Xerox Multifunction Devices Customer Tips

dc02cc306 … for the user June 10, 2003 Configuring a NetWare Server for Scanning via FTP Over IP Purpose This document describes how to set up the Novell file system and FTP services for scan to file on a NetWare server 5.1 or 6.x. It does not walk users through configuring the NetWare server with CentreWare Scanning Services. For information on how to use the CentreWare Scanning software, use the CentreWare Network Scanning Services Admin Guide located on the CentreWare scan software installation CD. Xerox devices and CentreWare support the following protocols for scan to file: ƒ FTP over IP ƒ NCP over IPX Because these devices do not support NCP over IP, you must either use NCP over IPX or FTP over IP to enable scan-to-file in a Novell environment. Note: The DC 555/545/535 and the WorkCentre Pro devices also support scanning via SMB over IP. This filing protocol is also supported starting with CentreWare 5.5 Network Scanning Services. However, there are no plans to add support for the SMB over IP filing to devices prior to the DC 555/545/535.

Installation Requirements This document applies Before installing NetWare FTP Services, the systems administrator should have the to these Xerox following items ready: products: ƒ The Novell NetWare Operating System CD loaded in the server’s CD-ROM drive. x WC Color 32/40 ƒ The CD-ROM mounted as a volume. To do so, enter the command ‘CDROM’ at the x WC Pro 65/75/90 server’s console prompt. x WC Pro 35/45/55 ƒ A minimum of 200mb free storage to install NetWare FTP Services. WC Basic 35/45/55 ƒ Access to the Novell Service Pack currently installed. x DC 555/545/535 x DC 490/480/470/460 x DC 440/432/425/420 x DC 340/332 x DC 265/255/240 x DC 230/220 DCCS 50 dc02cc0306 Customer Service Page 1 How This Document is Organized This document is organized as follows: ƒ Setting up the Novell File System ¾Installing the NFS Name Space ¾Setting Up the Scan Repository Folder ¾Configuring the Scan User Account ¾Sharing the Scan Repository Folder ¾Mapping a Network Drive ƒ Installing NetWare FTP Services ƒ Configuring NetWare FTP Services ƒ Testing FTP Services ƒ Re-Enabling FTP Security

Setting up the Novell File System For scanning services using IP to operate properly with all Document Center and WorkCentre Pro products, the NetWare volume where you create your scan folder repository requires the installation of NetWare's Network File System (NFS) name space. The NFS and NSS protocols support the Unix permissions that our Document Centre devices use. Note: Due to less complex implementation, we recommend NFS rather than NSS.

Installing the NFS Name Space 1. At either RCONJ or the server’s console prompt, type volumes and press Enter. You see the Mounted Volumes Name Spaces list. Proceed with one of the following: ƒ If the list already contains an NFS or NSS volume, skip the rest of this section and go to the section “Setting up the Scan Folder.” ƒ If NFS is not in the list, continue with this procedure.

dc02cc0306 Page 2 Customer Service 2. Enter the LOAD NFS command to run the service that provides NFS support.

3. Use the following command to add the NFS support to the scanning volume: add name space nfs to volume xxxx, where xxxx is the scanning volume name. Wait to receive the message: NFS name space support successfully added to volume xxxx.

dc02cc0306 Customer Service Page 3 4. Enter volumes again; to verify that the NFS name space is installed on the scanning volume. You should see NFS under that Mounted Volumes Name Spaces list. If not, repeat this process.

5. Set up the NFS service to run automatically on server startup. At the console prompt, run NWCONFIG. Select NCF files Options from the list and press Enter. 6. Select the Edit STARTUP.NCF file option and press Enter.

dc02cc0306 Page 4 Customer Service 7. Accept the default server boot path unless the DOS portion of the OS was installed to a non-default directory. If that is the case, enter that boot path. Press Enter.

8. Add the line LOAD NFS to the end of the file and then press the F10 key to save the changes. When you are prompted to save the file, select [Yes] and press Enter. You are returned to the NWCONFIG screen.

9. Press Esc until prompted to exit NWCONFIG. Select Yes and press Enter. The NFS name space support is now properly installed.

Setting Up the Scan Repository Folder Before you configure the FTP service, set up a directory as the FTPROOT in which to create your scan repository folder. 1. Open Windows Explorer, and browse to the Novell server and the volume where you wish to create the scan repository folder.

dc02cc0306 Customer Service Page 5 2. Create a directory to use as the scan repository (example scanning).

Configuring the Scan User Account Create the scan user account for scan to file. Choose any name for the user account (example: scanner). Generally, you locate a user account in the same context as the volume where the scan repository folder is located. If it is not, you must add an option to the FTP service so that it can access the context where the user is located and allow the user to log in. See the section on “Manually Configuring NetWare FTP Services” for instructions about how to add a search list. 1. Run NWADMN32. Change to the context where the scanning volume resides. Check to see if the scanner account is located in the same volume.

dc02cc0306 Page 6 Customer Service 2. If the scanner user is not in the object list in this context, right-click the context and click [Create]. Select User and click [OK].

