Owner's Manual

286 Using the CMC Directory Service
Configuring CMC With Extended Schema Active Directory and RACADM
Use the following commands to configure the CMC Active Directory Feature
with Extended Schema using the RACADM CLI tool instead of the Web
interface.
1
Open a serial/Telnet/SSH text console to CMC, log in, and type:
racadm config -g cfgActiveDirectory -o cfgADEnable 1
racadm config -g cfgActiveDirectory -o cfgADType 1
racadm config -g cfgActiveDirectory -o
cfgADRacDomain <
fully qualified CMC domain name >
racadm config -g cfgActiveDirectory -o
cfgADRootDomain <
fully qualified root domain name >
racadm config -g cfgActiveDirectory -o
cfgADRacName <
CMC common name >
racadm sslcertupload -t 0x2 -f <
ADS root CA
certificate
> -r
racadm sslcertdownload -t 0x1 -f <
CMC SSL
certificate
>
NOTE: You can use this command through remote RACADM only. For more
information on remote RACADM, see "Accessing RACADM Remotely" on
page 77.
Optional: If you want to specify an LDAP or Global Catalog server instead
of using the servers returned by the DNS server to search for a user name,
type the following command to enable the
Specify Server option:
racadm config -g cfgActiveDirectory -o
cfgADSpecifyServerEnable 1
NOTE: When you use the Specify Server option, the host name in the
certificate authority-signed certificate is not matched against the name of the
specified server. This is particularly useful if you are a CMC administrator,
because it enables you to enter a host name as well as an IP address.
After you enable the Specify Server option, you can specify an LDAP
server and global catalog with IP addresses or fully qualified domain names
(FQDNs) of the servers. The FQDNs consist of the host names and the
domain names of the servers.