Installation Manual

164 Using the iDRAC6 Directory Service
If you want to use DNS lookup to obtain the Active Directory Domain
Controller server address, type the following command:
racadm config -g cfgActiveDirectory -o
cfgADDcSRVLookupEnable=1
• To perform the DNS lookup with the domain name of the login user:
racadm config -g cfgActiveDirectory -o
cfgADDcSRVLookupbyUserdomain=1
• To specify the domain name to use on the DNS lookup:
racadm config -g cfgActiveDirectory -o
cfgADDcSRVLookupDomainName <domain name to use
on the DNS lookup>
If you want to disable the certificate validation during SSL handshake,
type the following
RACADM command:
racadm config -g cfgActiveDirectory -o
cfgADCertValidationEnable 0
In this case, you do not have to upload a CA certificate.
If you want to enforce the certificate validation during SSL handshake,
type the following
RACADM command:
racadm config -g cfgActiveDirectory -o
cfgADCertValidationEnable 1
In this case, you must upload a CA certificate using the following
RACADM command:
racadm config -g cfgActiveDirectory -o
cfgADCertValidationEnable 1
racadm sslcertupload -t 0x2 -f < ADS root CA
certificate
>
Using the following RACADM command may be optional. See "Importing
the iDRAC6 Firmware SSL Certificate" on page 145 for additional
information.
racadm sslcertdownload -t 0x1 -f < RAC SSL
certificate
>