Racadm -g cfgActiveDirectory -o cfgADSSOEnable | Dell 2 specs

Configuring CMC SSO Or Smart Card Login For Active Directory Users Using

RACADM

In addition to the steps performed while configuring Active Directory, run the following command to enable SSO:

racadm -g cfgActiveDirectory -o cfgADSSOEnable 1

In addition to the steps performed while configuring Active Directory, use the following objects to enable smart card login:

•cfgSmartCardLogonEnable

•cfgSmartCardCRLEnable

148

Image 148

Dell 2 manual Racadm -g cfgActiveDirectory -o cfgADSSOEnable, CfgSmartCardLogonEnable CfgSmartCardCRLEnable

Contents

Page Page Contents Logging in to CMC Updating Firmware Racadm Configuring CMC Viewing and Modifying CMC Network LAN Settings Configuring Servers Configuring User Accounts and Privileges 119 Configuring CMC To Send Alerts 114Configuring CMC For Single Sign-On Or Smart Card Login 144 Configuring CMC to Use Command Line Consoles 149 Using FlexAddress and FlexAdress Plus Cards 160 Managing and Monitoring Power Managing Fabrics Managing Chassis Storage 191 Managing PCIe Slots 201 Using LCD Panel Interface 217 Troubleshooting and Recovery 205Frequently Asked Questions 226 227 228229 231 Overview Key Features What Is New In This ReleaseManagement Features Security Features Chassis Overview PSU Drive enclosure Supported Remote Access Connections Minimum CMC Version Supported Platforms Supported Web BrowsersManaging Licenses Types of Licenses Acquiring Licenses License Operations Managing Licenses Using Racadm Managing Licenses Using CMC Web InterfaceLicensable Features in CMC Snmp WS-MANSSH Viewing Localized Versions of the CMC Web Interface Other Documents You May Need Accessing documents from Dell support site Page Installing and Setting Up CMC Installing CMC HardwareChecklist To Set up Chassis Before You Begin Installing Racadm on a Linux Management Station Installing Remote Access Software on a Management StationBasic CMC Network Connection Configuring a Web Browser Uninstalling Racadm From a Linux Management StationProxy Server Internet Explorer Microsoft Phishing Filter Certificate Revocation List CRL FetchingDownloading Files From CMC With Internet Explorer Mozilla FireFox Configuring Initial CMC Network Setting Up Initial Access to CMCEnabling Animations In Internet Explorer Configuring CMC Network Using LCD Panel Interface Configure CMC?Page Apply settings to installed servers? Auto-Apply settings to newly-inserted servers?Dhcp IPs will auto-increment by slot number Interfaces and Protocols to Access CMC Apply All Enclosure Settings? Telnet console using an encrypted transport layer for higher Setting Chassis Physical Location and Chassis Name Setting Date and Time on CMCLaunching CMC Using Other Systems Management Tools Downloading and Updating CMC Firmware Configuring LEDs to Identify Components on the Chassis Setting Date and Time on CMC Using CMC Web InterfaceSetting Date and Time on CMC Using Racadm Configuring LED Blinking Using CMC Web Interface Configuring iDRAC Launch Method Using CMC Web Interface Configuring CMC PropertiesCmc-active Configuring Login Lockout Policy Attributes Using Understanding Redundant CMC Environment About Standby CMC CMC Failsafe ModeActive CMC Election Process Configuring Front Panel Configuring Power ButtonConfiguring LCD Accessing a Server Using KVM Mapping the Server to KVM Using LCD Mapping a Server to KVM Using CMC Web InterfaceMapping a Server to a DVD Drive Accessing CMC Web Interface Logging in to CMC Logging in to CMC Using a Smart Card Logging in to CMC Using Single Sign-on Logging In To CMC Using Serial, Telnet, Or SSH Console Accessing CMC Using Racadm Logging in to