HP MFP Digital Sending Software (DSS) 5.0 - Configuring DSS to Use Two-Server Authentication

Page 5 of 5 white paper
<EmailMatch>mail</EmailMatch>
<DisplayNameMatch>displayName</DisplayNameMatch>
</TwoServerAuthenticationSettings>
Sample XML document using Windows Negotiated authentication
<TwoServerAuthenticationSettings xmlns="TwoServerAuthenticationSettings"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="TwoServerAuthenticationSettings
../../../TwoServerAuthenticationSettings.xsd&gt;">
<UseConfigFile>true</UseConfigFile>
<Server>servername</Server>
<Port>389</Port>
<BindMethod>windows-negotiated</BindMethod>
<UserName>publicname</UserName>
<Password>Pa$$w0rd</Password>
<Domain>ldapdomain</Domain>
<BindRoot>o=hp.com</BindRoot>
<UserMappingMethod>domain-slash-username</UserMappingMethod>
<UserSearchMatch>cn</UserSearchMatch>
<EmailMatch>mail</EmailMatch>
<DisplayNameMatch>displayName</DisplayNameMatch>
</TwoServerAuthenticationSettings>
Summary
There should only be a small percentage of network environments where this two-server authentication
process is necessary. Most Windows Active Directory installations contain the necessary user
information (email address and display name), and are therefore sufficient to fully authenticate the user
at the device control panel. However, this two-server authentication method is being provided in DSS
5.01 for backward compatibility with existing 4.x and 4.25.xx versions.
Document Attributes
Author: David O’Hara, David Lerman HP IPG Technical Marketing
Product Models: HP Digital Sending Software 5.01