HP MFP Digital Sending Software (DSS) 5.0 - Configuring DSS to Use Two-Server Authentication

Page 1 of 5 white paper
Introduction
In some network environments DSS may require two different servers to fully authenticate a user at the MFP
control panel. A Windows authentication server is employed to verify the user’s access, and a second, LDAP,
server is used to retrieve the user’s full name and email address. The secondary user information query is
performed on the LDAP server using bind methods such as “Simple – Non-SSL or SSL” or “Anonymous.”
To configure two-server authentication in DSS 5 the Administrator needs to supply parameters for each
authentication server separately. First, information for the primary authentication server needs to be entered in
the Configuration Utility. Second, an XML document specifying the LDAP query values needs to be edited.
How to Configure DSS
The steps needed to configure DSS are to select a primary authentication method, and then edit the two-server
XML document. The following example uses Windows for the primary authentication and LDAP with
anonymous bind for the second server.
1. Open the Configuration Utility and select the Authentication tab. This is configured the same as
single server authentication and query. When using two-server authentication the “Match the name
entered with this attribute” and “Retrieve the user’s email address using this attribute” text boxes
should remain configured with some non-empty value, but they are not used. These attributes,
along with other information about the LDAP server, will be specified in an XML document instead
of in the Configuration Utility.
white paper
HP Digital Sending
Software 5.01
Two-Server Authentication
Security Level: Public
Date Written/Updated December 1
st
, 2013
Document Summary
Configuring DSS to use two-server authentication

Summary of content (5 pages)