Users Guide

Configuring IPMI over LAN using iDRAC settings utility..........................................................................................116
Configuring IPMI over LAN using RACADM..............................................................................................................116
Enabling or disabling remote RACADM............................................................................................................................117
Enabling or disabling remote RACADM using web interface...................................................................................117
Enabling or disabling remote RACADM using RACADM..........................................................................................117
Disabling local RACADM.....................................................................................................................................................117
Enabling IPMI on managed system...................................................................................................................................117
Configuring Linux for serial console during boot in RHEL 6..........................................................................................118
Enabling login to the virtual console after boot........................................................................................................ 118
Configuring serial terminal in RHEL 7.............................................................................................................................. 120
Controlling GRUB from serial console....................................................................................................................... 120
Supported SSH cryptography schemes.......................................................................................................................... 121
Using public key authentication for SSH...................................................................................................................122
7 Configuring user accounts and privileges.................................................................................... 125
iDRAC user roles and privileges........................................................................................................................................125
Recommended characters in user names and passwords........................................................................................... 126
Configuring local users...................................................................................................................................................... 126
Configuring local users using iDRAC web interface.................................................................................................127
Configuring local users using RACADM.....................................................................................................................127
Configuring Active Directory users..................................................................................................................................128
Prerequisites for using Active Directory authentication for iDRAC.......................................................................128
Supported Active Directory authentication mechanisms....................................................................................... 130
Standard schema Active Directory overview...........................................................................................................130
Configuring Standard schema Active Directory........................................................................................................131
Extended schema Active Directory overview.......................................................................................................... 133
Configuring Extended schema Active Directory......................................................................................................135
Testing Active Directory settings...............................................................................................................................142
Configuring generic LDAP users...................................................................................................................................... 142
Configuring generic LDAP directory service using iDRAC web-based interface.................................................142
Configuring generic LDAP directory service using RACADM.................................................................................143
Testing LDAP directory service settings...................................................................................................................143
8 System Lockdown mode............................................................................................................ 145
9 Configuring iDRAC for Single Sign-On or smart card login............................................................ 147
Prerequisites for Active Directory Single Sign-On or smart card login....................................................................... 147
Registering iDRAC as a computer in Active Directory root domain.......................................................................147
Creating Active Directory objects and providing privileges.................................................................................... 148
Configuring iDRAC SSO login for Active Directory users.............................................................................................148
Creating a User in Active Directory for SSO............................................................................................................ 148
Generating Kerberos keytab file.................................................................................................................................149
Configuring iDRAC SSO login for Active Directory users using web interface....................................................149
Configuring iDRAC SSO login for Active Directory users using RACADM...........................................................149
Management Station Settings................................................................................................................................... 150
Enabling or disabling smart card login............................................................................................................................. 150
Enabling or disabling smart card login using web interface.................................................................................... 150
Enabling or disabling smart card login using RACADM........................................................................................... 150
Enabling or disabling smart card login using iDRAC settings utility........................................................................ 151
Contents
7