Unsolved
This post is more than 5 years old
6 Posts
0
4487
August 23rd, 2016 16:00
Setting up AD auth with PowerEdge FX2s CMC
Hi there,
I've been trying to configure AD Auth for the CMC GUI and have been running into this issue:
[check]: (system) Verify needed system resources: PASSED
[check]: (setup) Validate AD configuration: PASSED
INFO - (setup) Using standard schema
[check]: (setup) Verify SSL certificate files exist: PASSED
[check]: (dns) Acquire LDAP and GC SRV records: PASSED
[check]: (authen) Acquire user privileges: FAILED
ERROR - (authen) AD INVALID CREDENTIAL 0x00006007
RESULT - Unable to acquire user privileges
TEST FAILED
I saw in another thread that the user had a section for "common settings" and he was able to uncheck Certificate Validation and it worked for him, but I do not have that setting in CMC. The only place I see that setting is in the Generic LDAP section, which I would think wouldn't be applicable to setting up AD Auth.
I know my username/password are definitely correct so I'm not sure what the issue is and the logs aren't very help:
Aug 23 15:13:44 RCHASSIS01 webcgi: SRV.0 has hostname=dcblah, ipaddr.0=10.3.48.4, port=389
Aug 23 15:13:44 RCHASSIS01 webcgi: SRV.1 has hostname=dcblah, ipaddr.0=10.200.120.171, port=389
Aug 23 15:13:44 RCHASSIS01 webcgi: SRV.2 has hostname=dcblah, ipaddr.0=10.200.120.172, port=389
Aug 23 15:13:44 RCHASSIS01 webcgi: SRV.3 has hostname=dcblah, ipaddr.1=10.3.32.3, port=389
Aug 23 15:13:44 RCHASSIS01 webcgi: SRV.3 has hostname=dcblah, ipaddr.0=10.3.48.3, port=389
Aug 23 15:13:44 RCHASSIS01 webcgi: *** Started AD Test ***
Aug 23 15:13:44 RCHASSIS01 webcgi: ActiveDirectoryAuthenticate: User: blah, Domain: blahdomain
Aug 23 15:13:44 RCHASSIS01 webcgi: ActiveDirectoryAuthenticate: AD type: Standard
Aug 23 15:13:45 RCHASSIS01 webcgi: At least one DC or GC Server must pass connection test
Aug 23 15:13:45 RCHASSIS01 webcgi: *** Completed AD Test ***
Aug 23 15:13:45 RCHASSIS01 webcgi: getDirSvcsTest() - [check]: (system) Verify needed system resources: PASSED\n[check]: (setup) Validate AD configuration: PASSED\nINFO - (setup) Using standard schema\n[check]: (setup) Verify SSL certificate files exist: PASSED\n[check]: (dns) Acquire LDAP and GC SRV records: PASSED\n[check]: (authen) Acquire user privileges: FAILED\nERROR - (authen) AD INVALID CREDENTIAL 0x00006007\nRESULT - Unab
Can anyone help?
DELL-Josh Cr
Community Manager
•
9.6K Posts
•
43.1K Points
0
August 23rd, 2016 18:00
Hi,
It looks like that was failing on the SSL validation and not on getting the user privileges. What version of the CMC firmware are you on? What type of objects are you using?
For all references to Remote_Management_Advanced tou should use Remote_Management.
For all references to Remote Management Object Advanced, you should use Remote Management Object.
visokoo
6 Posts
0
August 24th, 2016 12:00
Hi Josh,
My CMC firmware version is 1.32.200.201601210012. I'm not sure what you mean by what objects I'm using? I'm using the Standard Schema for AD if that's what you're referring to?
DELL-Josh Cr
Community Manager
•
9.6K Posts
•
43.1K Points
0
August 24th, 2016 12:00
Did you configure the group in the CMC for the AD group that you are allowing access for? http://www.dell.com/support/manuals/us/en/19/dell-cmc-v1.30-poweredge-fx2/CMCFX2FX2s13UG-v1/Configuring-standard-schema-Active-Directory?guid=GUID-51CB171C-809D-450D-AC1A-F51D3E2FE977&lang=en-us
DELL-Josh Cr
Community Manager
•
9.6K Posts
•
43.1K Points
0
August 24th, 2016 12:00
If you click on directory settings what happens?
visokoo
6 Posts
0
August 24th, 2016 12:00
Josh,
I saw that documentation too but couldn't find a way to add any AD groups in CMC. The only section I see that you can do that for is under the LDAP configs. I already have an existing group that I want to add as the admins for CMC, but all I can configure under Directory Services > AD is the SSL cert and the Kerberos Keytab which we are not using.
This is all I see. If there is a place to configure the Groups, can you direct me?
visokoo
6 Posts
0
August 24th, 2016 13:00
Directory Settings is a jump to. So it doesn't direct me to any other website, just the directory section which we already see.
DELL-Josh Cr
Community Manager
•
9.6K Posts
•
43.1K Points
0
August 24th, 2016 14:00
Would you be able to do a Webex session if needed to help resolve it?
visokoo
6 Posts
0
August 24th, 2016 16:00
Yes, that would be awesome.
1Gav1
1 Message
0
January 11th, 2017 17:00
Hi Josh,
What was the resolution in this case? I am experiencing the exact same issue.
Thanks.