Kerberos authentication?

Hi, thanks for choosing Dell. I believe this article could help you. Wish you a good day.

https://dell.to/3aWrRvX

Hi DELL-Young E,

Thanks for the response, but the link does not address Kerberos authentication to AD.  Regular NTLM authentication to AD (what the article is about) works fine, but our privileged accounts are only enabled for the more secure Kerberos technology, per current security best practices for accounts that can update firmware on physical hosts.

Best,

Sysadmin001

Hello @Sysadmin001,

I've been checking all documentation available regarding Kerberos technology configuration. Both in the latest version User's guide: https://dell.to/2Z3ZGbL and the internal documentation and I cannot see any reference to Kerberos authentification.

Regards.

OK thank you.  Is there a mechanism available for requesting this feature?

Sysadmin001,

With OME you can't modify it to do it any other way, while we can submit the request to the OpenManage group, I am not certain it would make it into future versions.

Hi Chris,

OK.  Please submit the request nonetheless.  Kerberos is considerably more secure than NTLMv1/v2.  See for example: https://www.calcomsoftware.com/ntlm-v1-and-v2-vs-kerberos/

And Kerberos has been around for a long time.

Best,

Sysadmin001

I will look into getting it submitted. I am not certain of a response time, but if I hear anything I will let you know.

Chris, thank you.

Hi,

we have now the same issue. Can't connect with our accounts since privileged accounts were activated. 

NTLM is old and weak. Can't understand why DELL still use it.

@DELL-Chris H ​ How does one go about submitting a feature request to the OpenManage group? It is redonculous that there is no Kerberos support for a product that has the keys to the kingdom. The OS underpinning OME has Kerberos support unless Dell stripped it out. It was a nightmare just getting secure LDAP working. We're now running Version 4.3.2 (Build 49) and still no Kerberos support. Microsoft officially deprecated NTLM authentication in June 2024 and will drop all support in the near future. 

Hi @DELL-Chris H ,

We also would like to switch to Kerberos for OpenManage Authentification,

no news since 2021, pretty unbeliveable !