Dell PowerEdge VRTX Chassis Management Controller Version 1.0 for Dell PowerEd - Page 105

Configuring Standard Schema Active Directory

Get Dell PowerEdge VRTX PDF manuals and user guides View all Dell PowerEdge VRTX manuals
Add to My Manuals
Save this manual to your list of manuals

Page 105 highlights

Configuring Standard Schema Active Directory To configure CMC for an Active Directory login access: 1. On an Active Directory server (domain controller), open Active Directory Users and Computers Snap-in. 2. Using the CMC Web interface or RACADM: a) Create a group or select an existing group. b) Configure the role privileges. 3. Add the Active Directory user as a member of the Active Directory group to access CMC. Configuring Active Directory With Standard Schema Using CMC Web Interface NOTE: For information about the various fields, see the CMC Online Help. 1. In the left pane, go to Chassis Overview, and then click User Authentication → Directory Services. The Directory Services page is displayed. 2. Select Microsoft Active Directory (Standard Schema). The settings to be configured for standard schema is displayed on the same page. 3. Specify the following: - Enable Active Directory, enter the root domain name, and the timeout value. - If you want the directed call to search the domain controller and global catalog, select the Search AD Server to search (Optional) option and specify the domain controller and global catalog details. 4. Click Apply to save the settings. NOTE: You must apply the settings before continuing. If you do not apply the settings, the settings are lost when you navigate to the next page. 5. In the Standard Schema Settings section, click a Role Group. The Configure Role Group page is displayed. 6. Specify the group name, domain, and privileges for a role group. 7. Click Apply to save the role group settings and then click Go Back To Configuration page. 8. If you have enabled certificate validation, you must upload the domain forest root certificate authority-signed certificate to CMC. In the Manage Certificates section, type the file path of the certificate or browse to the certificate file. Click Upload to upload the file to CMC. NOTE: The File Path value displays the relative file path of the certificate you are uploading. You must type the absolute file path, which includes the full path and the complete file name and file extension. The SSL certificates for the domain controllers must be signed by the root certificate authority-signed certificate. The root certificate authority-signed certificate must be available on the management station accessing CMC. 9. If you have enabled Single Sign-On (SSO), in the Kerberos Keytab section, click Browse, specify the keytab file and click Upload. When the upload is complete, a message is displayed indicating a successful or failed upload. 10. Click Apply. The CMC Web server automatically restarts after you click Apply. 11. Log out and then log in to CMC to complete the CMC Active Directory configuration. 12. Select Chassis in the system tree, and navigate to the Network tab. The Network Configuration page appears. 13. Under Network Settings, if Use DHCP (for CMC Network Interface IP Address) is selected, select Use DHCP to obtain DNS server address. To manually enter a DNS server IP address, clear Use DHCP to obtain DNS server addresses and type the primary and alternate DNS server IP addresses. 14. Click Apply Changes. The CMC Standard Schema Active Directory feature configuration is complete. 105

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
Configuring Standard Schema Active Directory
To configure CMC for an Active Directory login access:
1.
On an Active Directory server (domain controller), open
Active Directory Users and Computers Snap-in
.
2.
Using the CMC Web interface or RACADM:
a)
Create a group or select an existing group.
b)
Configure the role privileges.
3.
Add the Active Directory user as a member of the Active Directory group to access CMC.
Configuring Active Directory With Standard Schema Using CMC Web Interface
NOTE:
For information about the various fields, see the
CMC Online Help
.
1.
In the left pane, go to
Chassis Overview
, and then click
User Authentication
→
Directory Services
. The
Directory
Services
page is displayed.
2.
Select
Microsoft Active Directory (Standard Schema)
. The settings to be configured for standard schema is
displayed on the same page.
3.
Specify the following:
–
Enable Active Directory, enter the root domain name, and the timeout value.
–
If you want the directed call to search the domain controller and global catalog, select the
Search AD
Server to search (Optional)
option and specify the domain controller and global catalog details.
4.
Click
Apply
to save the settings.
NOTE:
You must apply the settings before continuing. If you do not apply the settings, the settings are lost
when you navigate to the next page.
5.
In the
Standard Schema Setting
s section, click a
Role Group
. The
Configure Role Group
page is displayed.
6.
Specify the group name, domain, and privileges for a role group.
7.
Click
Apply
to save the role group settings and then click
Go Back To Configuration
page.
8.
If you have enabled certificate validation, you must upload the domain forest root certificate authority-signed
certificate to CMC. In the
Manage Certificates
section, type the file path of the certificate or browse to the
certificate file. Click
Upload
to upload the file to CMC.
NOTE:
The
File Path
value displays the relative file path of the certificate you are uploading. You must type the
absolute file path, which includes the full path and the complete file name and file extension.
The SSL certificates for the domain controllers must be signed by the root certificate authority-signed certificate.
The root certificate authority-signed certificate must be available on the management station accessing CMC.
9.
If you have enabled Single Sign-On (SSO), in the
Kerberos Keytab
section, click
Browse
, specify the keytab file and
click
Upload
. When the upload is complete, a message is displayed indicating a successful or failed upload.
10.
Click
Apply
. The CMC Web server automatically restarts after you click
Apply
.
11.
Log out and then log in to CMC to complete the CMC Active Directory configuration.
12.
Select
Chassis
in the system tree, and navigate to the
Network
tab. The
Network Configuration
page appears.
13.
Under
Network Settings
, if
Use DHCP (for CMC Network Interface IP Address)
is selected, select
Use DHCP to
obtain DNS server address
.
To manually enter a DNS server IP address, clear Use
DHCP to obtain DNS server addresses
and type the primary
and alternate DNS server IP addresses.
14.
Click
Apply Changes
.
The CMC Standard Schema Active Directory feature configuration is complete.
105