User's Manual

Using the CMC Directory Service 265
Configuring the CMC With Extended Schema Active Directory and
RACADM
Using the following commands to configure the CMC Active Directory
Feature with Extended Schema using the RACADM CLI tool instead of the
Web interface.
1
Open a serial/Telnet/SSH text console to the CMC, log in, and type:
racadm config -g cfgActiveDirectory -o cfgADEnable 1
racadm config -g cfgActiveDirectory -o cfgADType 1
racadm config -g cfgActiveDirectory -o
cfgADRacDomain <
fully qualified CMC domain name >
racadm config -g cfgActiveDirectory -o
cfgADRootDomain <
fully qualified root domain name >
racadm config -g cfgActiveDirectory -o
cfgADRacName <
CMC common name >
racadm sslcertupload -t 0x2 -f <
ADS root CA
certificate
> -r
racadm sslcertdownload -t 0x1 -f <
CMC SSL
certificate
>
NOTE: You can use this command through remote RACADM only. For more
information on remote RACADM, see "Accessing RACADM Remotely" on
page 74.
Optional: If you want to specify an LDAP or Global Catalog server instead
of using the servers returned by the DNS server to search for a user name,
type the following command to enable the
Specify Server option:
racadm config -g cfgActiveDirectory -o
cfgADSpecifyServerEnable 1
NOTE: When you use the Specify Server option, the host name in the
certificate authority-signed certificate is not matched against the name of the
specified server. This is particularly useful if you are a CMC administrator,
because it enables you to enter a host name as well as an IP address.
After you enable the Specify Server option, you can specify an LDAP
server and global catalog with IP addresses or fully qualified domain names