Active Directory (AD) authentication and remote group mapping failure on Baseboard Management Controller (BMC) for Intel® Server M50FCP

Unable to configure Active Directory (AD) authentication and remote group mapping on the Intel® Server M50FCP's integrated BMC.

Observed Behavior
• AD authentication fails during BMC login or group mapping
• Remote group configuration results in errors
• LDAP authentication (non-AD) works successfully
• Domain controller logs indicate successful authentication attempts
• Remote group mapping does not apply expected privileges

Follow these configuration steps:

1. Enable SSL first

• Configure secure LDAP (LDAPS)

• Ensure proper certificate chain is trusted by BMC

2. Configure DNS and FQDN correctly

• Ensure BMC can resolve:

  • Domain Controller hostname

  • Fully Qualified Domain Name (FQDN)

• Avoid using IP-only configurations

3. Use lowercase format for AD fields

• Bind DN and Search Base must use lowercase:

• cn=administrator,cn=users,dc=example,dc=com

• Avoid uppercase (e.g., CN= / DC=), which causes parsing issues

4. Reconfigure Remote Group Mapping

• Re-add AD groups after applying above fixes

• Verify group DN syntax consistency