Users Guide

148 Enabling Kerberos Authentication
c Select Register DRAC on DNS .
d Provide a valid DNS Domain Name .
NOTE: Ensure that the DNS name is resolved by the DNS server.
See the DRAC 5 Online Help for more information.
• Synchronize the DRAC 5 time settings with that of the Active Directory
Domain Controller. Kerberos authentication on DRAC 5 fails if the
DRAC time differs from the Domain Controller time. A maximum offset
of 5 minutes is allowed. To enable successful authentication, synchronize
the server time with the Domain Controller time and then
reset the
DRAC time.
You can also use the following RACADM time zone offset command to
synchronize the time:
racadm config -g cfgRacTuning -o
cfgRacTuneTimeZoneOffset offset-value
Offset value is the offset time in minutes.
• Install Microsoft Visual C++ 2005 Redistributable Package on the client
system.
• Run the
ktpass utility on Active Directory Server.
DRAC 5 is a device with a non-Windows operating system, so you need to
run the
ktpass utility— part of Microsoft Windows — on the Domain
Controller (Active Directory server) where you want to map the DRAC 5
to a user account in Active Directory. To do this,
a Start the Active Directory Management tool.
b Right-click the Users folder, select New , and then click User .
c Type the name of the DRAC5 host for which you want to add
Kerberos support.
d Save the user.