Xerox WorkCentre 5755 Manual

							Network Configuration
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide111
6. Click on the [Apply] button to accept changes or [Undo] to return the settings to their previous 
value.
7. Click on the [OK] button when you see the message “Properties have been successfully 
modified”. 
						

							Network Configuration
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide 112
Raw TCP/IP Printing
Note:TCP/IP must be enabled before Raw TCP/IP Printing is enabled.
Raw TCP/IP is a printing method used to open a TCP socket-level connection, over Port 9100, to stream 
a print-ready file to the printer's input buffer, and then to close the connection after sensing an End Of 
Job indicator in the Page Description Language, or after expiration of a preset timeout value. Port 
9100 printing does not require a Line Printer Request (LPR) from the workstation, or the use of a Line 
Printer Daemon (LPD) running on the printer. Raw TCP/IP printing is selected in Windows 2000 as the 
Standard TCP/IP port.
Note:To configure this feature or these settings access the Properties tab as a System 
Administrator. For details, refer to Access Internet Services as System Administrator on page 24.
1. From the Properties tab, click on the [Connectivity] link.
2. Click on the [Protocols] link.
3. Select [Raw TCP/IP Printing] in the directory tree, the Raw TCP/IP Printing page displays.
4. In the General area:
a. For Protocol, check the [Enabled] checkbox to enable Raw TCP/IP Printing.
Physical Connection displays the physical network connection, this will always display 
“Ethernet”. 
5. Up to three ports may be enabled and configured, in the Port Information area:
a. For Port 1 Leave the TCP  Po rt  N u m ber set to 9100. If two additional ports are available, click 
on the [Default All] button to check if they are set to 9101 and 9102 respectively (emulating 
HP JetDirect EX Plus 3).
b. Leave the Bidirectional ([Enabled]) checkboxes and Maximum Connections per Port 
settings at their default values.
c. Set the [End of Job Timeout] to the number of seconds to wait before processing a job 
without an End Of Job indicator. The range is from 1 to 65535, and the default is 300.
d. Leave the PDL Switching ([Enabled]) checkbox at its default value.
Note:Do not check the [Enabled] checkbox for PDL Switching, when Windows clients print is 
using port 9100. this prevents each print job from generating a banner page.
6. Click on the [Apply] button to accept the changes or [Undo] to return the settings to their 
previous values, or [Default All] to enter printer defaults for all settings (recommended).
7. Click on the [OK] button when you see the message “Properties have been successfully 
modified”.
To add additional options, from the Raw TCP/IP Printing
 screen, click on the [Advanced] button.
8. In the Connections area:
a. For Maximum Concurrent Connections per Port (1-32), enter a value between 1 and 32 to 
specify the maximum number of concurrent connection allowed.
b. For Maximum Concurrent Jobs per Connection (0-500), enter a value between 0 and 500 to 
specify the maximum number of concurrent jobs per connection allowed.
c. For Total Job Limit per Connection (0 - 32768), enter the required job limit that can be 
active per port between 1 and 32768. This setting limits the total number of jobs accepted on 
a single connection. After the limit is reached and all jobs complete printing, port 9100 loses 
the connection. 
						

