Attachment uploads are currently disabled. This is a temporary situation and will resume as normal in the coming days.
Solved!
Go to SolutioniDRAC 7 Microsoft Active Directory authentication
Hi,
I have setup Microsoft Active Directory on iDRAC 7 with very basic options (no certificates, no Single Sign-On, no Kerberos Keytab, Standard Schema). All works well.
The problem is that we have 2 forests with full trust configured between them and iDRAC is not able to authenticate users from both of them.
Basically we have single domain security group on Forest1 and couple users from both forests (Forest1 and Forest2). If I add domain controllers' (DC) IPs for both domains-forests, authentication fails on the first DC if user is from different domain (check does not reach second DC's IP to check for the user). Error I get:
ERROR: bind failed: Invalid credentials, 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db0: user=test@comp.local host=192.168.0.1.
test@comp.local - Forest1 user
192.168.0.1 - Forest2 DC IP
Does iDARC support AD authentication for users from couple separate forests?
Thanks
DELL-Shine K
6 Operator
•
3042 Posts
3486
0
Posted January 5th, 2016 00:00
Yes. iDRAC support multiple tree's in same forest
DELL-Shine K
6 Operator
•
3042 Posts
1779
0
Posted October 2nd, 2020 18:00
IDRAC active directory login will work only if SSL is enabled on domain controller i.e. domain controller certificate need to be installed on all domain controllers. Uploading root CA certificate to iDRAC is optional and only require if user need iDRAC to verify the certificate from domain controller during authentication.
You need to configure either standard schema or extended schema for iDRAC active directory authentication. Single sign on and keytabs are not required for basic authentication with active directory.
DELL-Young E
Moderator
•
5421 Posts
•
37 Points
1737
0
Posted October 4th, 2020 22:00
Hi we hope this helps!
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!DELL-Young E
Moderator
•
5421 Posts
•
37 Points
1734
0
Posted October 4th, 2020 22:00
Social Media and Communities Professional
Dell Technologies | Enterprise Support Services
#IWork4Dell
Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!
DELL-Shine K
6 Operator
•
3042 Posts
3486
1
Posted January 4th, 2016 08:00
iDRAC only support Active Directory Authentication for domains in single forest.