Dell iDRAC8 manual Testing Active Directory Settings

•Using config command: racadm config -g cfgLanNetworking -o cfgDNSServersFromDHCP 1

•Using set command: racadm set iDRAC.IPv4.DNSFromDHCP 1

3.If DHCP is disabled in iDRAC or you want to manually input your DNS IP address, enter the following RACADM commands:

•Using config command:

racadm config -g cfgLanNetworking -o cfgDNSServersFromDHCP 0 racadm config -g cfgLanNetworking -o cfgDNSServer1 <primary DNS IP address>

racadm config -g cfgLanNetworking -o cfgDNSServer2 <secondary DNS IP address>

•Using set command:

racadm set iDRAC.IPv4.DNSFromDHCP 0

racadm set iDRAC.IPv4.DNSFromDHCP.DNS1 <primary DNS IP address> racadm set iDRAC.IPv4.DNSFromDHCP.DNS2 <secondary DNS IP address>

4.If you want to configure a list of user domains so that you only need to enter the user name during log in to iDRAC Web interface, enter the following command:

•Using config command: racadm config -g cfgUserDomain -o cfgUserDomainName <fully qualified domain name or IP Address of the domain controller> -i <index>

•Using set command: racadm set iDRAC.UserDomain.<index>.Name <fully qualified domain name or IP Address of the domain controller>

You can configure up to 40 user domains with index numbers between 1 and 40.

5.Press Enter to complete the Active Directory configuration with Extended Schema.

Testing Active Directory Settings

You can test the Active Directory settings to verify whether your configuration is correct, or to diagnose the problem with a failed Active Directory log in.

Testing Active Directory Settings Using iDRAC Web Interface

To test the Active Directory settings:

1.In iDRAC Web Interface, go to Overview → iDRAC Settings → User Authentication → Directory Services → Microsoft Active Directory.

The Active Directory summary page is displayed.

2.Click Test Settings.

3.Enter a test user's name (for example, username@domain.com) and password and click Start Test. A detailed test results and the test log displays.

If there is a failure in any step, examine the details in the test log to identify the problem and a possible solution.

NOTE: When testing Active Directory settings with Enable Certificate Validation checked, iDRAC requires that the Active Directory server be identified by the FQDN and not an IP address. If the Active Directory server is identified by an IP address, certificate validation fails because iDRAC is not able to communicate with the Active Directory server.

161