Dell Drac 5 User Guide

Adding and Configuring DRAC 5 Users101
To verify if a user exists, type the following command at the command prompt:
racadm getconfig -u 
OR
type the following command once for each index of 1–16:
racadm getconfig -g cfgUserAdmin -i 
 NOTE: You can also type racadm getconfig -f  and view 
or edit the myfile.cfg file, which includes all DRAC 5 configuration parameters.
Several parameters and object IDs are displayed with their current values. 
Two objects of interest are:
# cfgUserAdminIndex=XX...

102Adding and Configuring DRAC 5 Users
Example
The following example describes how to add a new user named John with a 
123456 password and LOGIN privileges to the RAC.
racadm config -g cfgUserAdmin -o cfgUserAdminUserName 
-i 2 john
racadm config -g cfgUserAdmin -o cfgUserAdminPassword 
-i 2 123456
racadm config -g cfgUserAdmin -i 2 -o cfgUserPrivilege 
0x00000001
racadm config -g cfgUserAdmin -i 2 -o 
cfgUserAdminEnable 1
To verify, use one of the following commands:
racadm getconfig -u john
racadm...

Adding and Configuring DRAC 5 Users103
Testing e-mail Alerting
The RAC e-mail alerting feature allows users to receive e-mail alerts when 
a critical event occurs on the managed system. The following example shows 
how to test the e-mail alerting feature to ensure that the RAC can properly 
send out e-mail alerts across the network.
racadm testemail -i 2
 NOTE: Ensure that the SMTP and Email Alert settings are configured before testing 
the e-mail alerting feature. See Configuring E-Mail Alerts on page...

104Adding and Configuring DRAC 5 Users 

Using the DRAC 5 With Microsoft Active Directory105
6
Using the DRAC 5 With Microsoft 
Active Directory
A directory service maintains a common database of all information needed 
for controlling users, computers, printers, etc. on a network. If your company 
already uses the Microsoft Active Directory service software, you can 
configure the software to provide access to the DRAC 5, allowing you to add 
and control DRAC 5 user privileges to your existing users in your Active 
Directory software.
 NOTE:...

106Using the DRAC 5 With Microsoft Active Directory
Supported Active Directory Authentication 
Mechanisms
You can use Active Directory to define user access on the DRAC 5 through 
two methods: you can use a standard schema solution, which uses Active 
Directory group objects only or you can use the extended schema solution, 
which Dell has customized to add Dell-defined Active Directory objects. 
For more information about these solutions, see the sections below.
When using Active Directory to configure...

Using the DRAC 5 With Microsoft Active Directory107
Figure 6-1. Configuration of DRAC 5 with Microsoft Active Directory and 
Standard Schema
Table 6-1. Default Role Group Privileges
Role 
GroupsDefault 
Privilege LevelPermissions Granted Bit Mask
Role 
Group 1Administrator Login to DRAC, Configure 
DRAC, Configure Users, 
Clear Logs, Execute Server 
Control Commands, Access 
Console Redirection, Access 
Vi r t u a l  M e d i a, Te s t  A l e r t s, 
Execute Diagnostic 
Commands0x000001ff
Role 
Group 2Po...

108Using the DRAC 5 With Microsoft Active Directory
 NOTE: The Bit Mask values are used only when setting Standard Schema with the 
RACADM.
There are two ways to enable Standard Schema Active Directory:
• With the DRAC 5 web-based user interface. See Configuring the DRAC 
5 With Standard Schema Active Directory and Web-Based Interface on 
page 109.
• With the RACADM CLI tool. See Configuring the DRAC 5 With 
Standard Schema Active Directory and RACADM on page 111.
Configuring Standard Schema Active...

Using the DRAC 5 With Microsoft Active Directory109
Configuring the DRAC 5 With Standard Schema Active Directory and
Web-Based Interface
1Open a supported Web browser window.
2Log in to the DRAC 5 Web-based interface.
3Expand the System tree and click Remote Access.
4Click the Configuration tab and select Active Directory. 
5On the Active Directory Main Menu page, select Configure Active 
Directory
 and click Next.
6In the Common Settings section: 
aSelect the Enable Active Directory check box.
bTy p e...

110Using the DRAC 5 With Microsoft Active Directory
14Click Go Back To Active Directory Configuration and Management.
15Click Go Back To Active Directory Main Menu.
16Upload your domain forest Root CA certificate into the DRAC 5.
aSelect the Upload Active Directory CA Certificate check-box and 
then click 
Next.
bIn the Certificate Upload page, type the file path of the certificate or 
browse to the certificate file.
 NOTE: The File Path value displays the relative file path of the certificate you 
are...