100 | Dell Remote Access Controller 4 Firmware Version 1.30 manual

w w w . d e l l . c o m s u p p o r t . d e l l . c o m

Configuring the DRAC 4 Active Directory Settings Using the racadm CLI

Using the following commands to configure the DRAC 4 Active Directory Feature using the racadm CLI instead of the Web-based interface.

1Open a command prompt and type the following racadm commands: racadm config -g cfgActiveDirectory -o cfgADEnable 1

racadm config -g cfgActiveDirectory -o cfgADRacDomain <fully qualified rac domain name>

racadm config -g cfgActiveDirectory -o cfgADRootDomain <fully qualified root domain name>

racadm config -g cfgActiveDirectory -o cfgADRacName <RAC common name>

racadm sslcertupload -t 0x2 -f <ADS root CA certificate> racadm sslcertdownload -t 0x1 -f <RAC SSL certificate>

2If DHCP is enabled on the DRAC 4 and you want to use the DNS provided by the DHCP server, type the following command:

racadm config -g cfgLanNetworking -o cfgDNSServersFromDHCP 1

3If DHCP is disabled on the DRAC 4 or you want manually to input your DNS IP address, type the following commands:

racadm config -g cfgLanNetworking -o cfgDNSServersFromDHCP 0

racadm config -g cfgLanNetworking -o cfgDNSServer1 <primary DNS IP address>

racadm config -g cfgLanNetworking -o cfgDNSServer2 <secondary DNS IP address>

4Press Enter to complete the DRAC 4 Active Directory feature configuration.

Using Active Directory to Log In To the DRAC 4

You can use Active Directory to log in to the DRAC 4 through the Web-based interface, with remote racadm, or through the serial or telnet console.

The login syntax is consistent for all three methods:

<username@domain> or <domain>\<username> or <domain>/<username> (where username is an ASCII string of 1–256 bytes). No white space and no special characters (such as \, /, or @) are allowed in either the user name or the domain name.

NOTE: You cannot specify NetBIOS domain names, such as Americas, since those names cannot be resolved.

100

Using the DRAC 4 With Microsoft® Active Directory

Image 100

Dell Remote Access Controller 4 Firmware Version 1.30 manual Using Active Directory to Log In To the Drac, 100