3. Enter the login name (example: scanner) and a last name (example: scanuser). Check Define additional properties. Click [Create].

dc02cc0306 Customer Service Page 7 4. Click [Password Restrictions] and remove the check to Allow user to change password, and check Require a password. Then click Change Password.

5. If you wish, you can make the password the same as the user name. This makes it easier for troubleshooting purposes, but less secure. Enter a New password and retype it. Click [OK].

dc02cc0306 Page 8 Customer Service 6. Click [Environment]. Then click on the browse icon next to the Home Directory boxes to change the Home Directory of this scan user.

7. Browse the NetWare contexts to the volume containing the scan repository folder and select that folder (example: scanning). Click [OK].

dc02cc0306 Customer Service Page 9 8. Verify the volume, context and path are correct. Then click [Rights To Files and Directories] to give the user further explicit rights to the scan repository folder.

9. Give the user rights to the directory created for the scan repository. Click [Show] to gain access to the volumes and directories.

dc02cc0306 Page 10 Customer Service 10. Select the volume where the scan repository folder resides and click [OK].

11. Click [Add] next to Files and Directories.

dc02cc0306 Customer Service Page 11 12. Select the scan repository folder on this volume. Click [OK].

13. Enable all rights for the user with the exception of Supervisor and Access Control. Click [OK].

dc02cc0306 Page 12 Customer Service Sharing the Scan Repository Folder Next, share the scan repository folder. In Novell, this type of share is called a directory map. 1. Run NWAdmin and change to the context where the scanning volume is located. Right-click the volume and select [Create]. Select Directory Map from the list of new objects. Click [OK].

2. Enter the directory map name, which should be the same name as the scan repository folder (example: scanning). Click the browse icon, browse to the scan volume and select the scan repository folder. Click [OK]. The Volume and Path fields are populated with the correct information. Click [Create].

dc02cc0306 Customer Service Page 13 The following graphic shows the directory map object listed in the current context.

Mapping a Network Drive Note: You must follow the procedure in this section if you plan to use CentreWare Network Scanning Services to configure your scan server. If you plan to set up scanning via CentreWare Internet Services (the Document Centre’s embedded Web server), skip to the next section “Installing NetWare FTP Services.” With Windows NT/2000/XP clients, drives do not map to proper Novell distinguished names (as with Windows 98). The following procedures address Windows NT/2000/XP and Windows 98 workstations separately. Open NWAdmin, and double-click the scanning directory map icon to view the details of the object. Write down the Name exactly as you see it on the screen (example: scanning.Novell51.Xerox). This is the distinguished name of the directory map object. You only need this name if you are not using a Windows 98 workstation to administer scanning. Close the details window.

dc02cc0306 Page 14 Customer Service Mapping a Drive with Windows 98 1. Open Network Neighborhood and browse through Entire Network, to Novell Directory Services, then to the context where the scanning folder resides. 2. Right-click the scan repository folder and select Novell Map Network Drive. Check the options: Check to make folder appear as top most level and Check to always map this drive letter when you start Windows. Click Map. Click Close. Skip to the section, “Installing NetWare FTP Services.”

Mapping a Drive with Windows NT / 2000 / XP 1. Open Network Neighborhood and browse through Entire Network to Novell Directory Services then to the context where the scanning folder resides. Right click the scan repository folder and select Novell Map Network Drive, but do not map the drive yet.

dc02cc0306 Customer Service Page 15 2. Look at the network path on the Map Drive screen (not pictured). The network path is in the format, \\TREENAME\Organization\organizationalunit\Directory. This is not a proper Novell name; it is a UNC name. To correctly map the drive, change this path manually. Clear all text after \\treename\ and manually add the proper name that you wrote down from the Directory Map Details screen. It should be in the format, \\TREENAME\name.organization_unit.organization (example: \\Testlan\scanning.novell51.xerox).

Note: The graphic above shows how your network path should look. 3. Check the options, Check to make folder appear as top most level and Check to always map this drive letter when you start Windows. Click [Map].

