Dell Drac 5 User Manual

Using the DRAC 5 With Microsoft Active Directory111
4Create two Privilege Objects, Priv1 and Priv2, in which Priv1 has all 
privileges (administrator) and Priv2 has login privileges.
5Group user1 and user2 into Group1. The group scope of Group1 must be 
Universal.
6Add Group1 as Members in Association Object 1 (AO1), Priv1 as Privilege 
Objects in AO1, and RAC1, RAC2 as RAC Devices in AO1.
7Add User3 as Members in Association Object 2 (AO2), Priv2 as Privilege 
Objects in AO2, and RAC2 as RAC Devices in...

112Using the DRAC 5 With Microsoft Active Directory
You can extend your schema using one of the following methods: 
 Dell Schema Extender utility
 LDIF script file
If you use the LDIF script file, the Dell organizational unit will not be added 
to the schema. 
The LDIF files and Dell Schema Extender are located on your Dell Systems 
Management Tools and Documentation DVD in the following respective 
directories:
DVD drive:\support\OMActiveDirectory Tools\RAC4-5\LDIF_Files
DVD...

Using the DRAC 5 With Microsoft Active Directory113
Table 6-2. Class Definitions for Classes Added to the Active Directory Schema
Class Name Assigned Object Identification Number (OID)
dellRacDevice1.2.840.113556.1.8000.1280.1.1.1.1
dellAssociationObject1.2.840.113556.1.8000.1280.1.1.1.2
dellRACPrivileges1.2.840.113556.1.8000.1280.1.1.1.3
dellPrivileges1.2.840.113556.1.8000.1280.1.1.1.4
dellProduct1.2.840.113556.1.8000.1280.1.1.1.5
Table 6-3. dellRacDevice Class
OID 1.2.840.113556.1.8000.1280.1.1.1.1...

114Using the DRAC 5 With Microsoft Active Directory
Table 6-5. dellRAC4Privileges Class
OID 1.2.840.113556.1.8000.1280.1.1.1.3
Description Used to define the privileges (Authorization Rights) for the 
DRAC 5 device.
Class Type Auxiliary Class
SuperClasses None
AttributesdellIsLoginUser
dellIsCardConfigAdmin
dellIsUserConfigAdmin
dellIsLogClearAdmin
dellIsServerResetUser
dellIsConsoleRedirectUser
dellIsVirtualMediaUser
dellIsTestAlertUser
dellIsDebugCommandAdmin
Table 6-6. dellPrivileges Class
OID...

Using the DRAC 5 With Microsoft Active Directory115
Table 6-8. List of Attributes Added to the Active Directory Schema
Attribute Name/Description Assigned OID/Syntax Object Identifier Single 
Valued
dellPrivilegeMember
List of dellPrivilege Objects 
that belong to this Attribute.1.2.840.113556.1.8000.1280.1.1.2.1
Distinguished Name (LDAPTYPE_DN 
1.3.6.1.4.1.1466.115.121.1.12)FALSE
dellProductMembers
List of dellRacDevices Objects 
that belong to this role. This 
attribute is the forward link to 
the...

116Using the DRAC 5 With Microsoft Active Directory
dellIsVirtualMediaUser
TRUE if the user has Virtual 
Media rights on the device.1.2.840.113556.1.8000.1280.1.1.2.9
Boolean (LDAPTYPE_BOOLEAN 
1.3.6.1.4.1.1466.115.121.1.7)TRUE
dellIsTestAlertUser
TRUE if the user has Test 
Alert User rights on the 
device.1.2.840.113556.1.8000.1280.1.1.2.10
Boolean (LDAPTYPE_BOOLEAN 
1.3.6.1.4.1.1466.115.121.1.7)TRUE
dellIsDebugCommandAdmin
TRUE if the user has Debug 
Command Admin rights on 
the...

Using the DRAC 5 With Microsoft Active Directory117
Installing the Dell Extension to the Active Directory Users and 
Computers Snap-In
When you extend the schema in Active Directory, you must also extend the 
Active Directory Users and Computers snap-in so the administrator can 
manage RAC (DRAC 5) devices, Users and User Groups, RAC Associations, 
and RAC Privileges.
When you install your systems management software using the Dell Systems 
Management Tools and Documentation DVD, you can extend the...

118Using the DRAC 5 With Microsoft Active Directory
4Select the Active Directory Users and Computers snap-in and click Add.
5Click Close and click OK.
Adding DRAC 5 Users and Privileges to Active Directory
Using the Dell-extended Active Directory Users and Computers snap-in, you 
can add DRAC 5 users and privileges by creating RAC, Association, and 
Privilege objects. To add each object type, perform the following procedures:
 Create a RAC device Object
 Create a Privilege Object
 Create an Association...

Using the DRAC 5 With Microsoft Active Directory119
6Right-click the privilege object that you created, and select Properties.
7Click the RAC Privileges tab and select the privileges that you want the 
user to have (for more information, see Table 5-4).
Creating an Association Object
The Association Object is derived from a Group and must contain a Group 
Type. The Association Scope specifies the Security Group Type for the 
Association Object. When you create an Association Object, choose the...

120Using the DRAC 5 With Microsoft Active Directory
Click the Privilege Object tab to add the privilege object to the association 
that defines the user’s or user group’s privileges when authenticating to a 
RAC device. Only one privilege object can be added to an Association Object. 
Adding Privileges
1Select the Privileges Object tab and click Add.
2Type the Privilege Object name and click OK.
Click the Products tab to add one or more RAC devices to the association. 
The associated devices specify the...