Users Guide

Using the DRAC 5 With Microsoft Active Directory 135
Supported Active Directory Configuration
The Active Directory querying algorithm of the DRAC 5 supports multiple
trees in a single forest.
DRAC 5 Active Directory Authentication supports mixed mode (that is, the
domain controllers in the forest run different operating systems, such as
Microsoft Windows NT® 4.0, Windows 2000, or Windows Server 2003).
However, all objects used by the DRAC 5 querying process (among user,
RAC Device Object, and Association Object) should be in the same domain.
The Dell-extended Active Directory Users and Computers snap-in checks
the mode and limits users in order to create objects across domains if in
mixed mode.
DRAC 5 Active Directory supports multiple domain environments provided
the domain forest function level is Native mode or Windows 2003 mode. In
addition, the groups among Association Object, RAC user objects, and RAC
Device Objects (including Association Object) must be universal groups.
NOTE: The Association Object and the Privilege Object must be in the same
domain. The Dell-extended Active Directory Users and Computers snap-in forces
you to create these two objects in the same domain. Other objects can be in
different domains.
Using Active Directory to Log Into the DRAC 5
You can use Active Directory to log in to the DRAC 5 using one of the
following methods:
• Web-based interface
• Remote RACADM
• Serial or telnet console.
The login syntax is the same for all three methods:
<
username@domain >
or
<
domain>\<username > or < domain>/<username >
where
username is an ASCII string of 1–256 bytes.