Users Guide

You can upload a Kerberos Keytab generated on the associated Active Directory Server. You can generate the Kerberos Keytab from
the Active Directory Server by executing the ktpass.exe utility. This keytab establishes a trust relationship between the Active
Directory Server and CMC.
To upload the keytab le:
1.
In the left pane, click Chassis Overview → User Authentication → Directory Services.
2. Select Microsoft Active Directory (Standard Schema).
3. In the Kerberos Keytab section, click Browse, select a keytab le, and click Upload.
When the upload is complete, a message is displayed indicating whether or not the keytab le is successfully uploaded.
Conguring CMC SSO Or Smart Card Login For Active Directory Users Using RACADM
In addition to the steps performed while conguring Active Directory, run the following command to enable SSO:
racadm config -g cfgActiveDirectory -o cfgADSSOEnable 1
In addition to the steps performed while conguring Active Directory, use the following objects to enable smart card login:
• cfgSmartCardLogonEnable
• cfgSmartCardCRLEnable
133