Dell Version 7.3 manual Microsoft Windows Authentication, VMware ESX Server 4.X Authentication

Page 13

Instrumentation

User, Power User, Administrator,

Power User, Administrator, Elevated

 

Elevated Administrator

Administrator

Remote Access

User, Power User, Administrator,

Administrator, Elevated Administrator

 

Elevated Administrator

 

Storage Management

User, Power User, Administrator,

Administrator, Elevated Administrator

 

Elevated Administrator

 

Authentication

The Server Administrator authentication scheme ensures that the correct access types are assigned to the correct user privileges. Additionally, when the command line interface (CLI) is invoked, the Server Administrator authentication scheme validates the context within which the current process is running. This authentication scheme ensures that all Server Administrator functions, whether accessed through the Server Administrator home page or CLI, are properly authenticated.

Microsoft Windows Authentication

On supported Microsoft Windows operating systems, Server Administrator uses Integrated Windows Authentication (formerly called NTLM) to authenticate. This authentication system allows Server Administrator security to be incorporated in an overall security scheme for your network.

Red Hat Enterprise Linux And SUSE Linux Enterprise Server Authentication

On supported Red Hat Enterprise Linux and SUSE Linux Enterprise Server operating systems, Server Administrator uses various authentication methods based on the Pluggable Authentication Modules (PAM) library. Users can log in to Server Administrator either locally or remotely using different account management protocols, such as LDAP, NIS, Kerberos, and Winbind.

VMware ESX Server 4.X Authentication

VMware ESX Server uses the Pluggable Authentication Modules (PAM) structure for authentication when users access the ESX Server host. The PAM configuration for VMware services stores paths to the authentication modules and is located at /etc/pam.d/vmware-authd.

The default installation of ESX Server uses /etc/passwd authentication, similar to Linux, but you can configure ESX Server to use another distributed authentication mechanism.

NOTE: On systems running VMware ESX Server 4.x operating system, to login to Server Administrator, all users require Administrator privileges. For information on assigning roles, see the VMware documentation.

VMware ESXi Server 5.X Authentication

ESXi Server authenticates users accessing ESXi hosts using the vSphere/VI Client or Software Development Kit (SDK). The default installation of ESXi uses a local password database for authentication. ESXi authentication transactions with Server Administrator are also direct interactions with the vmware-hostdprocess. To make sure that authentication works efficiently for your site, perform basic tasks such as setting up users, groups, permissions, and roles, configuring user attributes, adding your own certificates, and determining whether you want to use SSL.

NOTE: On systems running VMware ESXi Server 5.0 operating system, to login to Server Administrator, all users require Administrator privileges. For information on assigning roles, see the VMware documentation.

13

Image 13
Contents Dell OpenManage Server Administrator Version 7.3 Users Guide Dell Inc Contents Working With Remote Access Controller Server Administrator ServicesSetting Alert Actions Server Administrator LogsTroubleshooting Frequently Asked QuestionsIntroduction Installation Updating Individual System ComponentsInstrumentation Service Storage Management ServiceRemote Access Controller What Is New In This ReleaseAvailability On Supported Operating Systems Systems Management Standards AvailabilityOther Documents You May Need Server Administrator HomeOperating System Accessing Documents From Dell Support Site Obtaining Technical Assistance Contacting Dell Serviceability ToolsOMConnectionsEnterpriseSystemsManagement Role-Based Access Control Setup And AdministrationUser Privilege Access Description Level Type View Manage Service User Privilege Level Required ViewMicrosoft Windows Authentication AuthenticationVMware ESX Server 4.X Authentication VMware ESXi Server 5.X AuthenticationAssigning User Privileges EncryptionAdding Users To a Domain On Windows Operating Systems Creating Users Creating Users With User Privileges Creating Users With Power User PrivilegesUserName HostName Rights Best Practices While Using The Omarolemap File Select Account is disabled and click OK Configuring The Snmp AgentOpen the Computer Management window Changing The Snmp Community Name Snmp Service Properties window appearsSnmp Service Configuration window appears Snmp Agent Access Control ConfigurationEnabling Snmp Set Operations Server Administrator Snmp Agent Install Actions Enabling Snmp Access From Remote Hosts Sever Administrator Snmp Install ActionsTo configure the Snmp agent To enable VMWare Snmp service, run the following command Page Firewall Configuration Server Administrator Local System Login Using Server AdministratorLogging In And Out Click Submit Central Web Server LoginSingle Sign-On Using The Active Directory LoginEnabling The Use Of Client-Side Scripts On Mozilla Firefox Enabling The Use Of Client-Side Scripts On Internet ExplorerGUI Field Name Sample Server Administrator Home Page Non-Modular System Features Modular System Global Navigation Bar System/Server Module Component Status IndicatorsSystem Tree Action WindowTask Buttons Gauge IndicatorsUnderlined Items Using The Preferences Home Using The Online HelpSetting User And System Preferences Server Administrator Web Server PreferencesManaged System Preferences Secure Port System Click General SettingsClick X.509 Certificate Certificate ManagementServer Administrator Web Server Action Tabs Using The Server Administrator Command Line InterfaceManaging Your System Server Administrator ServicesManaging System/Server Module Tree Objects Server Administrator Home Page System Tree ObjectsModular Enclosure System/Server Module Properties Accessing And Using Chassis Management ControllerModular Enclosure object Tab Properties Subtab Information Licensing Subtabs Information LicensingShutdown Subtabs Hardware Alert CommandLogs Alert ManagementSession Management Main System Chassis/Main SystemSubtabs Session Main System Chassis/Main System Properties Setup Subtab Bios Properties and Setup Subtab InformationBatteries Properties Subtab InformationFirmware FansHardware Performance Memory IntrusionProperties Subtab Intrusion Properties Subtab MemoryNetwork Power ManagementPorts Subtab Information PropertiesManagement Subtabs Budget Profiles Power SuppliesAlert Management Properties Subtab Elements Processors Remote AccessAlert Management Subtabs Alert Actions Subtab Temperature Probes Properties TemperaturesRemovable Flash Media SlotsSoftware VoltagesOperating System Properties Subtab Voltage ProbesGeneral Settings Managing Preferences Home Page Configuration OptionsStorage Subtabs Access Configuration Snmp Configuration Preferences Server AdministratorModular Enclosure Modular system Server Modules Main System Working With Remote Access ControllerViewing Basic Information Remote Access DeviceSystem Main System ChassisIPv6 Address IPv4 AddressClick Apply Changes Vlan IDClick Apply Changes Click Terminal Mode Settings Click Serial Port Serial Port Configuration window appearsConfiguring Remote Access Device Users Additional Configuration For iDRACClick Additional Configuration None Reboot System Setting Platform Event Filter AlertsPower Off System Power Cycle SystemSetting Platform Event Alert Destinations Integrated Features Server Administrator LogsServer Administrator Logs Log Window Task ButtonsAlert Log Hardware LogMaintaining The Hardware Log StatusCommand Log Example 1 ps -ef /tmp/psout.txt 2&1 Setting Alert ActionsBMC/iDRAC Platform Events Filter Alert Messages Setting Alert Action Execute Application In Windows ServerEvent Description Connection Service Failure TroubleshootingLogin Failure Scenarios Opt/dell/srvadmin/sbin/dsmomconnsvcdService Name Description Impact of Failure OpenManage Server Administrator ServicesSeverity Dsmsadatamgr Are there other ports users can use apart from 1311? Frequently Asked QuestionsPort ITA communicating with Linux systems