CMC Using Public Key Authentication Changing Default Login Password Using Web Interface Changing Default Login PasswordMultiple CMC Sessions Enabling or Disabling Default Password Warning Message Changing Default Login Password Using Racadm Viewing Currently Installed Firmware Versions BiosUpdating Firmware Downloading CMC Firmware Viewing Currently Installed Firmware Versions Using Racadm Updating the CMC Firmware Updating CMC Firmware Using Web Interface Signed CMC Firmware Image Updating CMC Firmware Using Racadm Updating Chassis Infrastructure Firmware Updating Server iDRAC Firmware Using Web Interface Updating Chassis Infrastructure Firmware Using RacadmUpdating Server iDRAC Firmware Updating Server Component Firmware Interface Server Component Update Sequence Lifecycle Controller may not be enabledBios NIC RAID Enabling Lifecycle Controller Filtering Components for Firmware Updates Viewing Firmware Inventory Filtering Components for Firmware Updates Using RacadmRacadm getversion -l -m module -f filter Viewing Firmware Inventory Using CMC Web Interface Configuring Network Share Using CMC Web Interface Saving Chassis Inventory Report Using CMC Web InterfaceViewing Firmware Inventory Using Racadm Lifecycle Controller Job Operations Re-installing Server Component Firmware Using Web Interface Reinstalling Server Component FirmwareRolling Back Server Component Firmware Upgrading Server Component Firmware Server Component Single Click Update Using Network Share Pre-requisites for Using Network Share Update Mode Deleting Scheduled Server Component Firmware Jobs Updating Storage Component Using CMC Web Interface Recovering iDRAC Firmware Using CMC Viewing Chassis and Component Summaries Chassis Graphics Selected Component Information Cpld For Power Off Viewing Server Model Name and Service Tag Viewing Chassis SummaryViewing Chassis Controller Information and Status Viewing Information and Health Status of All Servers Viewing Health Status and Information for Individual Server Viewing Information and Health Status of the IOMViewing Information and Health Status of Fans Racadm fanoffset -s offlowmediumhigh Configuring Fans Fan number is less than the lower critical threshold Viewing Front Panel Properties Viewing KVM Information and Health Status Viewing LCD Information and HealthPage Configuring CMC Viewing and Modifying CMC Network LAN Settings Viewing and Modifying CMC Network LAN Settings Using Racadm Racadm config -g cfgLanNetworking -o cfgNicIPv4EnableRacadm config -g cfgIpv6LanNetworking -o cfgIPv6Enable Enabling the CMC Network Interface Racadm config -g cfgLanNetworking -o cfgDNSServersFromDHCP Enabling or Disabling Dhcp for DNS IP Addresses Setting Static DNS IP addresses Configuring DNS Settings IPv4 and IPv6Racadm config -g cfgLanNetworking -o cfgDNSRegisterRac Racadm config -g cfgLanNetworking -o cfgDNSRacName name Configuring CMC Network and Login Security Settings Setting the Maximum Transmission Unit MTU IPv4 and IPv6Configuring IP Range Attributes Using CMC Web Interface Racadm config -g cfgNetTuning -o cfgNetTuningNicSpeed speed Configuring IP Range Attributes Using Racadm Configuring Virtual LAN Tag Properties for CMCConfiguring Virtual LAN Tag Properties for CMC Using Racadm Configuring Services Racadm config -g cfgLanNetworking -o cfgNicVLanPriorityRacadm setniccfg -v Vlan id Vlan priority Racadm setniccfg -v 1 Configuring Services Using Racadm Configuring Services Using CMC Web InterfaceCfgRacTuning CfgRacTuneRemoteRacadmEnable Configuring CMC Extended Storage Card Setting Up Chassis Group Adding Members To Chassis Group Removing a Member from the Leader Disbanding a Chassis Group Accessing the Web page