Help

Start a Conversation
UNSOLVED

JScovill

updated

5 years ago

J

JScovill

1 Rookie

•

22 Posts

0

2111

May 26th, 2021 07:00

iDrac 9 and LDAP configuration

I am running into a problem trying to configure LDAP and iDrac.  My schema is using groupOfUniqueNames for the group objectClass and uniqueMember for the group membership attribute.

My config:

Generic LDAP: Enabled
Use Distinguished Name: Enabled
Base DN to Search: ou=people,dc=domain,dc=com
Attribute if User Login: uid
Attribute of Group Membership: uniqueMember
Search filter: blank
GroupDN: cn=monitoring,ou=groups,dc=domain,dc=com
Group Privilege: Read Only

Group attributes:

objectClass: groupOfUniqeNames
cn: monitoring
uniqueMember: uid=monitor,ou=groups,dc=domain,dc=com

User attributes:

objectClass: inetOrgPerson
memberOf: cn=monitoring,ou=groups,dc=domain,dc=com
uid: monitor

 

Results from test:

14:05:29  Initiating Directory Services Settings Diagnostics:
14:05:29  trying LDAP server server.domain.com:636
14:05:29  Server Address server.domain.com resolved to 0.0.0.0
14:05:29  connect to 0.0.0.0:636 passed
14:05:29  Connecting to ldaps://[server.domain.com]:636...
14:05:29  Test user authenticated user=cn=admin host=server.domain.com
14:05:29  Search command:
   Bind DN: cn=admin
   Scope: subtree
   Base DN: ou=people,dc=domain,dc=com
   Search filter: (uid=monitor)
   Attribute list:
   objectClass
   memberOf
   dn
   uid
   objectCategory
   defaultNamingContext
   namingContexts
   ldapServiceName
   supportedControl
   supportedExtension
14:05:29  Connecting to ldaps://[server.domain.com]:636...
14:05:29  Test user authenticated user=uid=monitor,ou=people,dc=domain,dc=com host=server.domain.com
14:05:29  Connecting to ldaps://[server.domain.com]:636...
14:05:29  Test user authenticated user=uid=monitor,ou=people,dc=domain,dc=com host=server.domain.com
14:05:29  Search command:
   Bind DN: uid=monitor,ou=people,dc=domain,dc=com
   Scope: base
   Base DN: cn=monitoring,ou=groups,dc=domain,dc=com
   Search filter: (uniqueMember=uid=monitor,ou=people,dc=domain,dc=com)
   Attribute list:
   objectClass
   memberOf
   dn
   uid
   objectCategory
   defaultNamingContext
   namingContexts
   ldapServiceName
   supportedControl
   supportedExtension
14:05:29  ERROR: The user is not a member of any role group that allows access to iDRAC.

 

 

 

 

 

Dell Support Resources

Latest Solutions

View More