Users Guide

170 Configuring iDRAC6 for Single Sign-On and Smart Card Login
9 Select the Enable Active Directory check box.
10 Select Enable Single Sign-on if you want to log into iDRAC6 directly after
logging into your workstation without entering your domain user
authentication credentials, such as user name and password.
To log into iDRAC6 using this feature, you should have already logged into
your system using a valid Active Directory user account. Also you should
have already configured the user account to log into iDRAC6 using the
Active Directory credentials. iDRAC6 uses the cached Active Directory
credentials to log you in.
Before configuring iDRAC6 to use Single Sign-On (SSO), ensure that you
have performed the following:
a Created the device object, privilege object, and association object in
the Active Directory server.
b Set access privileges to the created privilege object. It is recommended
not to provide administrator privileges as this could bypass some
security checks.
c Associate the device object and privilege object using the association
object.
d Add the preceding SSO user (login user) to the device object.
e Provide access privilege to Authenticated Users for accessing the
created association object.
For information about how to perform these steps, see "Adding
iDRAC6 Users and Privileges to Active Directory" on page 138.
To enable SSO using the CLI, run the RACADM command:
racadm -g cfgActiveDirectory -o cfgADSSOEnable 1
11
Add User Domain Name , and enter the IP address of the Domain
Controller Server Address. Select either the
Look Up Domain Controllers
with DNS
or Specify Domain Controller Addresses . Select Next . The
Active Directory Configuration and Management Step 3 of 4 screen is
displayed.
12 Select the Standard Schema or Extended Schema option and click Next .
If you have selected
Standard Schema, go to step 13. If you have selected
Extended Schema , go to step 14.