hp-support-head-portlet

Actions
Loading...
HP Customer Support - Knowledge Base

hp-contact-secondary-navigation-portlet

Actions
Loading...

hp-share-print-widget-portlet

Actions
Loading...
  • Information
    Learn how to upgrade to Windows 11

    Windows 11 Upgrade Guide

  • Feedback

hp-concentra-wrapper-portlet

Actions
Loading...

HP Digital Senders - Verify the Correct Active Directory LDAP Attributes for the Digital Sender 9100c and 8100c (Advanced)

The Microsoft LDAP Client as well as the Microsoft Management Console tool ADSIEDIT can both be used to determine which LDAP attributes are present for individual user objects in the Active Directory. The MMC tool ADSIEDIT is typically executed at the console of the Domain Controller; the LDAP Client (LDP.EXE) can be executed from any workstation on the network. If LDP.EXE cannot be found on the workstation, use the Windows 2000 CD-ROM to open the Windows 2000 Support Tools kit. From the \support\tools directory of the CD-ROM, run Setup.exe. This installs the Support Tools Kit, which in turn installs LDP.EXE.
The filter the Digital Sender uses for addressing is
(&(objectclass=person)(cn=<charstyped>*))
where <charstyped> are the characters typed at the control panel.
note:
More LDAP search filter syntax information can be found at www.faqs.org under the rfc for LDAP. Click here to go to www.faqs.org.
  • Use LDP.EXE
    1. Run LDP.EXE. To do this click Start menu, Run, then LDP.EXE.
    2. Create a new LDAP profile
    3. Select Connection, then Bind and in the Bind dialog, enter the username and password used in the Digital Sender to access the LDAP data in Active Directory.
    4. The message user <username> bind successful should appear in the LDP message window, this user has access to the directory. This does not, however, guarantee that this user has read access to any part of the directory below the root.
    5. Select Browse, then Search from the LDP menu.
    6. Enter the search root used in the Digital Sender in the Base Dn: field in the Search dialog.
    7. Enter the following LDAP search filter in the Filter dialog:
      (&(objectclass=person)(cn=a*))
      note:
      This filter should return information for any user whose name begins with a.
    8. Select Subtree as the scope.
    9. Select Options, then in the Attributes field of the Options dialog, delete all text.
      During the query, all LDAP attributes for each user will be displayed.
    10. Click Run. LDAP attribute names and values should be returned for all users whose name starts with a (up to the Size Limit configured in Options).
      From these results, you should be able to determine whether or not specific LDAP attributes are populated in the Active Directory for specific users. For example each user container in the directory should contain CN, objectSID, and mail attributes.
      note:
      Note: If the following message appears in the LDP message window Result <0> Null, either there are no users in the container specified by the search root with CN starting with a, the search filter has been mistyped, or the user whose credentials were entered in the Bind command, does not have "read access" to the data in this container.
Figure : Results LDP Search
  • Use the Microsoft Management Console with ADSIEDIT.MSC
    The ADSIEdit (Active Directory Service Interface Edit) Microsoft Management Console tool can be used to view the LDAP attribute names and attribute values for users contained in the directory.
    1. Run ADSIEDIT.MSC. To do this click Start menu, Run, then ADSIEDIT.MSC.
    2. Browse the tree structure to find the container that contains user objects. In many environments, users are contained in the Users container. The search root in this case is typically "CN=USERS,DC=<Domain>,DC=<Domain Suffix>" for example, "CN=USERS,DC=HP,DC=COM"
    3. Right Click a Specific User object and view the LDAP properties associated with this user.
      note:
      Here you can view the required attributes, optional attributes, and all attributes.
    4. Select All, and find the attribute that the Digital Sender is configured to query.
      For example, for Authentication, select the Binary SID, CN, and Mail, and look to see whether or not each of these attributes are populated with data.
      Figure : LDAP Properties

hp-feedback-input-portlet

Actions
Loading...

hp-feedback-banner-portlet

Actions
Loading...

hp-country-locator-portlet

Actions
Loading...
Country/Region: Flag United States

hp-detect-load-my-device-portlet

Actions
Loading...