Users Guide

racadm getconfig -g cfgOobSnmp
To set the CMC community name, use the following command:
racadm config -g cfgOobSnmp -o cfgOobSnmpAgentCommunity <community name>
To prevent SNMP authentication traps from being generated, enter input community names that are accepted by the agent. Since CMC
only allows one community name, enter the same get and set community name for IT Assistant discovery setup.
Active Directory
Does Active Directory support CMC login across multiple trees?
Yes. The CMC’s Active Directory querying algorithm supports multiple trees in a single forest.
Does the login to CMC using Active Directory work in mixed mode (that is, the domain controllers in the forest run dierent
operating systems, such as Microsoft Windows 2000 or Windows Server 2003)?
Yes. In mixed mode, all objects used by the CMC querying process (among user, RAC Device Object, and Association Object) must be in
the same domain.
The Dell-extended Active Directory Users and Computers Snap-In checks the mode and limits users in order to create objects across
domains, if in a mixed mode.
Does using CMC with Active Directory support multiple domain environments?
Yes. The domain forest function level must be in Native mode or Windows 2003 mode. In addition, the groups among Association Object,
RAC user objects, and RAC Device Objects (including Association Object) must be universal groups.
Can these Dell-extended objects (Dell Association Object, Dell RAC Device, and Dell Privilege Object) be in dierent domains?
The Association Object and the Privilege Object must be in the same domain. The Dell-extended Active Directory Users and Computers
Snap-In allows to create these two objects in the same domain only. Other objects can be in dierent domains.
Are there any restrictions on Domain Controller SSL conguration?
Yes. All SSL certicates for Active Directory servers in the forest must be signed by the same root certicate authority-signed certicate,
because CMC only allows upload of one trusted certicate authority-signed SSL certicate.
The Web interface does not launch after a new RAC certicate is created and uploaded.
If Microsoft Certicate Services is used to generate the RAC certicate, the User Certicate option may have been used instead of Web
Certicate, when creating the certicate.
To recover, generate a CSR, create a new Web certicate from Microsoft Certicate Services, and then upload it by running the following
RACADM commands:
racadm sslcsrgen [-g] [-f {filename}]
racadm sslcertupload -t 1 -f {web_sslcert}
IOM
After a conguration change, sometimes CMC displays the IP address as 0.0.0.0.
174
Frequently asked questions