Technical White Paper

ManualsBrandsDell ManualsSoftwareLifecycle Controller 2 Version 1.3.0

5 Managing iDRAC Local User Accounts

5.1 Description of iDRAC Attributes Versus Standard DMTF

Model

The iDRAC user account management data model is represented by both DMTF and Dell Profiles.

Both models are currently offered. The DMTF Profiles for Simple Identity Management and Role Based

Authorization represent iDRAC user accounts and privileges. The DMTF data model is complex and

typically requires multiple transactions to accomplish simple operations such as specifying a

username and password or giving a user account admin privileges. For this reason, LC also offers a

Dell data model for managing iDRAC user accounts that is based on an attribute model. The DCIM

iDRAC Card Profile specifies the attributes for each user account name, password, and privilege.

iDRAC has 15 local user accounts that can be managed.

5.2 Account Inventory (using iDRAC Attributes)

The list of user accounts may be retrieved by enumerating the

DCIM_iDRACCard

classes. The

class provides the user account name and enabled state properties.

Profile and Associated MOFs:

http://www.delltechcenter.com/page/DCIM.Library.Profile

5.2.1 Account and Capabilities (using iDRAC Attributes)

Enumerating the

DCIM_iDRACCardEnumeration

class, Section 19.1, and parsing the output for the

attribute AttributeDisplayName = User Admin Enable, will display all of the 16 possible user

accounts and their respective status.

EXAMPLE:

wsman enumerate "http://schemas.dmtf.org/wbem/wscim/1/cimschema/

2/root/dcim/DCIM_iDRACCardEnumeration"

-h $IPADDRESS -V -v -c dummy.cert -P 443

-u $USERNAME -p $PASSWORD

-j utf-8 -y basic

OUTPUT:

<n1:DCIM_iDRACCardEnumeration>

<n1:AttributeDisplayName>User Admin Enable</n1:AttributeDisplayName>

<n1:AttributeName>Enable</n1:AttributeName>

<n1:CurrentValue>Disabled</n1:CurrentValue>

<n1:DefaultValue>Disabled</n1:DefaultValue>

<n1:Dependency xsi:nil="true"/>

<n1:DisplayOrder>0</n1:DisplayOrder>

<n1:FQDD>iDRAC.Embedded.1</n1:FQDD>

<n1:GroupDisplayName>Users</n1:GroupDisplayName>

<n1:GroupID>Users.1</n1:GroupID>

<n1:InstanceID>iDRAC.Embedded.1#Users.1#Enable</n1:InstanceID>

<n1:IsReadOnly>true</n1:IsReadOnly>

<n1:PossibleValues>Disabled</n1:PossibleValues>

<n1:PossibleValues>Enabled</n1:PossibleValues>

</n1:DCIM_iDRACCardEnumeration>

Account Disabled as displayed

CurrentValue

attribute for

Users.1