Users Guide

Enabling or disabling remote RACADM using web interface.......................................................................................119
Enabling or disabling remote RACADM using RACADM.............................................................................................119
Disabling local RACADM.................................................................................................................................................. 119
Enabling IPMI on managed system.................................................................................................................................. 119
Conguring Linux for serial console during boot.............................................................................................................. 119
Enabling login to the virtual console after boot......................................................................................................... 120
Supported SSH cryptography schemes........................................................................................................................... 121
Using public key authentication for SSH................................................................................................................... 122
7 Conguring user accounts and privileges..................................................................... 126
Recommended characters in user names and passwords............................................................................................... 126
Conguring local users.................................................................................................................................................... 127
Conguring local users using iDRAC web interface................................................................................................... 127
Conguring local users using RACADM.....................................................................................................................127
Conguring Active Directory users..................................................................................................................................128
Prerequisites for using Active Directory authentication for iDRAC............................................................................ 129
Supported Active Directory authentication mechanisms............................................................................................131
Standard schema Active Directory overview..............................................................................................................131
Conguring Standard schema Active Directory.........................................................................................................133
Extended schema Active Directory overview............................................................................................................ 134
Conguring Extended schema Active Directory........................................................................................................ 137
Testing Active Directory settings...............................................................................................................................144
Conguring generic LDAP users..................................................................................................................................... 145
Conguring generic LDAP directory service using iDRAC web-based interface........................................................ 145
Conguring generic LDAP directory service using RACADM.....................................................................................146
Testing LDAP directory service settings....................................................................................................................146
8 Conguring iDRAC for Single Sign-On or smart card login........................................... 147
Prerequisites for Active Directory Single Sign-On or smart card login............................................................................. 147
Registering iDRAC as a computer in Active Directory root domain............................................................................ 147
Generating Kerberos keytab le................................................................................................................................ 148
Creating Active Directory objects and providing privileges........................................................................................ 148
Conguring iDRAC SSO login for Active Directory users.................................................................................................149
Conguring iDRAC SSO login for Active Directory users using web interface........................................................... 149
Conguring iDRAC SSO login for Active Directory users using RACADM..................................................................149
Conguring iDRAC smart card login for local users......................................................................................................... 149
Uploading smart card user certicate....................................................................................................................... 149
Uploading trusted CA certicate for smart card....................................................................................................... 150
Conguring iDRAC smart card login for Active Directory users.......................................................................................150
Enabling or disabling smart card login.............................................................................................................................. 151
Enabling or disabling smart card login using web interface.........................................................................................151
Enabling or disabling smart card login using RACADM............................................................................................... 151
Enabling or disabling smart card login using iDRAC settings utility............................................................................. 151
9 Conguring iDRAC to send alerts.................................................................................152
Enabling or disabling alerts..............................................................................................................................................152
7