. Click Apply, and provide the Administrator User name and password if prompted.
Downloaded From ManualsPrinter.com Manuals