Users Guide

Using the DRAC 5 With Microsoft Active Directory 119
Configuring the DRAC 5 With Extended Schema Active Directory and
RACADM
Using the following commands to configure the DRAC 5 Active Directory Feature with Extended
Schema using the RACADM CLI tool instead of the Web-based interface.
1
Open a command prompt and type the following racadm commands:
racadm config -g cfgActiveDirectory -o cfgADEnable 1
racadm config -g cfgActiveDirectory -o cfgADType 1
racadm config -g cfgActiveDirectory -o cfgADRacDomain <
fully
qualified rac domain name
>
racadm config -g cfgActiveDirectory -o cfgADRootDomain <
fully
qualified root domain name
>
racadm config -g cfgActiveDirectory -o cfgADRacName <
RAC common name >
racadm sslcertupload -t 0x2 -f <
ADS root CA certificate >
racadm sslcertdownload -t 0x1 -f <
RAC SSL certificate >
2
If DHCP is enabled on the DRAC 5 and you want to use the DNS provided by the DHCP server, type
the following racadm command:
racadm config -g cfgLanNetworking -o cfgDNSServersFromDHCP 1
3
If DHCP is disabled on the DRAC 5 or you want manually to input your DNS IP address, type
following racadm commands:
racadm config -g cfgLanNetworking -o cfgDNSServersFromDHCP 0
racadm config -g cfgLanNetworking -o cfgDNSServer1
<primary DNS IP
address>
racadm config -g cfgLanNetworking -o cfgDNSServer2 <secondary DNS IP
address>
4 Press Enter to complete the DRAC 5 Active Directory feature configuration.
Standard Schema Active Directory Overview
As shown in Figure 6-4, using standard schema for Active Directory integration requires configuration on
both Active Directory and the DRAC 5. On the Active Directory side, a standard group object is used as
a role group. A user who has DRAC 5 access will be a member of the role group. In order to give this user
access to a specific DRAC 5 card, the role group name and its domain name need to be configured on the
specific DRAC 5 card. Unlike the extended schema solution, the role and the privilege level is defined on
each DRAC 5 card, not in the Active Directory. Up to five role groups can be configured and defined in
each DRAC 5. Table 4-15 shows the privileges level of the role groups and Table 6-8 shows the default
role group settings.