Contents

Firmware Version 1.30 User’s Guide W . d e l l . c o m s u p p o r t . d e l l . c o m May Contents Configuring the Drac 4 Network Settings Configuring Red Hat Enterprise Linux forViewing Localized Versions of the Web-Based Interface Removing Drac 4-Related Applications and Drivers Configuring Red Hat Enterprise Linux Minicom for Adding and Configuring Drac 4 Users and AlertsEnabling Microsoft Telnet for Telnet Console Redirection First Steps to Troubleshoot a Remote System Configuring Active Directory to Access Your Drac Installing the Dell Extension to the Active Directory UsersConfiguring the Drac 4 Active Directory Settings Using Active Directory to Log In To the Drac 100 Installing Operating Systems Using Virtual Media 114 Enabling and Disabling the Virtual Media Feature 115Viewing a List of Serial/Telnet Commands 128 111 Using the racadm Utility to Configure the Drac 137 Creating Bootable Deployment Image Files 146134 136 151 152153 154 164 165166 167 172 173174 175 178 179180 181 190 194197 199 CfgNetTuningNicAutoneg Read/Write 204 CfgNetTuningNicFullDuplex Read/Write 205200 203 214 217218 219 Setting Up Active Directory Objects Drac 4 Power RequirementsManagement Station COM Port Settings Overall Architecture of Virtual Media 111 Enable email Alert Properties Certificate Signing Request GenerationWatchdog Information Fields Last Crash Screen Page Buttons Drac 4 Network Error Codes DellAssociationObject ClassList of Attributes Added to Log/Verbose Level Options 131 Table A-5 Config Subcommand Options Table A-6 Getconfig Subcommand Options 152 Table A-7Table A-10 Fwupdate Subcommand Options 157 Table A-11 Table A-12 Getssinfo Subcommand Options 159 Table A-13 Table A-28 Serveraction Subcommand Options 169 Table A-29 Table A-33 Setrac Subcommand Options 173 Table A-34Table A-35 Sslcsrgen Subcommand Options 175 Table A-36 Table A-41 Sslcertview Subcommand Options 178 Table A-42 What’s New in Drac 4 in this Release? Drac 4 Overview Drac 4 Hardware Features Drac 4/I Hardware Features RJ-45 Connector Hardware Specifications Power RequirementsConnectors Lists the power requirements for the Drac Drac 4 Security Features Supported Remote Access ConnectionsLists the features of each type of connection Supported Operating Systems Supported PlatformsSupported Web Browsers Features Other Documents You May Need Drac 4 Overview Installing the Drac 4 Hardware Software Installation and Configuration OverviewInstalling and Setting Up the Drac What You Need to Get Started Installing the Software on the Managed System Disabling the Windows Automatic Reboot Option Installing the Software on the Management Station Configuring a Supported Web BrowserMount /mnt/cdrom Cd /mnt/cdrom Rpm -ivh linux/rac/*.rpm Rpm -e racadm Installing the Sun Java Plug-In Installing the Sun Java Plug-In to Use Console RedirectionInstalling the Sun Java Plug-In to Use Mozilla Viewing Localized Versions of the Web-Based Interface Configuring Drac 4 Properties Rpm -iv j2re-14versionnumber-linux-i586.rpmFor example Register the Java plug-in Configuring the Drac 4 Network Settings Configuring the Drac 4 Network Settings Using the Option ROM Waiting for response from Dhcp Server Virtual Media Configuration Options Adding and Configuring Drac 4 Users Adding and Configuring Snmp Alerts Clearing the Web Browser Cache With Internet Explorer Updating the Drac 4 FirmwareClearing the Web Browser Cache With Mozilla Accessing the Drac 4 Through a Network Where action is start, stop, status, or probe Service racsvc statusDrac 4 Software Basics for Red Hat Enterprise Linux Removing the Drac Additional InformationRemoving Drac 4-Related Applications and Drivers Serial and Telnet Console Features Drac 4 NIC Configuring the System Setup Program on the Managed System F2 = System Setup Append two options to the kernel line