Installing NetWare FTP Services Verify NetWare FTP Services is Installed At the server’s console prompt, type config and press Enter. Select Product Options and then select [View / Configure / Remove Installed Products]. Verify the NetWare FTP Server appears in the installed products list. If it is already installed, skip to the “Verify FTP Server is Running” section. Otherwise, continue with “Install FTP Services.”

dc02cc0306 Page 16 Customer Service Install FTP Services 1. Insert the NetWare operating system CD in the server’s CD-ROM. If it does not auto- mount, type CDROM at the console. Type volumes and press Enter to view the list of mounted volumes. Make note of the CD-ROM’s volume name. 2. At the console GUI, click on NOVELL and select INSTALL. Click ADD. When prompted to browse to the Source Path, click on the browse icon and select the CD- ROM volume name, then click on OK twice to display the option installation list. After you verify NetWare FTP Services is in the installation list, continue with the installation. a. If a screen appears with the option to Keep Current Settings or Overwrite, select Keep Current Settings. Click Next. b. A Summary screen appears and displays a list of the products you are installing. Click Next or Finish. c. Remove all checkmarks (if you do not, checked options install again), then select NetWare FTP Server. Web Manager is selected by default. Deselect it if you do not want it installed. 3. Click [Next] to continue with the installation process. 4. Use an administrator's user account and password to logon. In addition, you must enter the context in which the user account resides. Click OK. If the account has sufficient rights, the install begins. NOTE: When finished, the server does not ask you to reboot.

Verify the FTP Server is Running 1. At the console prompt, type modules nwFTPd and press Enter. 2. If nwFTPd does not show as loaded, at the console prompt, type load nwFTPd and press Enter to load the service in the background. 3. To determine the TCP/IP address of the FTP server, at the console prompt, type config and press Enter. Review the configuration information and note the IP address listed to use when you follow the procedure in “Testing FTP Services.”

Re-installing Service Packs An original installation of the FTP server is performed using the Novell NetWare operating system CD to ensure that all files for the new services copy properly onto the server. However, this also means that no patches are applied to the services. To ensure your NetWare server has the most up-to-date patches/fixes, reinstall the latest service pack that resided on the server prior to installing FTP services. After the service pack is reinstalled, restart the server.

Configuring NetWare FTP Services When you configure FTP services, you must restrict the scan user account to only their home directory. Novell FTP services can allow FTP users to move to the root of the context (down to the volume list). This means the home directory is not the account’s root folder. In order for CentreWare Scanning Services to work properly, you must restrict the scan user account to only their home directory. To restrict the scan user to only their home directory: 1. Open Windows Explorer, browse to the NetWare server and locate SYS:\ETC\FTPREST.TXT. Open the FTPREST.TXT file in Notepad. (WordPad or MS Word may add formatting to the top of the file and make it unreadable by the FTP service.) dc02cc0306 Customer Service Page 17 2. At the bottom of the file create a new line to add the login name of the scan user account (example: .scanner.novell51.xerox). Tab over and enter ACESS=GUEST. Add another blank line at the bottom and select [File, Save], then [File, Exit].

Note: If you are not certain what to enter as your scan user, open the details of the scan user in NWAdmin. The scan user account’s fully qualified name is displayed. The FTP server does not require you use the NetWare Web Manager but it is easier to manage the FTP service if you do so. Ask your system administrator if they have the NetWare Web Manager installed on your NetWare FTP server. Follow the procedure in “Configuring NetWare FTP Services via NetWare Web Manager” if your system administrator has the Web Manager installed. If the Web Manager is not installed, skip to the section “Manually Configuring NetWare FTP Services.”

Configuring NetWare FTP Services via the NetWare Web Manager Access to the FTP server’s configuration is gained through Web services. 1. Run Internet Explorer or Netscape. Clear the address line and enter https://xx.xx.xx.xx:port#/ where xx.xx.xx.xx is the IP address of the NetWare FTP server. If you are prompted to accept a security certificate; click [Yes]. Note: Use https not http. The default Web Management port is 2200. 2. Click on the button below NetWare FTP Server (it contains the name of your server).

dc02cc0306 Page 18 Customer Service 3. Enter an administrative user to login to the FTP server. In addition, if the user is not in the same context as the scanning volume, you must enter a qualified username (example: admin.digital.xerox) and a password. Click [OK].

4. When the FTP Server’s management screen appears, verify the FTP server's setting is On. If not, click [Server On]. Click the Server Settings link.

5. Set the Name space option to LONG and leave the other options as defaults. Verify the FTP port number is 21. Click [Save].

dc02cc0306 Customer Service Page 19 A popup message like this one appears to indicate the settings are successfully saved. Click [OK].

6. Click on the Security link. Check Disable Host Intruder detection and Disable User Intruder detection to disable all security. Record the settings so you can restore them later. We recommend you perform this as a temporary measure so no interference occurs during the initial installation. Click [Save].

After the installation is complete, see “Re-Enabling FTP Security” at the end of the document to re-enable the security intruder detection features. A popup message like this one appears to indicate the settings are successfully saved. Click [OK].

dc02cc0306 Page 20 Customer Service 7. Click on the User Settings link. Set the Default home directory to the volume and path that you created for the scanning installation (example: scan:\scanning). Set the options for Ignore NDS user home directory and stay in default FTP server directory and Ignore NDS user home directory if it’s on a remote NetWare server to NO. Set the home directory option to NO. Anonymous access to the FTP server is not required for scan to file. You can leave that set to NO. Click [Save].

