Dell iDRAC7, User Manual

Page: 141 / 252

– Using config command:
racadm config -g cfgActiveDirectory -o
cfgADCertValidationEnable 1
– Using set command:
racadm set iDRAC.ActiveDirectory.CertValidationEnable 1
In this case, you must upload a CA certificate:
racadm sslcertupload -t 0x2 -f <ADS root CA certificate>
NOTE: If certificate validation is enabled, specify the Domain Controller Server addresses and the FQDN.
Make sure that DNS is configured correctly under Overview
→
iDRAC Settings
→
Network.
Using the following RACADM command may be optional:
racadm sslcertdownload -t 0x1 -f <RAC SSL certificate>
2. If DHCP is enabled on iDRAC7 and you want to use the DNS provided by the DHCP server, enter the following
RACADM command:
– Using config command:
racadm config -g cfgLanNetworking -o cfgDNSServersFromDHCP
1
– Using set command:
racadm set iDRAC.IPv4.DNSFromDHCP 1
3. If DHCP is disabled in iDRAC7 or you want to manually input your DNS IP address, enter the following RACADM
commands:
– Using config command:
racadm config -g cfgLanNetworking -o cfgDNSServersFromDHCP 0
racadm config -g cfgLanNetworking -o cfgDNSServer1 <primary DNS IP
address>
racadm config -g cfgLanNetworking -o cfgDNSServer2 <secondary DNS IP
address>
– Using set command:
racadm set iDRAC.IPv4.DNSFromDHCP 0
racadm set iDRAC.IPv4.DNSFromDHCP.DNS1 <primary DNS IP address>
racadm set iDRAC.IPv4.DNSFromDHCP.DNS2 <secondary DNS IP address>
4. If you want to configure a list of user domains so that you only need to enter the user name during log in to iDRAC7
Web interface, enter the following command:
– Using config command:
racadm config -g cfgUserDomain -o cfgUserDomainName <fully
qualified domain name or IP Address of the domain controller> -i <index>
– Using set command:
racadm set iDRAC.UserDomain.<index>.Name <fully qualified
domain name or IP Address of the domain controller>
You can configure up to 40 user domains with index numbers between 1 and 40.
5. Press Enter to complete the Active Directory configuration with Extended Schema.
Testing Active Directory Settings
You can test the Active Directory settings to verify whether your configuration is correct, or to diagnose the problem
with a failed Active Directory log in.
Testing Active Directory Settings Using iDRAC7 Web Interface
To test the Active Directory settings:
1. In iDRAC7 Web Interface, go to Overview
→
iDRAC Settings
→
User Authentication
→
Directory Services
→
Microsoft Active Directory.
The Active Directory summary page is displayed.
2. Click Test Settings.
141