of a Member Chassis or ServerDisabling an Individual Member at the Member Chassis Server Inventory for MCM group Propagating Leader Chassis Properties to Member ChassisSaving Server Inventory Report SLOT-01 Exported Data1PB8VF1 Viewing Selected Chassis Inventory Using Web Interface Chassis Group Inventory and Firmware VersionViewing Chassis Group Inventory Data Format Configuring Multiple CMCs Using Racadm Creating a CMC Configuration File Parsing Rules Racadm getconfig -g groupname -i index CfgUserAdmin cfgUserAdminUserName= UsernameCommand, racadm getconfig -f myfile.cfg Modifying the CMC IP Address Viewing and Ending CMC Sessions Using Racadm Viewing and Ending CMC Sessions Using Web InterfaceViewing and Ending CMC Sessions Configuring Slot Names Configuring ServersDrac Configuring iDRAC Network Settings Configuring iDRAC QuickDeploy Network SettingsPage Is 255.255.255.0 , the QuickDeploy IP QuickDeploy Subnet error message isAddress range is not fully within CfgLanNetworking CfgIPv6LanNetworking CfgRacTuning Modifying iDRAC Network Settings Using RacadmAssigning QuickDeploy IP Address to Servers Configuring iDRAC Virtual LAN Tag Settings Configuring iDRAC Virtual LAN Tag Settings Using RacadmCfgRemoteHosts CfgSerial CfgSessionManagement Racadm setniccfg -m server-1 -v 1 PXE Setting First Boot DeviceCD/DVD Configuring Remote File Share Configuring Server FlexAddressSetting First Boot Device Using Racadm Page Accessing Server Profiles Adding or Saving Profile Importing Profile Applying ProfileExporting Profile Editing Profile Deleting Profile Viewing Profile Settings Viewing Stored Profile SettingsCompletion Status And Troubleshooting Viewing Profile Log Assigning Server Profiles to Slots Launching iDRAC using Single Sign-On Launching Remote ConsoleLaunching iDRAC from Server Status Launching iDRAC from Servers Status Launching Remote Console from Server Status Launching Remote Console from Chassis HealthLaunching Remote Console from Servers Status Configuring CMC To Send Alerts Enabling Or Disabling Alerts Using CMC Web InterfaceFiltering Alerts Using CMC Web Interface Enabling Or Disabling Alerts Configuring Snmp Trap Alert Destinations Configuring Alert DestinationsSetting Event Alerts Using Racadm Racadm config -g cfgAlerting -o cfgAlertingEnable Configuring Snmp Trap Alert Destinations Using RacadmRacadm config -g cfgTraps -o cfgTrapsEnable 1 -i index Configuring Email Alert Settings Using CMC Web Interface Configuring Email Alert SettingsConfiguring EMail Alert Settings Using Racadm Page Configuring User Accounts and Privileges Types of Users Update, and CMC reset Page CMC Group Privileges Configuring Local Users Modifying Root User Administrator Account SettingsConfiguring Local Users Using CMC Web Interface Configure Local Users Using Racadm Adding CMC User Using RacadmRacadm getconfig -g cfgUserAdmin -i index # cfgUserAdminIndex=XX CfgUserAdminUserName= Disabling CMC User Racadm getconfig -g cfgUserAdmin -iEnabling CMC User With Permissions Supported Active Directory Authentication Mechanisms Configuring Active Directory UsersStandard Schema Active Directory Overview Configuring Standard Schema Active Directory 128 Racadm sslcertupload -t 0x2 -f ADS root CA certificate Extended Schema Active Directory Overview Active Directory Schema ExtensionsOverview of Schema Extensions Dell base OID Configuring Extended Schema Active Directory Extending Active Directory Schema Using Dell Schema Extender OID False Attribute dellPrivilegeMemberAttribute dellProductMembersFALSE Attribute dellIsCardConfigAdmin Attribute dellIsLoginUserAttribute dellIsUserConfigAdmin Attribute delIsLogClearAdmin Attribute dellIsDebugCommandAdmin