A popup message like this one appears to indicate the settings are successfully saved. Click [OK].

FTP services are now properly configured. Each time you saved the settings, the service auto-stops and auto-starts again. If you wish to double check, click on the ON / OFF link and turn the server off and then on again. Close the Internet Explorer or Netscape.

dc02cc0306 Customer Service Page 21 Configuring NetWare FTP Services Manually If you have already configured the NetWare FTP services through the NetWare Web Manager, skip this section. 1. The sys:\etc\FTPserv.cfg file controls the FTP service. Use Notepad to open this file. WordPad or MS Word may add formatting to the top of the file and make it unreadable by the FTP service.

2. Temporarily disable FTP security. Instructions at the end of this document explain how to re-enable FTP security after you complete configuration. Scroll to the INTRUDER section and recover the values for INTRUDER_HOST_ATTEMPTS and INTRUDER_USER_ATTEMPTS. Set them both to 0. 3. Next, scroll to the bottom of the file. If these options do not appear: IGNORE_HOME_DIR = NO and IGNORE_REMOTE_HOME = NO, add them exactly as you see in the above image. The FTP server must log the scan user into its home directory, which is used for the CentreWare scan server installation. You may also want to set ANONYMOUS_ACCESS to NO because scan to file does not require anonymous access to the FTP server. If your scan user is in a different context than the volume containing the scan repository folder, you must also add an entry in the FTPserv.cfg file that points to the scan user’s context. Add a line at the end of this file using the same context as that of the scan user (example: SEARCH_LIST = novell51.xerox.digital.xerox). 4. Select [File, Save], then [File, Exit].

5. Stop and start the FTP service so that the new restrictions and user management settings to take effect. 6. At the server console, enter UNLOAD NWFTPD to unload (stop) the FTP service. Enter LOAD NWFTPD to load (start) the FTP service. The changes are now in effect, and you can skip to the section, "Sharing the Scanning Folder."

dc02cc0306 Page 22 Customer Service Testing FTP Services It is always a good idea to test the FTP services before attempting to scan a job. It is easier to troubleshoot any issues if you know the FTP services are properly configured. 1. Open an MS-Dos prompt (select [Start, Run], type cmd and select [OK]). 2. At the prompt, type FTP followed by the IP address of the NetWare server and press Enter. If the server is running, you are asked to login. 3. Enter the scan username (example: scanner) and press Enter. Enter the scan user's password when prompted. Press Enter. Confirmation of a successful login appears.

4. To verify the server is logged into the home/root directory, type CD / and press Enter. 5. Type ls to list the files. No files appear in the list. 6. Enter mkdir test and press Enter. If the command is successful, enter ls and press Enter. You should see test in the list.

dc02cc0306 Customer Service Page 23 7. To make certain the test folder resides in the home/root directory, open Windows Explorer and browse to the Novell context where the scanning volume is located and click on the shared directory map that you created. You should see a directory called test. Close Windows Explorer.

8. After you create the test directory, verify the scan user has deletion rights by deleting the directory through the FTP session. Type rmdir test and press Enter. A message appears indicating the directory was removed. Type ls and press Enter to verify it is removed. You should no longer see any files in the list.

dc02cc0306 Page 24 Customer Service Re-Enabling FTP Security Use the NetWare Web Manager or manually re-enable FTP security.

Re-Enable FTP Security Using the Web Manager 1. In the Web Manager, click the SECURITY link. Remove the checkmarks from both disable boxes, and re-enter the values that you recorded when you disabled security. The values in the following graphic are the defaults.

2. Click [Save]. The settings are restored and the service stops and starts.

Manually Re-Enable FTP Security 1. Open the file sys:\etc\ftpserv.cfg in Notepad. Scroll down to the options for INTRUDER and change the values from zero to the values that you recorded when you disabled security. The values on the screen are the defaults.

2. Click File, Save. At the server console prompt, type unload nwftpd, press Enter, type load nwftpd, and press Enter again to load the service with the new settings.

dc02cc0306 Customer Service Page 25 Additional Information Xerox Customer Service welcomes feedback on all documentation - send feedback via e- mail to: [email protected]. Other tips about Xerox multifunction devices are available at the following URL: http://www.xerox.com/DocumentCentreFamily/Tips.

XEROX ®, The Document Company ®, the digital X ®, and all Xerox product names are trademarks of XEROX CORPORATION. Other trademarks belong to their respective owners. Copyright © XEROX CORPORATION 2003. All Rights Reserved.

dc02cc0306 Page 26 Customer Service