Dell IDRAC6 User Manual page 180

8 Enter the followinf information:
• Select Enable Generic LDAP.
NOTE:
for the direct member of the group to match the user DN. Also, only single
domain is supported. Cross domain is not supported.
• Select the Use Distinguished Name to Search Group Membership
option to use the Distinguished Name (DN) as group members.
iDRAC6 compares the User DN retrieved from the directory to
compare with the members of the group. If unchecked, user name
provided by the login user is used to compare with the members of the
group.
• In the LDAP Server Address field, enter the fully qualified domain
name (FQDN) or the IP address of the LDAP server. To specify
multiple redundant LDAP servers that serve the same domain, provide
the list of all servers separated by commas. iDRAC6 tries to connect to
each server in turn, until it makes a successful connection.
• Enter the port used for LDAP over SSL in the LDAP Server Port field.
The default is 636.
• In the Bind DN field, enter the DN of a user used to bind to the server
when searching for the login user's DN. If not specified, an
anonymous bind is used.
• Enter the Bind Password to use in conjunction with the Bind DN.
This is required if anonymous bind is not allowed.
• In the Base DN to Search field, enter the DN of the branch of the
directory where all searches should start.
• In the Attribute of User Login field, enter the user attribute to search
for. Default is UID. It is recommended that this be unique within the
chosen Base DN, else a search filter must be configured to ensure the
uniqueness of the login user. If the user DN cannot be uniquely
identified by the search combination of attribute and search filter, the
login will fail.
• In the Attribute of Group Membership field, specify which LDAP
attribute should be used to check for group membership. This should
be an attribute of the group class. If not specified, iDRAC6 uses the
member and uniquemember attributes.
180
Using the iDRAC6 Directory Service
In this release, nested group is not supported. The firmware searches