racadm config -g cfgActiveDirectory -o cfgADDcSRVLookupDomainName <domain name to use on the DNS lookup>

If you want to disable the certificate validation during SSL handshake, type the following RACADM command:

racadm config -g cfgActiveDirectory -o cfgADCertValidationEnable 0

In this case, you do not have to upload a CA certificate.

If you want to enforce the certificate validation during SSL handshake, type the following RACADM command:

racadm config -g cfgActiveDirectory -o cfgADCertValidationEnable 1

In this case, you must upload a CA certificate using the following RACADM command:

racadm config -g cfgActiveDirectory -o cfgADCertValidationEnable 1

racadm sslcertupload -t 0x2 -f <ADS root CA certificate>

Using the following RACADM command may be optional. See "Importing the iDRAC6 Firmware SSL Certificate" on page 147 for additional information.

racadm sslcertdownload -t 0x1 -f <RAC SSL certificate>

2If you want to specify the time in seconds to wait for Active Directory (AD) queries to complete before timing out, type the following command:

racadm config -g cfgActiveDirectory -o cfgADAuthTimeout <time in seconds>

3If DHCP is enabled on the iDRAC and you want to use the DNS provided by the DHCP server, type the following RACADM command:

racadm config -g cfgLanNetworking -o cfgDNSServersFromDHCP 1

166

Using the iDRAC6 Directory Service

Page 166
Image 166
Dell IDRAC6 manual 166