Users Guide

Using the DRAC 5 With Microsoft Active Directory 127
Are there any restrictions on Domain Controller
SSL configuration?
Yes. All Active Directory servers’ SSL certificates in the forest
must be signed by the same root CA since DRAC 5 only allows
uploading one trusted CA SSL certificate.
I created and uploaded a new RAC certificate and
now the Web-based interface does not launch.
If you use Microsoft Certificate Services to generate the RAC
certificate, one possible cause of this is you inadvertently chose
User Certificate instead of Web Certificate when creating the
certificate.
To recover, generate a CSR and then create a new web
certificate from Microsoft Certificate Services and load it using
the RACADM CLI from the managed system by using the
following racadm commands:
racadm sslcsrgen [-g] [-u] [-f {filename}]
racadm sslcertupload -t 1 -f {web_sslcert}
What can I do if I cannot log into the DRAC 5
using Active Directory authentication? How do I
troubleshoot the issue?
1 Ensure that you use the correct user domain name during a
login and not the NetBIOS name.
2 If you have a local DRAC user account, log into the DRAC 5
using your local credentials.
After you are logged in, perform the following steps:
a Ensure that you have checked the Enable Active Directory
box on the DRAC 5 Active Directory configuration page.
b Ensure that the DNS setting is correct on the DRAC 5
Networking configuration page.
c Ensure that you have uploaded the Active Directory
certificate from your Active Directory root CA to the
DRAC 5.
d Check the Domain Controller SSL certificates to ensure that
they have not expired.
e Ensure that your DRAC Name , Root Domain Name , and
DRAC Domain Name match your Active Directory
environment configuration.
f Ensure that the DRAC 5 password has a maximum of 127
characters. While the DRAC 5 can support passwords of up
to 256 characters, Active Directory only supports passwords
that have a maximum length of 127 characters.
Table 6-9. Using DRAC 5 With Active Directory: Frequently Asked Questions (continued)
Question Answer