Dell IDRAC6, Руководство пользователя

Страница: 170 / 472

170
Enabling Kerberos Authentication
• iDRAC6 time should be synchronized with the Active Directory domain
controller.
Configuring iDRAC6 for single sign-on and Active
Directory Authentication Using Smart Card
Upload the keytab obtained from the Active Directory root domain,
to the iDRAC6:
1
Click System
→
Remote Access
→
iDRAC6
→
Network/Security
→
Active
Directory
2
At the bottom of the page, click Kerberos Keytab Upload .
3
On the Kerberos Keytab Upload page, select the keytab file to upload
and click Apply .
You can also upload the file to iDRAC6 by using CLI racadm commands.
The following command uploads the keytab file to iDRAC6:
racadm krbkeytabupload -f <filename>
where < filename > is the name of the keytab file.
Configuring Active Directory Users for single
sign-on Logon
Before using the Active Directory single sign-on logon feature, ensure that
you have already configured iDRAC6 for Active Directory login and the
domain user account that you will use to login into the system has been
enabled for iDRAC6 Active Directory login.
Also ensure that you have enabled the Active Directory logon setting. You
must also enable the iDRAC6 to be a kerberized service by uploading a valid
keytab file obtained from the Active Directory root domain, to iDRAC6.
Logging Into iDRAC6 Using single sign-on for
Active Directory Users
NOTE:
To log into iDRAC6, ensure that you have the latest runtime components of
Microsoft Visual C++ 2005 Libraries. For more information, see the Microsoft
website.