Manualshelf

Users Guide

ManualsBrandsDell ManualsActive System ManagerChassis Management Controller Version 3.0 for Dell PowerEdge VRTX
131132133134135136137138139140
Table Of Contents
Adding Privileges
To add privileges:
1. Select the Privileges Object tab and click Add.
2. Enter the privilege object name and click OK.
Click the Privilege Object tab to add the privilege object to the association that defines the user’s or user group’s privileges
when authenticating to an RAC device. Only one privilege object can be added to an Association Object.
Adding RAC Devices Or RAC Device Groups
To add RAC devices or RAC device groups:
1. Select the Products tab and click Add.
2. Enter RAC devices or RAC device group name and click OK.
3. In the Properties window, click Apply and click OK.
Click the Products tab to add one or more RAC devices to the association. The associated devices specify the RAC devices
connected to the network that are available for the defined users or user groups. Multiple RAC devices can be added to an
Association Object.
Configuring Active Directory With Extended Schema Using CMC Web
Interface
To configure Active Directory with extended schema using CMC web interface:
NOTE: For information about the various fields, see the Online Help.
1. In the left pane, click, Chassis Overview > User Authentication > Chassis Overview > Directory Services.
2. Select Microsoft Active Directory (Extended Schema).
The settings to be configured for extended schema is displayed on the same page.
3. In the Common Settings section, specify the following:
● Select Enable Active Directory and enter the timeout value for Active Directory in the AD Timeout field.
● To obtain the Active Directory Domain Controllers from a DNS lookup select Look Up Domain Controllers with DNS,
and then select one of the following:
○ User Domain from Login — to perform the DNS lookup with the domain name of the login user.
○ Specify a Domain — enter the domain name to use for the DNS lookup
● To enable CMC to use the specified Active Directory Domain Controller server addresses, select Specify Domain
Controller Addresses . These are the addresses of the domain controllers where the CMC device object and the
associated objects are located.
4. Click Apply to save the settings.
NOTE:
You must apply the settings before continuing. If you do not apply the settings, the settings are lost when you
navigate to the next page.
5. In the Extended Schema Settings section, type the CMC device name and the domain name.
6. If you have enabled certificate validation, you must upload the domain forest root certificate authority-signed certificate
to CMC. In the Manage Certificates section, type the file path of the certificate or browse to the certificate file. Click
Upload to upload the file to CMC.
NOTE:
The File Path value displays the relative file path of the certificate you are uploading. You must type the
absolute file path, which includes the full path and the complete file name and file extension.
The SSL certificates for the domain controllers must be signed by the root certificate authority-signed certificate. The root
certificate authority-signed certificate must be available on the management station accessing CMC.
CAUTION: SSL certificate validation is required by default. Disabling this certificate is not recommended.
7. If you have enabled Single Sign-On (SSO), in the Kerberos Keytab section, click Browse, specify the keytab file and click
Upload. When the upload is complete, a message is displayed indicating a successful or failed upload.
Configuring User Accounts and Privileges
131