Database property names for security

Messages about security might refer to properties by their database names, most of which begin with WorkflowSystem. The database property names for security include the database property names for Lightweight Directory Access Protocol (LDAP).

In the Editable column:

  • Yes means that an authorized user can change the value after the initial security setup.
  • No means that an authorized user cannot change the value.

Security properties

Database name Notebook tab: Field name Brief description Internal values Editable
User.AccountStatus Security Users: Account status Shows the current status of the user account.
  • Active
  • Locked-Inactive
  • Locked-Password Failure
WorkflowSystem.AdLdap.EmailAddress Security Settings LDAP: Email attribute Specifies the LDAP attribute that RICOH ProcessDirector gets user email addresses from.   Yes
WorkflowSystem.AdLdap.GroupMap Security Settings LDAP: Product to LDAP group mapping Specifies the mapping of RICOH ProcessDirector groups to LDAP groups.   Yes
WorkflowSystem.AdLdap.GroupSearchBase Security Settings LDAP: Group search base Specifies the branch of the LDAP external directory tree that RICOH ProcessDirector searches to identify the organizational unit (OU) that contains LDAP groups.   Yes
WorkflowSystem.AdLdap.GroupSearchFilter Security Settings LDAP: Group search filter Specifies the filter that RICOH ProcessDirector uses to determine if a group with the specified name exists within the LDAP group search base.   Yes
WorkflowSystem.AdLdap.GroupSearchMember Security Settings LDAP: Group search member Specifies the LDAP attribute RICOH ProcessDirector uses to get the distinguished names of LDAP group members.   Yes
WorkflowSystem.AdLdap.ManagerDN Security Settings LDAP: Manager distinguished name Specifies the full distinguished name (DN) of the user that binds to the LDAP server for user searches.   Yes
WorkflowSystem.AdLdap.ManagerPassword Security Settings LDAP: Manager distinguished name password Specifies the password for the user listed in the Manager distinguished name property.   Yes
WorkflowSystem.AdLdap.rootDN Security Settings LDAP: Root distinguished name Specifies the distinguished name (DN) that is not limited by administrative limit restrictions or access control restrictions for the database.   Yes
WorkflowSystem.AdLdap.Server Security Settings LDAP: LDAP server Specifies either the network IP address or the fully-qualified host name of one or more LDAP servers and the ports that the system uses for authentication.   Yes
WorkflowSystem.AdLdap.SyncLdapGrp Security Settings LDAP: Synchronize with LDAP groups Specifies if RICOH ProcessDirector updates the product security groups for a user, based on the values for the Product to LDAP group mapping property, each time the user logs in.
  • Yes
  • No
WorkflowSystem.AdLdap.UserSearchBase Security Settings LDAP: User search base Tells the server which part of the external directory tree to search, relative to the base distinguished name (DN) in the LDAP URL.   Yes
WorkflowSystem.AdLdap.UserSearchFilter Security Settings LDAP: User search filter Specifies the filter that RICOH ProcessDirector uses to determine if a distinguished name (DN) of the user exists in LDAP.   Yes
WorkflowSystem.AdLdap.YesNo Security Settings LDAP: Authenticate with LDAP Specifies whether users can log in to RICOH ProcessDirector with a user ID that is defined in the existing Lightweight Directory Access Protocol (LDAP) server.
  • Yes
  • No
WorkflowSystem.ComplexRules Security Settings General: Enforce password complexity rules Specifies whether all users must use complex passwords.
  • Yes
  • No
WorkflowSystem.InactiveLength Security Settings General: Account inactivity period Specifies the number of days that RICOH ProcessDirector lets a user account be inactive before that user is locked out of the system.   Yes
WorkflowSystem.LockOutLength Security Settings General: Lockout duration Specifies the amount of time that RICOH ProcessDirector locks a user out of the system after the user exceeds the Account login threshold. The unit of time for the value can be minutes, hours, or days. Use the toggle control to the right of the property name to select the unit of time for the value.   Yes
WorkflowSystem.MaxLoginAttempts Security Settings General: Account lockout threshold Specifies the number of unsuccessful login or password change attempts that are allowed before the user is locked out.   Yes
WorkflowSystem.MinPasswordLength Security Settings General: Minimum password length Specifies the minimum number of characters required for a password.   Yes
WorkflowSystem.PasswordReuseCount Security Settings General: Password reuse count Specifies how many times a user must enter a unique password before they can reuse an old password.   Yes