Cisco Systems UCSCPCIEBTG, 57712 manual Configuring Active Directory in Cimc, Server# scope ldap

Managing User Accounts

Configuring Active Directory in CIMC

What to Do Next

Use the CIMC to configure Active Directory.

Configuring Active Directory in CIMC

Configure Active Directory (AD) in CIMC when you want to use an AD server for local user authentication and authorization.

Before You Begin

You must log in as a user with admin privileges to perform this task.

Procedure

	Command or Action	Purpose
Step 1	Server# scope ldap	Enters the LDAP command mode for AD configuration.
Step 2	Server /ldap # set enabled	Enables or disables AD. When AD is enabled, user
	{yes no}	authentication and role authorization is performed by AD for
		user accounts not found in the local user database.
Step 3	Server /ldap # set dcn dc-host	Specifies an Active Directory domain controller (DC) host
		name or IP address. You can specify up to three DCs using
		index n values from 1 to 3.
Step 4	Server /ldap # set gcn gc-host	Specifies an Active Directory global catalog (GC) server host
		name or IP address. You can specify up to three GCs using
		index n values from 1 to 3.
Step 5	Server /ldap # set timeout	Specifies the number of seconds the CIMC waits until the
	seconds	LDAP search operation times out.
Step 6	Server /ldap # set encrypted	If encryption is enabled, the server encrypts all information
	{yes no}	sent to AD.
Step 7	Server /ldap # set base-dn	Specifies the domain that all users must be in.
	domain-name

Step 8	Server /ldap # set attribute
	name

Specify an LDAP attribute that contains the role and locale information for the user. This property is always a name-value pair. The system queries the user record for the value that matches this attribute name.

You can use an existing LDAP attribute that is mapped to the CIMC user roles and locales or you can create a custom attribute, such as the CiscoAVPair attribute, which has the following attribute ID:

1.3.6.1.4.1.9.287247.1

Note If you do not specify this property, user access is restricted to read-only.

	Cisco UCS C-Series Servers Integrated Management Controller CLI Configuration Guide, Release 1.5
68	OL-28893-01