							Network Configuration
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide113
9. In the Job Boundary Determination area:
a. For End of Job Timeout, enter the required time between 0 and 1800, for the device to wait 
for the data received through the port before terminating the job.
b. For Control D Marks End of PostScript Job, check the [Enabled] checkbox, when enabled, 
the “Ctrl-d” character indicates the end of a PostScript print job.
10. In the Backchannel Data area:
a. For Backchannel Data Transmission to Client, check the [Enabled] checkbox to allow 
backchannel information to transmit back to the client, such as PDL interpreter and PJL status 
messages.
b. For Out of Order Backchannel Data, check the [Enabled] checkbox to allow bidirectional 
information from multiple print jobs to return to the client out of order. This option also 
ensures communication between the printer and client.
11. In the Banner Page Printing area:
a. For Banner Page Enabled, from the drop-down menu, select one of the following to allow 
banner sheets to print: 
•No Jobs
•First Jobs Only
•All Jobs
b. If required, for Banner Page for Each Document of Job, check the [Enabled] checkbox to 
generate a banner page for each document in a job. This only applies to PDL switched PJL 
jobs. When disabled, banner sheet is printed for the first document only.
c. For Banner Page for Job Containing only PJL Commands, check the [Enabled] checkbox, to 
allow banner pages to print only for jobs that are specifically requested through PJL 
commands.
12. In the Miscellaneous area:
a. For Language (PDL) Switching within PJL Job, check the [Enabled] checkbox to allow the 
port to handle PJL print jobs consisting of more than one language, for example PCL and 
PostScript. Each language is spooled as a separate document which creates a multiple 
document job.
b. If required, for Job Data Parsing Override, check the [Enabled] checkbox to force the parsing 
job data. Job data is not parsed when bidirectional and PDL switching are disabled.
13. Click on the [Apply] button to accept the changes or [Undo] to return the settings to their 
previous values, or [Default All] to enter printer defaults for all settings (recommended).
14. Click on the [OK] button when you see the message “Properties have been successfully 
modified”.
SMTP (Simple Mail Transfer Protocol)
The SMTP (Simple Mail Transfer Protocol) page allows you to configure this option, This is required for 
E-mail and Internet Fax features. E-mail and Internet Fax features use the same SMTP information for 
outgoing jobs.
Note:To configure this feature or these settings access the Properties tab as a System 
Administrator. For details, refer to Access Internet Services as System Administrator on page 24.
1. From the Properties tab, click the [Connectivity] link. 
						

							Network Configuration
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide 114
2. Click on the [Protocols] link.
3. Select [SMTP Server] in the directory tree.
a. In the Required Information area, select one of the following:
•Use DNS (to identify SMTP Server) - Use this to allow the DNS to automatically find an 
IP address of the mail server.
•Specify SMTP Server Manually - Select this option to map to a specific SMTP server.
a. If you select Specify SMTP Server Manually, select either [IPv4 Address], [IPv6 Address] or 
[Host Name]. Enter the [IP Address]and [Port], or the [Host Name] and [Port] of the SMTP 
Server.
b. Enter a valid e-mail address in the [WorkCentre E-mail Address] field (matching the account 
set up on the SMTP Server) which the device will use as a default E-mail From and Reply To 
address.
4. In the Optional Information area:
a. Enter the maximum allowable size for an e-mail with an attachment in the [Maximum 
Message Size (Message and Attachment] field. The range is from 512Kb to 20480 Kb.
b. Enter the allowable number of fragments in the [Number of Fragments] field. The range is 
from 1 to 500; the default is 1.
c. Enter allowable size to control the size of e-mail jobs sent to the SMTP server in the [Total Job 
Size] field. The range is from 512Kb to 2,000,000Kb (2Gb); the default is 512Kb.
d. For [Login Credentials for the WorkCentre to Access the SMTP Server to send automated 
emails], select one of the following authentication method that the printer will use to access 
the SMTP server for any automated e-mail messages that it sends for notification or 
confirmation:
•None - if no authentication is required.
•System - Select this option to have the printer authenticate itself using the credentials 
you provide for the Login Name and Password.
Enter details for the SMTP server account in the [Login Name], [Password] and [Retype 
Password] fields.
Check the [Select to save new password] checkbox, if you want to change the password 
for an existing Login Name.
e. For Login Credentials for the Walkup User to send Scanned E-mails, select how walkup 
users can be authenticated by the SMTP server. Users can be prompted to log in or users can 
be authenticated using the system credential specified on the SMTP Server configuration 
screen, select one of the following:
•Authenticated User - when selected the device will prompt to log in using their own 
network credentials.
•
Same as Automated E-mails: - when selected, each user will need to enter the system 
credentials specified on the SMTP Server configuration screen.
5. Click on the [Apply] button to implement any changes.
6. Click on the [OK] button when you see the message “Properties have been successfully 
modified”. 
						

