1.
Run the
ktpass
utility on the domain controller (Active Directory server) where you want to map CMC to a user
account in Active Directory.
2.
Use the following
ktpass
command to create the Kerberos keytab file:
C:\>ktpass -princ HTTP/cmcname.domain_name.com@REALM_NAME.COM - mapuser
dracname -crypto DES-CBC-MD5 -ptype KRB5_NT_PRINCIPAL -pass * -out c:
\krbkeytab
NOTE: The
cmcname.domainname.com
must be lower case as required by RFC and the
@REALM_NAME
must be uppercase. In addition, CMC supports the DES-CBC-MD5 type of cryptography for Kerberos
authentication.
A keytab file is generated that must be uploaded to CMC.
NOTE: The keytab contains an encryption key and must be kept secure. For more information on the
ktpass
utility, see the Microsoft website.
Configuring CMC For Active Directory Schema
For information to configure CMC for Active Directory standard schema, see
Configuring Standard Schema Active
Directory
.
For information to configure CMC for Extended Schema Active Directory, see
Extended Schema Active Directory
Overview
.
Configuring Browser For SSO Login
Single Sign-On (SSO) is supported on Internet Explorer versions 6.0 and later and Firefox versions 3.0 and later.
NOTE: The following instructions are applicable only if CMC uses Single Sign-On with Kerberos authentication.
Internet Explorer
To configure Internet Explorer for Single Sign-On:
1.
In the Internet Explorer, select Tools
→
Internet Options.
2.
On the Security tab, under Select a zone to view or change security settings, select Local Intranet.
3.
Click Sites.
The Local Intranet dialog box is displayed.
4.
Click Advanced .
The Local Intranet Advance Settings dialog box is displayed.
5.
In the Add this site to the zone, type the name of CMC and the domain it belongs to and click Add.
NOTE: You can use a wildcard (*) to specify all devices or users in that domain.
Mozilla Firefox
1.
In Firefox, type about:config in the Address bar.
NOTE: If the browser displays the This might void your warranty warning, click I'll be careful. I promise.
2.
In the Filter text box, type negotiate.
The browser displays a list of preference names limited to those containing the word negotiate.
3.
From the list, double-click network.negotiate-auth.trusted-uris.
4.
In the Enter string value dialog box, type the CMC's domain name and click OK.
133
Содержание Chassis Management Controller
Страница 1: ...Dell Chassis Management Controller Firmware Version 4 3 User s Guide ...
Страница 42: ...42 ...
Страница 56: ...56 ...
Страница 84: ...84 ...
Страница 98: ...98 ...
Страница 104: ...104 ...
Страница 130: ...130 ...
Страница 136: ...136 ...
Страница 200: ...200 ...
Страница 214: ...214 ...