Cisco Systems UCSCPCIEBTG Configuring Active Directory, Configuring the Active Directory Server

Managing User Accounts

Configuring Active Directory

	Command or Action	Purpose
		• Manage the power control options such as power
		on, power cycle, and power off
		• Launch the KVM console and virtual media
		• Clear all logs
		• Toggle the locator LED
		• admin—This user can perform all actions available
		through the GUI, CLI, and IPMI.
Step 6	Server /user # commit	Commits the transaction to the system configuration.

This example configures user 5 as an admin:

Server# scope user 5
Server	/user # set enabled yes
Server	/user *# set name john
Server	/user *# set password
Please	enter password:
Please	confirm password:
Server	/user *# set role readonly
Server	/user *# commit
Server	/user # show	Role	Enabled
User	Name
------	----------------	-------- --------
5	john	readonly yes

Configuring Active Directory

Active Directory

Active Directory is a technology that provides a variety of network services including LDAP-like directory services, Kerberos-based authentication, and DNS-based naming. The CIMC utilizes the Kerberos-based authentication service of Active Directory.

When Active Directory is enabled in the CIMC, user authentication and role authorization is performed by Active Directory for user accounts not found in the local user database.

you can require the server to encrypt data sent to Active Directory.

Configuring the Active Directory Server

The CIMC can be configured to use Active Directory for user authentication and authorization. To use Active Directory, configure users with an attribute that holds the user role and locale information for the CIMC. You can use an existing LDAP attribute that is mapped to the CIMC user roles and locales or you can modify the Active Directory schema to add a new custom attribute, such as the CiscoAVPair attribute, which has an

	Cisco UCS C-Series Servers Integrated Management Controller CLI Configuration Guide, Release 1.5
66	OL-28893-01