Serial --unit=0 --speed=57600 terminal --timeout=10 serialKernel ............. console=ttyS0,57600 Co2345respawn/sbin/agetty -h -L 57600 ttyS0 vt100 Enabling Login to the Console After BootSample File /etc/innitab TtyS0 Enabling the Serial/Telnet Console on the Drac Racadm getconfig -g group Racadm config -g group -o object valueUsing racadm Remotely Racadm getconfig -g cfgSerial Using the Secure Shell SSHRacadm config -g cfgSerial -o cfgSerialSshEnable You can change the SSH port with the command AES192-CBCAES128-CBC 3DES-192-CBC Connecting the DB-9 Cable Required Pinout for DB-9 Null Modem Cable Signal NamePage Clear the init, reset, connect, and hangup Configuring HyperTerminal for Serial Console RedirectionType minicom -c on Page Using a Serial or Telnet Console Enabling Microsoft Telnet for Telnet Console Redirection Managing and Recovering a Remote System Accessing the Web-Based InterfaceLogging Adding and Configuring Drac 4 Users and Alerts Adding and Configuring Drac 4 UsersPassword User Properties Property Description User Name Configuring User email Alerts Use the information in -3 to enable email alerts Go Back To User Configuration Email Alert Severity Description InformationalSevere Alert Description Configuring the Drac 4 NIC Duplex Mode Email Alert SettingsCheck box is selected Default Smtp Email Server Drac 4 Network Configuration Page Buttons Adding and Configuring Snmp Alerts Configuring Alerts by Severity System Fan Sensors Monitors the system fan speed RPM Severity Options Description InformationalSuch as chassis intrusion Snmp Alert Properties PropertyDescription Managing a Remote System10. Snmp Alerts Page Buttons Action Print Updating the Drac 4 Firmware Ensuring Drac 4 Network Security Issuer TypeSerial Key Size Default certificate you received with your Drac From the CAUpload Certificate View Server Certificate 14. Required CSR Fields Properties Description Locality L State SManagement Generate 16. Certificate Management Page Buttons Action Print Viewing System Information Bios Version Service TagServer Address System Information Recovering and Troubleshooting the Managed System Managing Power on a Remote System First Steps to Troubleshoot a Remote System Using the SEL SEL provides buttons see -24 in the top-right corner Using the Drac 4 Log 25. Status Indicator Icons DescriptionDate/ Time User Using the Diagnostic Console Viewing the Last System Crash Screen 28. Diagnostic Commands Description Arp IfconfigNetstat Ping IP Address Troubleshooting Network Problems 30. Drac 4 Network Error Codes Description Troubleshooting Alerting Problems RAC189A RAC065A Frequently Asked Questions Managing and Recovering a Remote System Managing and Recovering a Remote System Active Directory Schema Extensions Using the Drac 4 With Microsoft Active Directory Overview of the RAC Schema Extensions Active Directory Object Overview RAC4 Privilege Object Group1 Priv1 User1 User2 User3 AO1 Extending the Active Directory Schema Configuring Active Directory to Access Your DracUsing the Dell Schema Extender Click Next to run the Dell Schema Extender Click Finish DellRAC4Privileges Class 840.113556.1.8000.1280.1.1.1.3 Description840.113556.1.8000.1280.1.1.1.4 Description Attributes DellRAC4Privileges DellProduct Class DelIsLogClearAdmin False Ldaptypecaseignorestring Adding Drac 4 Users and Privileges to Active Directory Opening the Active Directory Users and Computers Snap-InCreating a RAC Device Object Creating a Privilege Object Adding Objects to an Association Object Creating an Association ObjectSelect the scope for the Association Object Click OK Enabling SSL on a Domain Controller Click Next and click Finish Select Computer account and click Next Exporting the Domain Controller Root CA CertificateClick Finish and click OK Configuring the Drac Click the Configuration tab