[Enabling LDAP]

To perform LDAP search, select [ON] (default: [OFF]).

[Default Search Result Display Setting]

Select whether an E-mail address, fax number, or Internet fax number is given priority to be displayed as the destination search result when searching for destinations from the LDAP server (default: [E-mail]).

[LDAP Server Name]

Enter the name of the LDAP server (using up to 32 single-byte characters).

[Server Address]

Enter the LDAP server address. Use one of the following formats.

• Example to enter the host name: "host.example.com"

• Example to enter the IP address (IPv4): "192.168.1.1"

• Example to enter the IP address (IPv6): "fe80::220:6bff:fe10:2f16"

[Port No.]

If necessary, change the LDAP server port number (default: [389]).

[Search Base]

Specify the starting point to search for a destination (using up to 255 single-byte characters).

The range from the entered origin point, including the following tree structure, is searched.

Example of entry: "cn=users,dc=example,dc=com"

[Timeout]

If necessary, change the time-out time to limit a communication with the LDAP server (default: [60] sec.).

[Max.Search Results]

Change the maximum number of destinations to be displayed as search results, if necessary (default: [100]).

[Authentication Method]

Select the authentication method to log in to the LDAP server depending on your environment (default: [anonymous]).

• [Login Name]: Enter the login name used for LDAP authentication (using up to 64 double-byte or single-byte characters).

• [Password]: Enter the password for LDAP authentication (using up to 64 single-byte characters).

• [Domain Name]: If [GSS-SPNEGO] is selected for [Authentication Method], enter the domain name of Active Directory (using up to 64 single-byte characters).

[Select Server Authentication Method]

Select whether to synchronize the LDAP authentication with the user authentication of this machine (default: [Set Value]).

• [Set Value]: Uses values entered in [Login Name] and [Password].

• [User Authentication]: Uses the registered user's user authentication of this machine as authentication information for LDAP authentication.

• [Dynamic Authentication]: The system prompts you to enter the user name and password at LDAP searching.

[Use Referral]

If necessary, select whether to use the referral function (default: [ON]).

[Search Condition Attributes]

Select attributes to be specified when performing the LDAP search (default: [Name]). The setting can be switched between [Name] (cn) and [Nickname] (displayName).

[Search]

Select whether to display candidate destinations when entering a part of the name to perform LDAP search (default: [OFF]).

[Initial Setting for Search Details]

Specify the default LDAP search conditions for each item (default: [OR]).

• [Search Attributes Authentication]: When enabling Search Attributes Authentication, set this option to ON (default: OFF). Configure this setting when [Authentication Method] is set to [Simple] and [Select Server Authentication Method] to [Dynamic Authentication]. If enabled, the user does not need to enter all of the DN (Distinguished Name) when performing authentication via the LDAP server.
  [Search Attribute]: Enter the search attribute to be automatically added before the user name (using up to 64 single-byte characters). The attribute value must start with a single-byte alphabetical character (default: [uid]). In normal circumstances, specify "uid" before the user name, however, depending on your environment, you need to specify other attribute such as "cn".

[Enable SSL]

When using SSL communications, set this option to ON (default: OFF).

• [Port No.(SSL)]: If necessary, change the port number for SSL communication (default: [636]).

[Certificate Verification Level Settings]

To validate the certificate during SSL communication, select items to be verified.

• [Expiration Date]: Confirm whether the certificate is within the validity period (default: ON).

• [CN]: Confirm whether CN (Common Name) of the certificate matches the server address (default: OFF).

• [Key Usage]: Confirm whether the certificate is used according to the intended purpose approved by the certificate issuer (default: OFF).

• [Chain]: Confirm whether there is a problem in the certificate chain (certificate path) (default: OFF). The chain is validated by referencing the external certificates managed on this machine.

• [Expiration Date Confirmation]: Confirm whether the certificate has expired (default: OFF). The expiration date confirmation is performed in the order of OCSP (Online Certificate Status Protocol) service, and CRL (Certificate Revocation List).