Installation Manual

170 Using the iDRAC6 Directory Service
19 Select one of the following options:
• Select the
Look Up Global Catalog Servers with DNS option and
enter the
Root Domain Name to use on a DNS lookup to obtain the
Active Directory Global Catalog Servers. Global Catalog Server
Addresses 1-3 are ignored. iDRAC6 attempts to connect to each of the
addresses (first 4 addresses returned by the DNS lookup) one by one
until it makes a successful connection. A Global Catalog server is
required only for Standard Schema in the case that the user accounts
and the role groups are in different domains.
• Select the
Specify Global Catalog Server Addresses option and enter
the IP address or the Fully Qualified Domain Name (FQDN) of the
Global Catalog server(s). DNS lookup is not performed. At least one
of the three addresses must be configured. iDRAC6 attempts to
connect to each of the configured addresses one by one until it makes
a successful connection. Global Catalog server is required only for
Standard Schema in the case that the user accounts and the role
groups are in different domains.
NOTE: The FQDN or IP address that you specify in the Global Catalog Server
Address field should match the Subject or Subject Alternative Name field of
your domain controller certificate if you have certificate validation enabled.
NOTE: The Global Catalog server is only required for standard schema in the
case that the user accounts and the role groups are in different domains.
And, in this multiple domain case, only the Universal Group can be used.
20 Under Role Groups , click a Role Group .
The
Active Directory Configuration and Management Step 4b of 4 page
is displayed.
21 Specify the Role Group Name .
The
Role Group Name identifies the role group in Active Directory
associated with the iDRAC.
22 Specify the Role Group Domain , which is the domain of the Role Group.
23 Specify the Role Group Privileges by selecting the Role Group Privilege
Level
. For example, if you select Administrator , all the privileges are
selected for that level of permission.