							Network Configuration
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide115
LDAP
Note:LDAP support is only available on the device. Configuration of the LDAP directory settings 
requires the network to support LDAP services.
LDAP (Lightweight Directory Access Protocol) is a popular protocol used by large accounts to access 
large quantities of data including corporate address books. The local system will need to know where 
the LDAP server is located on the network and may need a login name and password if the LDAP server 
is not configured to allow NULL names and passwords.
The Internet Services LDAP page allows you to configure Lightweight Directory Access Protocol 
information.
LDAP is used for the following activities:
• To access the corporate address book to locate e-mail addresses for use with the E-mail and 
Internet Fax services.
• To authenticate users when configured as the method of Authentication.
• To authorize users to gain access to device features, when configured as the method of 
Authorization.
Information Checklist
Before starting the procedure, ensure the following items are available or tasks have been performed:
• Ensure the E-mail feature is functional on the device and your network supports LDAP services.
• Obtain the IP Address (or Host Name) of your LDAP Server. The device may also need a login 
name and password if the LDAP server is not configured to allow NULL names and passwords.
• Use an LDAP client to validate your settings before inputting them into the Internet Services 
menus. LDAP clients include Microsoft Outlook Express, Microsoft Outlook and Netscape 
Communicator.
• To use host names, DNS must be configured on the device.
To Configure LDAP Server
At your Workstation:
Note:To configure this feature or these settings access the Properties tab as a System 
Administrator. For details, refer to Access Internet Services as System Administrator on page 24.
1. From the Properties tab, click the [Connectivity] link.
2. Click on the [Protocols] link.
3. Select [LDAP] in the directory tree, the LDAP page displays.
4. To add a new LDAP directory, click on the [Add New] button.
5. In Server Information area:
a. Select either the [IPv4 Address], [IPv6 Address] or [Host Name] radio button.
b. Enter details in the [Friendly Name] field.
c. Enter the IP Address and Port or the Host Name and Port of the Primary and Backup LDAP 
Server. 
						

							Network Configuration
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide 116
d. Select the server type from the [LDAP Server] drop-down menu.
6. In the Optional Information area:
a. Enter the search directory location of the server where the LDAP information is stored in the 
[Search Directory Root] field.
b. For Login Credentials to Access LDAP Server, select one of the following:
•None - If no login is required.
•Authenticated User - The device will use the login details entered by the user to access 
the LDAP server. This option requires Authentication to be configured on the device.
•System - If selected the device will specify the LDAP server login details and enter the 
required information in the [Login Name] and [Password] fields. Format for the login 
name may be login name or domain/login name.
c.Enter a Login Name and Password, if required, for the device to access the LDAP server. 
Format for the login name may be login name or domain/login name.
d. For SSL, check the following checkbox:
•Enable SSL - To enable SSL (Secure Socket Layer).
Note:SSL requires a server certificate to be available to the device.
•Validate Repository SSL Certificate - If you want the device to verify that the server 
certificate is trusted, valid and has a fully qualified domain name (FQDN).
e. Click on the [View Trusted SSL Certificates] link to view secure certificates that have been 
uploaded to the device. (Click the browser [Back] button to return to the LDAP Settings 
screen).
f. For Maximum Number of Search Results select either [Use LDAP Server Maximum] or 
[Maximum Number of Search Results]. If you select the latter, enter the maximum number 
of addresses that will appear which match the search criteria selected by the user. Set the 
search results to one less than the server will allow. For example, if the LDAP server limit is 75, 
set the search results to 74 or less. The range is between 5 and 100.
g.Search Timeout: There are two options. You can let the server use its timeout limit by 
selecting the [Use LDAP Server Timeout], or select [Wait] and specify how many seconds 
the search should last (between 5 and 100). If the search takes longer than the time specified 
in the [Wait... seconds] box the user will be notified that the search failed.
h. For LDAP Referrals, check the [Enabled] checkbox if the primary LDAP server is connected to 
additional servers, the search will continue on those servers as well.
i. The Perform Query on option will help control the returns by allowing the LDAP query to be 
either on [Mapped Name Field] or [Surname and Given Name Fields]. Netscape and Lotus 
Domino will typically require a setting of Surname to allow returns of “lastname, firstname”.
7. Click on the [Save] button to implement the changes.
To Figure Contexts for LDAP
1. From the LDAP screen, click on the [Contexts] tab under the LDAP title at the top of the screen.
Contexts are used with the Authentication feature. Contexts speeds up searching through the 
LDAP tree by specifying where to look in the tree. The administrator can configure the device to 
automatically add an authentication context to the Login Name provided by a user. 
						

