Frequently Asked Questions; Table 5-8. Using The Drac 4 With Active Directory Frequently Asked Questions - Dell Remote Access Controller 4 Firmware Version 1.30 User Manual

Frequently Asked Questions

Table 5-8 lists frequently asked questions and answers.
Table 5-8. Using the DRAC 4 With Active Directory: Frequently Asked Questions
Question
Can I log into the DRAC 4 using Active Directory
across multiple forests?
Does the login to the DRAC 4 using Active
Directory work in mixed mode (that is, the domain
controllers in the forest run different operating
systems, such as Microsoft Windows NT
Windows 2000, or Windows Server 2003)?
Does using the DRAC 4 with Active Directory
support multiple domain environments?
Can these Dell-extended objects (Dell
Association Object, Dell RAC Device, and
Dell Privilege Object) be in different domains?
Are there any restrictions on Domain Controller
SSL configuration?
Answer
The DRAC 4's Active Directory querying algorithm
only supports a single tree in a single forest.
Yes. In mixed mode, all objects used by the DRAC 4
querying process (among user, RAC Device Object,
and Association Object) have to be in the same domain.
®
4.0,
The Dell-extended Active Directory Users and
Computers snap-in checks the mode and limits users
in order to create objects across domains if in
mixed mode.
Yes. The domain forest function level must be in
Native mode or Windows 2003 mode. In addition, the
groups among Association Object, RAC user objects,
and RAC Device Objects (including Association
Object) must be universal groups.
The Association Object and the Privilege Object must
be in the same domain. The Dell-extended Active
Directory Users and Computers snap-in forces you to
create these two objects in the same domain.
Other objects can be in different domains.
Yes. All Active Directory servers' SSL certificates in
the forest must be signed by the same root CA since
DRAC 4 only allows uploading one trusted CA SSL
certificate.
Using the DRAC 4 With Microsoft
®
101
Active Directory