Configure AD Properties (Oracle ILOM CLI)

Numerous AD properties are customizable for your environment. Assuming the AD protocol is enabled (see Enable the AD Client (Oracle ILOM CLI)), you can use this task to configure the various protocol properties.

1. Set the timeout value for AD communication.

   -> set /SP/clients/activedirectory/ timeout=10
   Set 'timeout' to '10'
   ->
   

2. Set the AD default role assigned to AD users.

   -> set /SP/clients/activedirectory/ defaultrole=o
   Set 'defaultrole' to 's' [os]
   ->
   

   For the role, you can use the characters of the aucros string to enable the respective abilities. See User Roles and Permissions. The operator role (o) is added to whatever single role you set.

3. Enable expanded search (expsearch) mode.

   -> set /SP/clients/activedirectory/ expsearchmode=enabled
   Set 'expsearchmode' to 'enabled'
   ->
   

4. (Optional) Set the amount of information to include for AD communication and events written to the audit and event logs.

   -> set /SP/clients/activedirectory/ logdetail=property_value
   ->
   

   where property_value is:

   • high, medium, low, or trace for more or less information in the log.

   • none, for either no details, or to completely disable logging.

   For example, to include the most amount of information, type:

   -> set /SP/clients/activedirectory/ logdetail=high 
   Set 'logdetail' to 'high'
   ->
   

5. Enable strict certificate mode.

   -> set /SP/clients/activedirectory/ strictcertmode=enabled
   Set 'strictcertmode' to 'enabled'
   ->
   

   ---

   Note -  To use this option, the Authentication Server Certificate file must be available to the switch.

   ---

6. Enable strict credential error mode.

   -> set /SP/clients/activedirectory/ strictcredentialerrormode=enabled
   Set 'strictcredentialerrormode' to 'enabled'
   ->
   

7. If needed, configure DNS locator queries.

   See Configure DNS Locator Queries (Oracle ILOM CLI).

Related Information

• Enable the AD Client (Oracle ILOM CLI)

• Configure DNS Locator Queries (Oracle ILOM CLI)

• Manage an AD Server's Certificate (Oracle ILOM CLI)

• Configure an Alternate AD Server (Oracle ILOM CLI)

• Manage Certificates for Alternate AD Servers (Oracle ILOM CLI)

• AD Groups (Oracle ILOM CLI)

• Configure an AD Administrator Group (Oracle ILOM CLI)

• Configure an AD Custom Group (Oracle ILOM CLI)

• Configure an AD Operator Group (Oracle ILOM CLI)

• Configure an AD User Domain (Oracle ILOM CLI)

• Disable the AD Client (Oracle ILOM CLI)

• Display the Switch's AD Client Information (Oracle ILOM CLI)