Attribute dellSchemaVersionAttribute dellAssociationMembersFALSE Attribute dellPermissionsMask1 Adding CMC Users And Privileges To Active Directory Creating RAC Device Object Adding Objects To Association Object Page Configuring Generic Ldap Users Racadm sslcertdownload -t 0x1 -f RAC SSL certificate Authentication of Ldap Users Configuring the Generic Ldap Directory to Access CMCAuthorization Of Ldap Users Configuring Generic Ldap Directory Service Using Racadm Service Name.tcp.Search DomainLdap.tcp.dell.com Ldap.tcp.domainname.comPage Configuring CMC For Single Sign-On Or Smart Card Login System Requirements Generating Kerberos Keytab File Prerequisites For Single Sign-On Or Smart Card LoginClient Systems Configuring CMC For Active Directory Schema Configuring Browser For SSO LoginConfiguring Browser For Smart Card Login Internet Explorer Uploading Keytab File Racadm -g cfgActiveDirectory -o cfgADSSOEnable CfgSmartCardLogonEnable CfgSmartCardCRLEnable Configuring CMC to Use Command Line Consoles CMC Command Line Console FeaturesCMC Command Line Interface Commands Racadm Using Telnet Console With CMC Using SSH With CMCSupported SSH Cryptography Schemes Exit, logout, and quit Configure Public Key Authentication Over SSH Racadm getssninfo IP Address Login Type User Date/TimeX.x 06/16/2009 090000 Ssh-keygen -t rsa -b 1024 -C testing Generating Public Keys for Systems Running WindowsGenerating Public Keys for Systems Running Linux Racadm Syntax Notes for CMC Configuring Terminal Emulation Software Configuring Linux MinicomViewing Public Keys Adding Public Keys Connecting to Servers or I/O Module Using Connect Command Configuring Minicom VersionRequired Minicom Settings Racadm config -g cfgSerial -o cfgSerialConsoleColumns Connect switch-n Configuring Windows for Serial Console Redirection Serial --unit=1 --speed=57600 terminal --timeout=10 serial Console=ttyS1,57600 Co2345respawn/sbin/agetty -h -L 57600 ttyS1 ansi TtyS1 Vc/1 Vc/2 Vc/3 159 Using FlexAddress and FlexAdress Plus Cards About FlexAddress About FlexAddress Plus Racadm featurecard -sViewing FlexAddress Activation Status No feature card inserted Feature card inserted is validRacadm feature -s Racadm feature -s No features active on the chassis Configuring FlexAddress Racadm feature -d -c flexaddressRacadm racresetcfg -c flex Deactivating FlexAddress Configuring FlexAddress for Chassis-Level Fabric and Slots Fabric Configuration Viewing WWN/MAC Address InformationPage Viewing WWN/MAC Address Information Using Racadm Racadm getflexaddr Command Messages $racadm setflexaddr Error Insufficient user $racadm feature -d -cPrivileges to perform $racadm setflexaddr Operation Limited Warranty FlexAddress Dell Software License Agreement Open Source Software General Fresh Power-up Scenario Configuring Network Settings for IOMManaging Fabrics Monitoring IOM Health Configuring Network Settings for IOM Using Racadm Managing Power Control Operation for I/O ModulesEnabling or Disabling LED Blinking for I/O Modules Managing and Monitoring Power Power Supply Redundancy Policy Redundancy PoliciesGrid Redundancy Policy Grid Redundancy Levels Dynamic Power Supply Engagement Default Redundancy Configuration Power Budgeting For Hardware ModulesPower Supply Redundancy Grid RedundancyPage Server Slot Power Priority Settings Assigning Priority Levels To Servers Assigning Priority Levels To Servers Using Racadm Viewing Power Consumption StatusViewing Power Budget Status Using CMC Web Interface Viewing Power Consumption Status Using CMC Web Interface Redundancy Status and Overall Power Health Viewing Power Budget Status Using RacadmPower Management After PSU Failure Power Management After