Standard Schema Active Directory Overview

As shown in Figure 7-3, using standard schema for Active Directory integration requires configuration on both Active Directory and iDRAC6.

Figure 7-3. Configuration of iDRAC with Microsoft Active Directory and Standard Schema

Configuration on Active

Configuration on

Directory Side

iDRAC Side

 

Role

 

Role

Group Name

Role

Group

and Domain

Definition

 

Name

 

User

On the Active Directory side, a standard group object is used as a role group. A user who has iDRAC6 access will be a member of the role group. To give this user access to a specific iDRAC6, the role group name and its domain name need to be configured on the specific iDRAC6. Unlike the extended schema solution, the role and the privilege level is defined on each iDRAC6, not in the Active Directory. Up to five role groups can be configured and defined in each iDRAC. Table 7-9 shows the default role group privileges.

168

Using the iDRAC6 Directory Service

Page 168
Image 168
Dell IDRAC6 manual Standard Schema Active Directory Overview, 168