Dell Drac 5 User Manual

Adding and Configuring DRAC 5 Users91
Adding and Configuring DRAC 5 
Users
To manage your system with the DRAC 5 and maintain system security, create 
unique users with specific administrative permissions (or role-based authority). 
For additional security, you can also configure alerts that are e-mailed to 
specific users when a specific system event occurs.
To add and configure DRAC 5 users:
 NOTE: You must have Configure DRAC 5 permission to perform the following steps.
1Expand the System tree and...

92Adding and Configuring DRAC 5 Users
Ta b l e 5 - 5 describes the DRAC Group permissions. If you add a DRAC 
User Privilege to the Administrator, Power User, or Guest User, the 
DRAC 
Group 
will change to the Custom group. 
6When completed, click Apply Changes.
7Click the appropriate User Configuration page button to continue. See 
Ta b l e 5 - 6 .
Table 5-1. Options in the Smart Card Configuration section
Option Description
Upload User Certificate Enables you to upload the user certificate to DRAC and...

Adding and Configuring DRAC 5 Users93
Change PasswordEnables the New Password and Confirm New Password 
fields. When unchecked, the user’s Pa s s w o r d cannot be 
changed. 
New PasswordSpecifies or edits the DRAC 5 users password.
Confirm New Password Requires you to retype the DRAC 5 users password to 
confirm.
Table 5-3. IPMI User Privileges
Property Description
Maximum LAN User 
Privilege GrantedSpecifies the user’s maximum privilege on the IPMI 
LAN channel to one of the following user groups:...

94Adding and Configuring DRAC 5 Users
Execute Server Control 
CommandsEnables the user to execute racadm commands. 
Access Console 
RedirectionEnables the user to run Console Redirection.
Access Virtual MediaEnables the user to run and use Virtual Media.
Te s t  A l e r t sEnables the user to send test alerts (e-mail and PET) to 
a specific user. 
Execute Diagnostic 
CommandsEnables the user to run diagnostic commands.
Table 5-5. DRAC Group Permissions
User Group Permissions Granted
Administrator Login...

Adding and Configuring DRAC 5 Users95
Using the RACADM Utility to Configure DRAC 5 
Users
 NOTE: You must be logged in as user root to execute RACADM commands on a 
remote Linux system. 
The DRAC 5 Web-based interface is the quickest way to configure a DRAC 5. 
If you prefer command-line or script configuration or need to configure 
multiple DRAC 5s, use RACADM, which is installed with the DRAC 5 
agents on the managed system.
To configure multiple DRAC 5s with identical configuration settings, 
perform...

96Adding and Configuring DRAC 5 Users
 NOTE: Users can be enabled and disabled over time. As a result, a user may have a 
different index number on each DRAC 5.
To verify if a user exists, type the following command at the command prompt:
racadm getconfig -u <
username>
OR
type the following command once for each index of 1–16:
racadm getconfig -g cfgUserAdmin -i <
index>
 NOTE: You can also type racadm getconfig -f  and view 
or edit the myfile.cfg file, which includes all DRAC 5 configuration...

Adding and Configuring DRAC 5 Users97
Example
The following example describes how to add a new user named John with a 
123456 password and LOGIN privileges to the RAC.
racadm config -g cfgUserAdmin -o cfgUserAdminUserName 
-i 2 john
racadm config -g cfgUserAdmin -o cfgUserAdminPassword 
-i 2 123456
racadm config -g cfgUserAdmin -i 2 -o cfgUserPrivilege 
0x00000001
racadm config -g cfgUserAdmin -i 2 -o 
cfgUserAdminEnable 1
To verify, use one of the following commands:
racadm getconfig -u john
racadm...

98Adding and Configuring DRAC 5 Users
Testing the RAC SNMP Trap Alert Feature
The RAC SNMP trap alerting feature allows SNMP trap listener configurations 
to receive traps for system events that occur on the managed system. 
The following example shows how a user can test the SNMP trap alert feature 
of the RAC.
racadm testtrap -i 2
Before you test the RAC SNMP trap alerting feature, ensure that the SNMP 
and trap settings are configured correctly. See testtrap and testemail 
subcommand descriptions to...

Using the DRAC 5 With Microsoft Active Directory99
Using the DRAC 5 With Microsoft 
Active Directory
A directory service maintains a common database of all information needed 
for controlling users, computers, printers, etc. on a network. If your company 
already uses the Microsoft
® Active Directory® service software, you can 
configure the software to provide access to the DRAC 5, allowing you to add 
and control DRAC 5 user privileges to your existing users in your Active 
Directory software.
 NOTE:...

100Using the DRAC 5 With Microsoft Active Directory
Supported Active Directory Authentication 
Mechanisms
You can use Active Directory to define user access on the DRAC 5 through 
two methods: you can use a standard schema solution, which uses Active 
Directory group objects only or you can use the extended schema solution, 
which Dell has customized to add Dell-defined Active Directory objects. For 
more information about these solutions, see the sections below.
When using Active Directory to configure...