HP MFP Digital Sending Software (DSS) 5.0 - Configuring DSS to Use Two-Server Authentication

Page 3 of 5 white paper

The Bind Method is used to indicate if the LDAP server requires credentials (user name and

password).

Possible values for the BindMethod attribute:

anonymous No username and password are required for this server

simple Username and password are required, and connection is not

encrypted

simple-over-SSL Username and password are required, and connection is

encrypted using SSL (recommended)

windows-negotiated Domain, username, and password are required. Uses the

Windows Negotiated protocol (SPNEGO) to authenticate to the

LDAP server.

<BindMethod>anonymous</BindMethod>

The username used to authenticate to the secondary LDAP server. UserName is only required if

the BindMethod is not anonymous, and you want to use common LDAP credentials instead of

the credentials entered by the user at the device control panel. If a UserName is not supplied

in the XML document then the user’s credentials are used for LDAP authentication.

If the BindMethod is anonymous then leave the UserName blank.

If the BindMethod is not anonymous, and you want to use common credentials then provide an

LDAP username.

<UserName>ldapuser</UserName>

The password associated with the UserName used to authenticate to the LDAP server.

Password is only required if the BindMethod is not anonymous, and you want to use common

LDAP credentials instead of the credentials entered by the user at the device control panel. If a

Password is not supplied in the XML document then the user’s credentials are used for LDAP

authentication.

If the BindMethod is anonymous then leave the Password blank.

If the BindMethod is not anonymous, and you want to use common credentials then provide an

LDAP password.

<Password>ldappassword</Password>

The domain associated with the UserName value. The domain is only needed if BindMethod is

windows-negotiated, and you want to use common LDAP credentials instead of the credentials

entered by the user at the device control panel. If a Domain is not supplied in the XML

document then the user’s domain is used for LDAP authentication.

If the BindMethod is not windows-negotiated then leave the Domain blank.

If the BindMethod is windows-negotiated then provide the Windows domain.

<Domain>ldapdomain</Domain>