User's Manual

i. Click Allow users and groups from newly discovered trusted forests to allow logins by
users that belong to the authentication service forest or its discovered trusted forests. If
enabled, the Rack Power Manager will discover all trusted forests in the Active
Directory service.
j. Click Next.
If you selected Use SSL in Certificate-based Trust Mode, go to step 6.
If you selected Do Not Use SSL or Use SSL in Trust All Mode, go to step 8.
6. The Rack Power Manager server will try to find a server that has a trusted certificate chain
(see System certificate policy and trust store on page 50). If no trusted certificate chain is
found, then the Accept Certificate window will open and list all servers that belong to the
domain. It will also list the reasons for rejection of the certificate chain.
7. Click Next to accept the certificate.
8. The Select Browsing Method window will open.
Click Browse Anonymously to browse users on the external Active Directory
authentication server.
-or-
Click Browse with user credentials to browse users on the external Active Directory
authentication based on credentials configured on the server. If this option is selected,
do the following:
a. Type the username for an Active Directory account that has browse rights in the User
Name field. The login ID must be entered in case sensitive text if the Active Directory
server is set up to use Kerberos. When using Kerberos, the browse account cannot be
specified in the Full Pre-Windows 2000 Username form (domain\username). If the
username is in a sub-domain of the Active Directory domain (specified in step 3a),
then the username should be specified as <username>@<subdomain>.
b. Type the password for an Active Directory account that has browse rights in the
Password field.
c. Click Next.
9. The Establish Connection with Authentication Service window will open briefly. If the
external authentication service is added successfully, the Completed Successful window
will open.
10. Click Finish. The User Authentication Services window will open with the new service
listed.
Chapter 7: Authentication Services 87