							Network Configuration
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide117
2. Enter the default login information in the [Default Login Context] field, this is the first context 
that will be searched.
Note:The word LDAP should appear in the login context, for example, cn=LDAP, o=xerox, c=us.
3. Click on the [Apply] button.
To  D e f i n e  U s e r  M a p p i n g s
Fields contained within LDAP structures are not standardized. This section allows you to find out what 
results you will get when searching for a name using one of the LDAP servers. Editing the mapping will 
give some control over your LDAP server results, therefore improving name searches for the user.
To map the LDAP fields:
1. From the LDAP screen, click on the [User Mappings] tab under the LDAP title at the top of the 
screen.
a. The Server Information area will display a summary of the LDAP server settings assigned in 
the LDAP Server screen.
b. In the Search area, enter details in the [Enter Name] field and click on the [Search] button 
this lets you test the LDAP name search and field matching capability.
c. The information about this user is then displayed against the fields shown on the device. By 
using the drop-down menu under Imported Heading boxes re-map any fields you require 
against the device properties.
Note:Internet Fax users should ensure that the Internet Fax field is NOT set to “No Mappings 
Available” in the drop-down menu. This setting will prevent the LDAP Address Book appearing on 
the Internet Fax screen at the device. Select the field that contains the Internet Fax addresses, in 
many cases, there is no unique Internet Fax address, therefore, a regular e-mail address is used.
2. When you have finished making your selections click on the [Save] button.
At the Device:
1. Select the [E-mail] or [Internet Fax] icon, then touch [OK]. It may be necessary to press the 
 button.
2. Touch the [To] button.
3. Enter a name which corresponds with an entry in your company’s e-mail address list, using the on-
screen keyboard touch screen, for example: lastname, firstname.
4. Touch [Enter]. The Search Results screen displays. 
5. Select the required name from the list (if there is more than one match).
6. Touch the [Add]: button to select the name as a recipient for your e-mail.
7. Touch [Done]. The e-mail address will appear in the Address List.
8. Place a document to e-mail in the document handler and press the green start button.
9. Verify that the recipient received the scanned document in his/her e-mail inbox.
To Configure Authorization Access
LDAP server user groups can be used to control access to certain areas of the Xerox device. For example, 
the LDAP server may contain a group of users called ‘Admin’. You can configure the ‘Admin’ group on  
						

							Network Configuration
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide 118
the device so that the members of that group will have administrator access to the device. When a user 
logs in at the device with their network authentication account, the device performs an LDAP look-up 
to determine if the user is a member of any groups, (LDAP server will find members nested down five 
levels of a group. For example, if LDAP searches for a user within the Admin Group, it may not find that 
user, but may find another group. It will also look for the user in that group as well and so on). If the 
LDAP server confirms that the user is a member of the ’Admin’ group, the user will have administrator 
access to the device. 
There are three ways to configure access to various group accounts:
•User Roles
•Device Access
•Service Access
Setup User Role Access At Your Workstation:
1. From the LDAP screen, click on the [Authorization Access] tab under the LDAP title at the top of 
the screen.
2. Select the [User Roles] tab. Use this tab to define the access groups that are authorized for the 
following roles:
•For the System Administrator Access [Access Group] field, enter the name of a group, 
defined at the LDAP server, that you want to provide with System Administrator access to the 
device. 
•In the Accounting Administrator Access [Access Group] field, enter the name of a group, 
defined at the LDAP server, that you want to provide with accounting administrator access to 
the device. 
3. To verify either group, enter the name of one of the members of the LDAP server group in the 
[User Name box], then click on the [Test] button.
Under the Te s t  R e s u l t s column, it will display Access. If the test result displays No Access, this will 
mean that the user name is not a member of the Access Group, or the Access Group name was 
misspelled, or that the Access Group does not exist.
Note:When an access group is entered in one of the Access Group fields, only the members from 
that group will have access to those features. When no access group is listed, all members will have 
access.
4. When done, click on the [Close] button.
Setup Device Access at Your Workstation:
1. From the LDAP screen, click on the [Authorization Access] tab under the LDAP title at the top of 
the screen.
2. Select the [Device Access] tab. 
a. For Services Pathway [Access Group] field, enter the name of a group, defined at the LDAP 
server, that you want to provide with Service access to the device. 
b. Repeat the process for Job Status Pathway and Machine Status Pathway.  
						