and select Network Racadm config -g cfgLanNetworking -o cfgDNSServersFromDHCP Using Active Directory to Log In To the Drac100 Lists frequently asked questions and answers 101 Racadm sslcertupload -t 0x1 -f websslcert 102 Overview Using Console Redirection103 Maximum console redirection sessions Current console redirection sessions 105 Using Console Redirection Frequently Asked Questions Answer Racadm racreset commandRunning the racadm racreset hard command 106 107 108 Run Xconfigurator if not previously run before Rpm -qa grep radeon7000mdellserver109 Run Xwindows startx 110 111 Overall Architecture of Virtual Media Managed System Operating System Requirements on the Managed System Using the Virtual Media Feature Installing the Virtual Media Plug-In113 Booting From the Virtual Media Installing Operating Systems Using Virtual Media Enabling and Disabling the Virtual Media Feature Racadm config -g cfgRacVirtual -o cfgVirMediaDisableCat /var/log/messages grep Virtual 115 Configuring the Virtual Floppy Feature as a Super Floppy Configuring the Virtual Floppy as a Hard DriveRacadm config -g cfgRacVirtual -o cfgFloppyEmulation DELL-VIRTUALS-120 Removable Media Drive Installation RacvmcliExecution Environment 117 Interfaces and APIs VM-CLI ParametersRacvmcli parameters OS-shell options Drac 4 IP Address UDRAC-user-name 119 CD/DVD Device or Image File Cdevice-name image-file 121 Racadm getconfig -g Drive Number 0 failed toDetect Virtual device Drive Number 1 failed to CfgRacVirtual Use the racadm vmdisconnect command to Other console startupMessages 123 Drive Number 0 Virtualfloppy Drive Removable Media DriveDrive Number 1 Virtualcdrom 124 125 Cat /var/log/messages grep Cat /etc/fstab grep /dev/hdeMount /mnt/cdrom1 126 Starting a Text Console Logging into the Drac127 Viewing a List of Serial/Telnet Commands Racadm config -g cfgSerial -o cfgSerialHistorySize numberSetsvctag Firmware Unsupported Command 128 Using the racadm CLI Racadm Command DescriptionPrompt a racadm help more 129 Using the racadm CLI Remotely Lists the options for the racadm commandRacadm Synopsis Racadm Options Type the following command to disable the remote capability Racadm Command Options131 Option Description Racadm Subcommand Descriptions 132 Configuring Multiple Drac 4s Racadm Error MessagesConfiguration File Overview 133 Creating a Drac 4 Configuration File Racadm getconfig -f myfile.cfg Use the racresetcfg subcommand to keep all Drac 4s the same CfgLanNetworking CfgNicIpAddress=143.154.133.121See the example in the previous bullet 135 Configuration File Example Racadm config -g groupName -o objectName -i indexRacadm getconfig -g groupName -i index 136 Using the racadm Utility to Configure the Drac File contents are as followsThis file will be updated as follows 137 Racadm getconfig -u username Racadm getconfig -g cfgUserAdmin -i index# cfgUserAdminIndex=XX CfgUserAdminUserName= Before Adding a Drac 4 User 139 Adding a Drac 4 User With Alerting CapabilitiesSpecific object Adding a Drac 4 User With Permissions 140 Racadm getconfig -g cfgLanNetworking Configuring Drac 4 Network Properties141 Racadm subcmd Error message Racadm subcmd Transport Error messageRacadm subcmd Firmware Error message 142 Requirements 143 Tasks Vmdeploy 145 Creating Bootable Deployment Image Files To create image files from existing bootable mediaLinux Users Windows Users Troubleshooting Troubleshooting the Drac147 Troubleshooting Racadm help Racadm help subcommand HelpSynopsis Description Config/getconfig ArpClearasrscreen Racadm arp Config Subcommand Description Racadm config -p -c -f filename Racadm config -gRacadm getconfig Filename Racadm Getconfig Getconfig Subcommand Description Table A-6. getconfig Subcommand Options DescriptionFilename command 152 Table A-7 describes the coredump subcommand CoredumpExamples Racadm coredump