e-ManualTopSite mapHelp

Category Top

Overview of This Function

Overview of Login Services

Default Authentication (Department ID Management)

Login Screens

SSO-H (Single Sign-On H)

Login Screens

System Requirements

SMS (Service Management Service)

SSO-H (Single Sign-On H)

Before Starting SMS (Preparations)

Specifying the SSL Encrypted Communication Settings

Before Logging In to SSO-H

Logging In to SMS

Logging In with the SMS Password

Logging In with the User Name and Password of the Machine

Logging In from the Remote UI Portal

Logging Out from SMS

Managing Applications

Starting/Stopping Applications

Uninstalling Applications

Confirming Application Preferences

Managing Application Licenses

Setting Application Authentication Information

Installing Applications

Managing System Applications and Login Services

Login Service Selection

Uninstalling a Login Service

Starting/Stopping System Applications

Uninstalling System Applications

Installing System Applications

Changing the Login Method for SMS

Confirming System Information

Confirming Application Data

Confirming License Files

Changing the Password

Managing Application Setting Information

Managing Application Logs

Logging In to SSO-H

Menu for Administrators

Setting the User Information for SSO-H

Registering/Editing User Data for Local Device Authentication

Registering/Editing User Data for Active Directory Authentication

Registering/Editing User Data for LDAP Server Authentication

Setting the SSO-H

Setting the User Authentication System

Registering/Editing LDAP Server Information

Setting the User Group to Register the Server Administrator

Specifying the Number of Users Displayed on the Touch Panel Display

Setting the Access Mode in Sites

Setting the Security for SSO-H

Allowing Administrators to Operate Using the Default Password

Setting Password Restrictions

Setting the Lockout Function

Setting Web Service Authentication System

Menu for General Users

File Formats for Local Device Authentication User Information Files

SDL Format

NetSpot Accountant 3.x Format

NetSpot Accountant 4.x Format

Troubleshooting

Trouble That May Occur When the Windows Server Firewall Is Set

Other Trouble

Top » MEAP » File Formats for Local Device Authentication User Information Files » SDL Format
SDL Format
0L3X-23R
The SDL format is the format used for local device authentication. This format adopts the LDIF file format, which sues the ldif file extension. LDIF (LDAP Data Interchange Format) is used for transferring directory information between LDAP directory servers, etc.
Each record in an LDIF file is separated by at least one empty line. A record comprises multiple lines that do not include any empty lines. Each record contains an ID line (which can be omitted) and multiple entries. Each entry contains an attribute name and attribute value separated by a colon. If only blank spaces appear after the colon, that entry is ignored. However, if an entry is divided by a line break code and one space, that line break code and space are ignored. Characters after this are handled as if they are connected to the previous line, even if they are spaces. Either carriage return + line feed or line feed only can be used as the line break code. Line breaks are not allowed before the colon. Lines starting with # are ignored.
UTF-8 is used for character encoding.
Examples:
dn: uid=J00001
userPassword: {sdl}1234567890abcdefghijklmn
canonUid: 1000001
canonPwd: 1010001
cn: SampleUser01
cn;lang-ja;phonetic:
mail: SampleUser.J00001@example.co.jp
objectClass: top
objectClass: person
Input File Format
Attribute name
Can be omitted?
Default value used when omitted
Item name in SSO-H
Description
dn
No
-
User Name
"uid="login user name ("uid=" can be omitted). Must be from 1 to 32 characters. You cannot include spaces or the following symbols (\ / : * ? l < > [ ] ; , = + @ ") .
userPassword
Yes
-
Password (corresponding to the user name)
When encrypted: the attribute value starts with "{sdl}". Use the encrypted value from the exported file.
When not encrypted: You can leave this blank or enter up to 32 characters.
canonUid
Yes
-
Department ID
Must be from 1 to 7 digits.
canonPwd
Yes
-
PIN (corresponding to the department ID)
You can leave this blank or enter up to 7 digits.
cn
Yes
null
Displayed As
You can leave this blank or enter up to 32 characters.
cn;lang-ja;phonetic
Yes
null
-
-
mail
Yes
null
E-Mail Address
You can leave this blank or enter up to 256 ASCII characters. The format of e-mail addresses is not checked.
Role
Yes
General User
Select Role to Set
If you select "Administrator," the user type is set as the administrator. If it is omitted, default role is set.
objectClass
Yes
null
"top"
"top" (fixed)
objectClass
No
Not limited
"person"
"person" (fixed)
The attribute names can be specified in any order. Unnecessary attribute names can be omitted.
User Type is not included in the input format. After the import is performed, edit it to "Administrator" as necessary.
Output File Format
Attribute name
Corresponding user information on the [Register]/[Edit] screen of [User Management]
Description
dn
User Name
The login user name.
userPassword
Password (corresponding to the user name)
The attribute value starts with "{sdl}" and the password is encrypted.
canonUid
Department ID
The department ID.
canonPwd
PIN (corresponding to the department ID)
Is not encrypted. If there are not enough digits, zeros are added to the start of the number.
cn
Displayed As
The display name.
cn;lang-ja;phonetic
-
-
mail
E-Mail Address
The e-mail address.
Role
Select Role to Set
If you select "Administrator," the user type is set as the administrator. If it is omitted, default role is set.
objectClass
-
"top" (fixed)
objectClass
-
"person" (fixed)
User Type is not output.