							Network Configuration
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide119
c. To verify any of these groups, enter a name of one of the members of the LDAP server groups 
in the [Enter User Name] field, then click on the [Test] button.
Under the Test Results column, it will display Access. If the test result displays No Access, 
this will mean that the user name is not a member of the Access Group, or the Access Group 
name was misspelled, or that the Access Group does not exist
Note:When an access group is entered in one of the Access Group fields, only the members from 
that group will have access to those features. When two or more groups are entered, they must be 
separated by commas. When no access group is listed, all members will have access 
d. When done, click on the [Close] button. 
Setup Service Access at Your Workstation:
1. From the LDAP screen, click on the [Authorization Access] tab under the LDAP title at the top of 
the screen.
2. Select the [Service Access] tab, use this tab to define the groups that are authorized to access 
various device functions and services.
a. Enter the names of LDAP groups, as required in the Access Group field, to allow access to 
individual device services.
Note:By default everybody has access to all of the services on the device. By entering a group 
name in any of the services, access is then restricted to those users belonging to that group.
b. Verify each group by entering a group user in the Enter User Name field, and click on the 
[Test] button.
Under the Test Results column, it will display Access. If the test result displays No Access, 
this will mean that the user name is not a member of the Access Group, or the Access Group 
name was misspelled, or that the Access Group does not exist
Note:When an access group is entered in one of the Access Group fields, only the members from 
that group will have access to those features. When no access group is listed, all members will have 
access.
c. When done, click on the [Close]. 
Configure Custom Filters
This feature allows the System Administrator to specify custom filter information for LDAP servers. 
These filters, for example, allow you to filter out non-users such as machines.
1. From the LDAP screen, click on the [Custom Filters] tab under the LDAP title at the top of the 
screen.
2. In the LDAP Authentication area, check the [Append base DN] checkbox to enable. This will 
specify the distinguished name(s) that will lead to the entry in the LDAP directory under which all 
users and groups will be retrieved. Distinguished name is a unique name for an entry in your LDAP 
directory. For example: cn=USERID, o=xerox, c=us.
Note:Many UNIX/Linux LDAP servers require this attribute to be set and is used frequently when 
Login Credentials to Access LDAP Server is set to [Authenticated User].
3. In the Email Address Book Filter area:
a. Check the [Enable Custom Filter] checkbox. 
						

							Network Configuration
WorkCentre™ 5735/5740/5745/5755/5765/5775/5790
System Administrator Guide 120
b. In the field provided, type in the LDAP search string (filter) that you wish to apply. The filter 
defines a series of conditions that the LDAP search must fulfill in order to return the 
information you seek. The form of the typed search string (filter) is LDAP objects placed inside 
parentheses. For example, to find all users that have an e-mail attribute (mail enabled), type 
(objectClass=user) (mail=*). If you are not familiar with LDAP search strings, use an Internet 
browser search to find examples.
4. In the User ID Query Filter area:
a. Check the [Enable Custom Filter] checkbox.
b. In the field provided, type in the LDAP search string (filter) that you wish to apply. The filter 
defines a series of conditions that the LDAP search must fulfill in order to return the 
information you seek. The form of the typed search string (filter) is LDAP attributes placed 
inside parentheses. For example, to find the user with a sAMAccountName of Bob, type 
(objectClass=user) (sAMAccountName=Bob). If you are not familiar with LDAP search strings, 
use an Internet browser search to find examples.
5. Click on the [Apply] button to implement any changes.
6. Click on the [OK] button when you see the message “Properties have been successfully 
modified”.