Output Example 154 Fwupdate CoredumpdeleteCurrent task stack Ipev -#005e0000 binary data FW dcmdCoreDump No Core dump available Load the update file into the Drac 4 RAMdisk area Table A-10 describes the fwupdate subcommand options 156Table A-9. fwupdate Subcommand Definition Input Table A-10. fwupdate Subcommand Options Description 157 Updating the Firmware Racadm -r Racip -u user -p password fwupdate -g -u -a158 Table A-11 describes the getssinfo subcommand Table A-12 describes the getssinfo subcommand optionsGetssninfo Racadm getssninfo -A -u username Getsysinfo WebRoot Thu 06 Mar 143.166.174.19 2004 103239 GMT-0600 Table A-15 describes the getsysinfo subcommand options Watchdog information/recovery actionFollowing data element is output as a string 161 Racadm getsysinfo -A -w -s RestrictionsRacadm getsysinfo -w -s Ifconfig Racadm ifconfigGetractime Racadm getractime -u -d Netstat PingSetniccfg/getniccfg Racadm ping ipaddress Table A-21. setniccfg/getniccfg Subcommand Definition Description for setniccfgDescription for getniccfg 165 Getsvctag RacdumpExample Racadm getsvctag Transport Error RC=-1 RacresetRacadm racreset hard soft graceful delay in seconds Racresetcfg Table A-25 describes the racreset subcommand optionsTable A-26 describes the racresetcfg subcommand Racadm racresetcfg Table A-27 describes the serveraction subcommand Racadm serveraction -d delay actionTable A-27. serveraction SubcommandDefinition Serveraction Serveraction command returns without output if successful Table A-29 describes the getraclog commandTable A-29 Getraclog Command Definition Getraclog Table A-30 describes the getsel command ClrraclogGetsel Racadm clrraclog Clrsel GettracelogRacadm clrsel Racadm gettracelog Racadm gettracelog -m Setrac Racadm setrac -h -o -T -d Table A-34 describes the sslcsrgen subcommand Table A-33. setrac Subcommand OptionsTable A-34. sslcsrgen SubcommandDescription Sslcsrgen Table A-35 describes the sslcsrgen subcommand options Table A-35. sslcsrgen Subcommand Options DescriptionOptions 175 Racadm sslcertupload -t type -f filename SslcertuploadRacadm sslcertupload -t 0x1 -f c\cert\cert.txt Racadm sslcertdownload -t type -f filename SslcertdownloadRacadm sslcertdownload -t 0x1 -f c\cert\cert.txt Output Examples SslcertviewRacadm sslcertview -t type -A 1024 DSU+123431 DSU+153431 RMC Default Certificate Dell Inc TestemailRound Rock Texas john@dell.com Racadm testemail -i index -u username Testtrap Racadm testtrap -i index Table A-46 describes the vmdisconnect subcommand Table A-46. vmdisconnect Subcommand DescriptionVmdisconnect Racadm vmdisconnect Racadm Subcommand Man Pages IdRacProductInfo Read Only IdRacInfoIdRacDescriptionInfo Read Only IdRacName Read/Write IdRacVersionInfo Read OnlyIdRacMisc Read/Write CfgLanNetworking IdRacType ReadCfgDNSDomainNameFromDHCP Read/Write CfgDNSDomainName Read/Write CfgDNSRacName Read/Write CfgDNSRegisterRac Read/Write CfgDNSServersFromDHCP Read/Write CfgDNSServer1 Read/WriteCfgDNSServer2 Read/Write 187 CfgNicIpAddress Read/Write CfgNicEnable Read/WriteCfgNicNetmask Read/Write CfgCurrentLanNetworking CfgNicGateway Read/WriteCfgNicUseDhcp Read/Write CfgNicMacAddress Read Only CfgNicCurrentIpAddress Read Only CfgNicCurrentNetmask Read OnlyCfgNicCurrentGateway Read Only CfgNicCurrentDhcpWasUsed Read Only CfgRhostsSmtpEmailEnable Read/Write CfgRemoteHostsCfgDNSCurrentDomainName Read Only CfgDNSCurrentServer1 Read Only CfgRhostsFwUpdateIpAddr Read/Write CfgRhostsFwUpdateTftpEnable Read/WriteCfgRhostsSmtpServerIpAddr Read/Write CfgUserAdmin CfgRhostsFwUpdatePath Read/WriteCfgUserAdminPrivilege Read/Write Legal Values CfgUserAdminPassword Write Only CfgUserAdminUserName Read/WriteTable B-1. Bit Masks for User Privileges CfgUserAdminAlertFilterRacEventMask Read/Write CfgUserAdminAlertFilterSysEventMask Read/WriteCfgUserAdminEmailEnable Read/Write 