Dell IDRAC6 manual Configuring Generic Ldap Directory Service Using Racadm, 182

17Enter the user name and password of a directory user that is chosen to test the LDAP settings. The format depends on what Attribute of User Login is used and the user name entered must match the value of the chosen attribute.

The test results and the test log are displayed. You have completed the generic LDAP Directory Service configuration.

Configuring Generic LDAP Directory Service Using RACADM

racadm config -g cfgldap -o cfgLdapEnable 1

racadm config -g cfgldap -o cfgLdapServer <FQDN or IP-Address>

racadm config -g cfgldap -o cfgLdapPort <Port Number> racadm config -g cfgldap -o cfgLdapBaseDN dc= common,dc=com

racadm config -g cfgldap -o cfgLdapCertValidationenable 0

racadm config -g cfgldaprolegroup -i 1 -o cfgLdapRoleGroupDN 'cn=everyone,ou=groups,dc= common,dc=com'

racadm config -g cfgldaprolegroup -i 1 -o cfgLdapRoleGroupPrivilege 0x0001

View the settings using the below commands

racadm getconfig -g cfgldap

racadm getconfig -g cfgldaprolegroup -i 1

Use RACADM to confirm whether login is possible

racadm -r <iDRAC6–IP> -u user.1 -p password getractime

Additional settings to test BindDN option

racadm config -g cfgldap -o cfgLdapBindDN "cn= idrac_admin,ou=iDRAC_admins,ou=People,dc=common,dc= com"

racadm config -g cfgldap -o cfgLdapBindPassword password

182

Using the iDRAC6 Directory Service