Users Guide

Communicating with iDRAC using IPMI over LAN...................................................................................................134
Configuring IPMI over LAN using web interface................................................................................................134
Configuring IPMI over LAN using iDRAC settings utility..................................................................................134
Configuring IPMI over LAN using RACADM........................................................................................................134
Enabling or disabling remote RACADM...................................................................................................................... 135
Enabling or disabling remote RACADM using web interface...........................................................................135
Enabling or disabling remote RACADM using RACADM...................................................................................135
Disabling local RACADM.................................................................................................................................................135
Enabling IPMI on managed system..............................................................................................................................136
Configuring Linux for serial console during boot in RHEL 6..................................................................................136
Enabling login to the virtual console after boot..................................................................................................137
Configuring serial terminal in RHEL 7......................................................................................................................... 138
Controlling GRUB from serial console...................................................................................................................138
Supported SSH cryptography schemes..................................................................................................................... 139
Using public key authentication for SSH..............................................................................................................140
Chapter 8: Configuring user accounts and privileges..................................................................143
iDRAC user roles and privileges....................................................................................................................................143
Recommended characters in user names and passwords..................................................................................... 144
Configuring local users................................................................................................................................................... 145
Configuring local users using iDRAC web interface.......................................................................................... 145
Configuring local users using RACADM................................................................................................................145
Configuring Active Directory users..............................................................................................................................147
Prerequisites for using Active Directory authentication for iDRAC...............................................................147
Supported Active Directory authentication mechanisms.................................................................................148
Standard schema Active Directory overview......................................................................................................148
Configuring Standard schema Active Directory.................................................................................................150
Extended schema Active Directory overview.....................................................................................................152
Configuring Extended schema Active Directory................................................................................................ 154
Testing Active Directory settings........................................................................................................................... 161
Configuring generic LDAP users...................................................................................................................................161
Configuring generic LDAP directory service using iDRAC web-based interface....................................... 162
Configuring generic LDAP directory service using RACADM......................................................................... 162
Testing LDAP directory service settings..............................................................................................................162
Chapter 9: System Configuration Lockdown mode..................................................................... 164
Chapter 10: Configuring iDRAC for Single Sign-On or smart card login...................................... 166
Prerequisites for Active Directory Single Sign-On or smart card login..............................................................166
Registering iDRAC on Domain name System...................................................................................................... 166
Creating Active Directory objects and providing privileges.............................................................................167
Configuring iDRAC SSO login for Active Directory users...................................................................................... 167
Creating a User in Active Directory for SSO.......................................................................................................167
Generating Kerberos keytab file.............................................................................................................................168
Configuring iDRAC SSO login for Active Directory users using web interface.......................................... 168
Configuring iDRAC SSO login for Active Directory users using RACADM.................................................. 169
Management Station Settings................................................................................................................................169
Enabling or disabling smart card login........................................................................................................................ 169
Enabling or disabling smart card login using web interface.............................................................................169
Contents
7