Active directory, Flexaddress and flexaddressplus – Dell POWEREDGE M1000E User Manual

Page 251

Advertising
background image

Active Directory

Does Active Directory support CMC login across multiple trees?
Yes. The CMC’s Active Directory querying algorithm supports multiple trees in a single forest.
Does the login to CMC using Active Directory work in mixed mode (that is, the domain controllers in the forest run
different operating systems, such as Microsoft Windows 2000 or Windows Server 2003)?
Yes. In mixed mode, all objects used by the CMC querying process (among user, RAC Device Object, and Association
Object) must be in the same domain.
The Dell-extended Active Directory Users and Computers Snap-In checks the mode and limits users in order to create
objects across domains if in mixed mode.
Does using CMC with Active Directory support multiple domain environments?
Yes. The domain forest function level must be in Native mode or Windows 2003 mode. In addition, the groups among
Association Object, RAC user objects, and RAC Device Objects (including Association Object) must be universal groups.
Can these Dell-extended objects (Dell Association Object, Dell RAC Device, and Dell Privilege Object) be in different
domains?
The Association Object and the Privilege Object must be in the same domain. The Dell-extended Active Directory Users
and Computers Snap-In allows to create these two objects in the same domain only. Other objects can be in different
domains.
Are there any restrictions on Domain Controller SSL configuration?
Yes. All SSL certificates for Active Directory servers in the forest must be signed by the same root certificate authority-
signed certificate, because CMC only allows upload of one trusted certificate authority-signed SSL certificate.
The Web interface does not launch after a new RAC certificate is created and uploaded.
If Microsoft Certificate Services is used to generate the RAC certificate, the User Certificate option may have been used
instead of Web Certificate when creating the certificate.
To recover, generate a CSR, create a new Web certificate from Microsoft Certificate Services, and upload it using the
following RACADM commands:
racadm sslcsrgen [-g] [-f {filename}]
racadm sslcertupload -t 1 -f {web_sslcert}

FlexAddress and FlexAddressPlus

What happens if a feature card is removed?
There is no visible change if a feature card is removed. Feature cards can be removed and stored or may be left in place.
What happens if a feature card that was used in one chassis is removed and put into another chassis?
The Web interface displays the following error message:
This feature card was activated with a different chassis. It must be removed
before accessing the FlexAddress feature.
Current Chassis Service Tag = XXXXXXXX
Feature Card Chassis Service Tag = YYYYYYYY
An entry is added to the CMC log that states:
cmc <date timestamp> : feature 'FlexAddress@YYYYYYYY' not activated; chassis
ID='XXXXXXXX'
What happens if the feature card is removed and a non-FlexAddress card is installed?

251

Advertising