195 CfgUserAdminEmailAddress Read/Write CfgUserAdminEmailCustomMsg Read/WriteCfgUserAdminIndex Read Only CfgTraps CfgTrapsEnable Read/Write CfgTrapsSnmpCommunity Read/WriteCfgTrapsFilterRacEventMask Read/Write 197 CfgTrapsFilterSysEventMask Read/Write CfgSessionManagementCfgTrapsIndex Read Only CfgSsnMgtSshIdleTimeout Read/Write CfgSsnMgtMaxSessions Read/WriteCfgSsnMgtMaxSessionsPerUser Read/Write 199 CfgSerial CfgSerialConsoleEnable Read/WriteCfgSerialBaudRate Read/Write CfgSerialConsoleIdleTimeout Read/Write CfgSerialConsoleQuitKey Read/WriteCfgSerialConsoleShellType Read/Write 201 CfgSerialConsoleNoAuth Read/Write CfgSerialConsoleCommand Read/WriteCfgSerialHistorySize Read/Write CfgSerialSshEnable Read/Write CfgSerialTelnetEnable Read/WriteCfgSerialCom2RedirEnable Read/Write 203 CfgNetTuning CfgNetTuningNicAutoneg Read/WriteCfgNetTuningNic100MB Read/Write CfgSerialTelnet7flsBackspace Read/Write CfgNetTuningNicFullDuplex Read/Write CfgNetTuningNicMtu Read/WriteCfgNetTuningIpTtl Read/Write Legal Values Integer from 1 to Default 0x40 CfgNetTuningIpReassTtl Read/Write CfgNetTuningTcpSrttBase Read/WriteCfgNetTuningTcpSrttDflt Read/Write Legal Values Integer from 6 to Default 0x6 206 CfgNetTuningTcpReXmtMin Read/Write CfgNetTuningTcpReXmtMax Read/WriteCfgNetTuningTcpMsl Read/Write 207 CfgNetTuningIpSubnetsAreLocal Read/Write Tuning the Drac 4 for Satellite ConnectivityWhere value is obtained from Table B-2 Ini files are used CfgOobSnmpTrapsEnable Read/Write Legal Values Boolean, either 1 or 0 True or False DefaultCfgOobSnmp CfgOobSnmpAgentCommunity Read/Write CfgRacTuning CfgOobSnmpAgentEnable Read/WriteDescription =Disable, 1=Enable transmission of Snmp traps CfgRacTuneHttpPort Read/Write CfgRacTuneHttpsPort Read/Write CfgRacTuneSshPort Read/WriteCfgRacTuneTelnetPort Read/Write 211 CfgRacTuneFwUpdateResetDelay Read/Write CfgRacTuneRemoteRacadmEnable Read/WriteLegal Values 115200, 57600, 19200, Default 212 CfgRacTuneHostCom2BaudRate Read/Write IfcRacManagedNodeOs CfgRacTuneConRedirPort Read/WriteIfcRacMnOsHostname Read/Write IfcRacMnOsOsName Read/Write CfgRacSecurity IfcRacMnOsOsType Read OnlyCfgRacSecCsrCommonName Read/Write CfgRacSecCsrOrganizationName Read/Write CfgRacSecCsrLocalityName Read/Write CfgRacSecCsrOrganizationUnit Read/WriteCfgRacSecCsrStateName Read/Write CfgRacSecCsrCountryCode Read/Write CfgRacSecCsrEmailAddr Read/WriteCfgRacSecCsrKeySize Read/Write Description CSR state CfgVirMediaDisable Read/Write Legal Values Or 0 True or False Default DescriptionCfgRacVirtual CfgFloppyEmulation Read/Write CfgVirtualBootOnce Read/Write CfgActiveDirectoryCfgVirAtapiSrvPort Read/Write CfgADRacDomain Read/Write CfgADEnable Read/Write CfgADAuthTimeout Read/WriteCfgADRacName Read/Write 219 Event Filter Operation and Event Mask Properties Drac 4-Generated Event Mask DefinitionsCfgADRootDomain Read/Write 220 System-Generated Alert Mask Definitions Racadm -g cfgTraps -o cfgTrapsFilterSysEventMask -i1221 Miscmask Alert Filter Properties 222StatMask SenMask Alert Test Commands Email Test CommandAlert Data Definitions Racadm testemail -i index Racadm testemail -u username Trap Test Command SynopsisRacadm testtrap -t -i trap index 224 Acronym for application programming interface Other charactersAbbreviation for compact disc Acronym for custom factory integration Abbreviation for Dell Remote Access Controller Abbreviation for Dynamic Domain Naming SystemAbbreviation for Domain Name System Abbreviation for disk storage unit Abbreviation for international standards organization Abbreviation for local area networkAbbreviation for light-emitting diode Abbreviation for management information base Abbreviation for remote access controller Abbreviation for uninterruptible power supplyRAM disk Acronym for system event log 229 Index Drac 4, removing related applications and drivers 231 Index