Removing PSU Power required for new server is not Configuring Power Budget and Redundancy Power Conservation and Power Budget Maximum Power Conservation ModeServer Power Reduction to Maintain Power Budget 110V PSUs AC Operation External Power Management Remote Logging Configuring Power Budget and Redundancy Using Racadm Racadm config -g cfgChassisPower -o cfgChassisPowerCap Executing Power Control Operations Executing Power Control Operations on the Chassis Executing Power Control Operations on a Server Racadm chassisaction -m chassis action Executing Power Control Operations on the IOM Using Racadm Executing Power Control Operations on the IOMRacadm chassisaction -m switch action Viewing Status of the Storage Components Managing Chassis StorageViewing the Storage Topology Assigning Virtual Adapters To Slots Using CMC Web Interface Fault-Tolerance in Storage Controllers Viewing Controller Properties Using Racadm Viewing Controller Properties Using CMC Web InterfaceImporting or Clearing Foreign Configuration Configuring Storage Controller Settings Configuring Storage Controller Settings Using Racadm Shared Perc Controllers Racadm raid enablepercAdapterFQDD Enabling or Diasabling RAID Controller Using RacadmRacadm raid disablepercAdapterFQDD Viewing Physical Disk Drives Properties Using Racadm Assigning Global Hot Spares Using CMC Web InterfaceAssigning Global Hot Spares Using Racadm Recovering Physical Disks Viewing Virtual Disk Properties Using CMC Web Interface Viewing Virtual Disk Properties Using RacadmCreating Virtual Disk Using CMC Web Interface Applying Virtual Adapter Access Policy To Virtual Disks Modifying Virtual Disk Properties Using CMC Web Interface Viewing Enclosure Properties Using CMC Web Interface Assigning PCIe Slots To Servers Using CMC Web Interface Viewing PCIe Slot Properties Using CMC Web InterfaceManaging PCIe Slots Managing PCIe Slots Using Racadm PCIe Power Ride-Through Viewing PCIe Ridethrough Properties Status Using Racadm Racadm getpciecfg -r Configuring PCIe Ride-through Properties Status Using Racadm Supported Interfaces Troubleshooting and RecoveryCLI Racadm First Steps to Troubleshoot a Remote System Power TroubleshootingDownloading Snmp Management Information Base MIB File Page Troubleshooting Alerts Viewing Hardware Logs Using CMC Web InterfaceViewing Event Logs Viewing Hardware Log Using Diagnostic Console Viewing Hardware Logs Using RacadmViewing Chassis Logs Using Racadm Viewing Chassis Logs Using the Web Interface Resetting Components Saving or Restoring Chassis Configuration Troubleshooting Network Time Protocol NTP Errors Racadm config -g cfgRemoteHosts -o cfgRhostsNtpMaxDistRacadm config -g cfgRemoteHosts -o cfgRhostsNtpEnable Jan 8 200240 cmc ntpd1423 synchronized to LOCAL0, stratum Interpreting LED Colors and Blinking Patterns AC OK Troubleshooting Non-responsive CMCDC OK Obtain Recovery Information from DB-9 Serial Port Observing LEDs to Isolate the ProblemRecovering Firmware Image Troubleshooting Network Problems Troubleshooting ControllerPage Using LCD Panel Interface LCD Navigation Main Menu KVM Mapping Menu Settings DVD MappingEnclosure Menu IP Summary Menu Diagnostics Default ScreenFront Panel LCD Messages LCD Language LCD Module and Server Status Information RPM IOM a Current blower speed in RPM Related. For more information, see LCD Error Messages Web interface Frequently Asked Questions Racadm subcommand Transport Error RC=-1Racadm command failed Racadm chassislog help clear Managing and Recovering a Remote System Racadm getconfig -g cfgOobSnmp Active Directory No feature card inserted Error cant open file FlexAddress and FlexAddressPlus No feature card inserted IOM