Users Guide

Remote Access: SNMP Authentication Failure
As part of discovery, IT Assistant attempts to verify the device’s get and set community names. In IT
Assistant, the get community name = public and the set community name = private. By default, the
community name for the CMC agent is public. When IT Assistant sends out a set request, the CMC agent
generates the SNMP authentication error because it only accepts requests from community = public.
Change the CMC community name using RACADM. To see the CMC community name, use the following
command:
racadm getconfig -g cfgOobSnmp
To set the CMC community name, use the following command:
racadm config -g cfgOobSnmp -o cfgOobSnmpAgentCommunity <community name>
To prevent SNMP authentication traps from being generated, enter input community names that are
accepted by the agent. Since CMC only allows one community name, enter the same get and set
community name for IT Assistant discovery setup.
Active Directory
Does Active Directory support CMC login across multiple trees?
Yes. The CMC’s Active Directory querying algorithm supports multiple trees in a single forest.
Does the login to CMC using Active Directory work in mixed mode (that is, the domain controllers in
the forest run different operating systems, such as Microsoft Windows 2000 or Windows Server 2003)?
Yes. In mixed mode, all objects used by the CMC querying process (among user, RAC Device Object, and
Association Object) must be in the same domain.
The Dell-extended Active Directory Users and Computers Snap-In checks the mode and limits users in
order to create objects across domains, if in a mixed mode.
Does using CMC with Active Directory support multiple domain environments?
Yes. The domain forest function level must be in Native mode or Windows 2003 mode. In addition, the
groups among Association Object, RAC user objects, and RAC Device Objects (including Association
Object) must be universal groups.
Can these Dell-extended objects (Dell Association Object, Dell RAC Device, and Dell Privilege Object)
be in different domains?
The Association Object and the Privilege Object must be in the same domain. The Dell-extended Active
Directory Users and Computers Snap-In allows to create these two objects in the same domain only.
Other objects can be in different domains.
Are there any restrictions on Domain Controller SSL configuration?
160