System and method for directory service authentication on a service processor
An information handling system includes host processor hardware and service processor hardware. The host processor hardware includes a network interface device that has an external network interface coupled to a domain controller and an internal network interface. The service processor hardware is coupled to the internal network interface, and is configured to receive a login request from a user via the internal network interface, to redirect the login request to the domain controller via the internal network interface, to receive authentication information for the user from the domain controller, and to log the user in to the service processor hardware in response to receiving the authentication information.
1. An information handling system, comprising:
host processor hardware including a network interface device, wherein the network interface device includes an external network interface coupled to a domain controller and includes an internal network interface, the host processor hardware configured to receive a login request from a user, and to authenticate the user to a hosted environment instantiated on the host processor hardware; and
baseboard management controller hardware coupled to the internal network interface, the baseboard management controller hardware configured to receive the login request via the internal network interface, to redirect the login request to the domain controller via the internal network interface, to receive authentication information for the user from the domain controller, and to log the user in to the baseboard management controller hardware in response to receiving the authentication information;
wherein the host processor hardware is further configured to determine that the user is authorized to log in to the baseboard management controller based upon the authentication of the user to the hosted environment, and to forward the login request to the baseboard management controller in response to determining that the user is authorized to log in to the baseboard management controller.
2. The information handling system of claim 1 , wherein:
the baseboard management controller hardware is further coupled to the host processor hardware via a secure hardware interface; and
the baseboard management controller hardware is further configured to receive configuration information from the secure hardware interface, the configuration information to configure the baseboard management controller hardware to redirect the login request to the domain controller.
3. The information handling system of claim 2 , wherein the host processor hardware further includes a baseboard management controller manager coupled to the baseboard management controller hardware, the baseboard management controller manager configured to provide the configuration to the baseboard management controller hardware.
4. The information handling system of claim 3 , wherein the configuration information comprises a Fully Qualified Domain Name (FQDN) of the domain controller.
5. The information handling system of claim 1 , wherein the login request comprises a Fully Qualified Domain Name (FQDN) of the domain controller.
6. The information handling system of claim 5 , wherein the baseboard management controller hardware is further configured to send a Domain Name Service (DNS) request to the network interface device in response to receiving the login request, wherein the DNS request is based upon the FQDN of the domain controller.
7. The information handling system of claim 6 , wherein the network interface device is further configured to provide a DNS response to the DNS request to the baseboard management controller hardware, wherein the DNS response includes redirect information to redirect the login request to the network interface device.
8. The information handling system of claim 7 , wherein the baseboard management controller hardware is further configured to redirect the login request to the network interface device in response to receiving the DNS response.
9. The information handling system of claim 8 , wherein the network interface device is further configured to provide a Network Address Translation (NAT) service whereby the login request from the baseboard management controller hardware is forwarded to the FQDN of the domain controller.
10. The information handling system of claim 1 , wherein the baseboard management controller hardware comprises a Baseboard Management Controller.
11. A method, comprising:
providing, on a network interface device of host processor hardware, an external network interface coupled to a domain controller;
providing, on the network interface device, an internal network interface;
coupling baseboard management controller hardware to the internal network interface;
receiving, by the host processor hardware, a login request from a user;
authenticating, by the host processor hardware, the user to a hosted environment instantiated on the host processor hardware;
determining, by the host processor hardware, that the user is authorized to log in to the baseboard management controller based upon the authentication of the user to the hosted environment;
forwarding, by the host processor hardware, the login request to the baseboard management controller in response to determining that the user is authorized to log in to the baseboard management controller;
receiving, by the baseboard management controller hardware, the login request via the internal network interface;
redirecting, by the baseboard management controller hardware, the login request to the domain controller via the internal network interface;
receiving, by the baseboard management controller hardware, authentication information for the user from the domain controller; and
logging the user in to the baseboard management controller hardware in response to receiving the authentication information.
12. The method of claim 11 , further comprising:
coupling the baseboard management controller hardware to the host processor hardware via a secure hardware interface; and
receiving, by the baseboard management controller hardware, configuration information from the secure hardware interface, the configuration information to configure the baseboard management controller hardware to redirect the login request to the domain controller.
13. The method of claim 12 , further comprising:
coupling a baseboard management controller manager of the host processor hardware, to the baseboard management controller hardware; and
providing, by the baseboard management controller manager, the configuration to the baseboard management controller hardware.
14. The method of claim 13 , wherein the configuration information comprises a Fully Qualified Domain Name (FQDN) of the domain controller.
15. The method of claim 11 , wherein the login request comprises a Fully Qualified Domain Name (FQDN) of the domain controller.
16. The method of claim 15 , further comprising:
sending, by the baseboard management controller hardware, a Domain Name Service (DNS) request to the network interface device in response to receiving the login request, wherein the DNS request is based upon the FQDN of the domain controller.
17. The method of claim 16 , further comprising:
providing, by the network interface device, a DNS response to the DNS request to the baseboard management controller hardware, wherein the DNS response includes redirect information to redirect the login request to the network interface device.
18. The method of claim 17 , further comprising:
redirecting, by the baseboard management controller hardware, the login request to the network interface device in response to receiving the DNS response.
19. The method of claim 18 , further comprising:
configuring the network interface device to provide a Network Address Translation (NAT) service whereby the login request from the baseboard management controller hardware is forwarded to the FQDN of the domain controller.
20. A non-transitory computer-readable medium including code for performing a method, the method comprising:
providing, on a network interface device of host processor hardware, an external network interface coupled to a domain controller;
coupling baseboard management controller hardware to an internal network interface;
receiving a login request from a user;
authenticating the user to a hosted environment instantiated on the host processor hardware;
determining that the user is authorized to log in to the baseboard management controller based upon the authentication of the user to the hosted environment;
forwarding the login request to the baseboard management controller in response to determining that the user is authorized to log in to the baseboard management controller;
receiving, by the baseboard management controller hardware, the login request via the internal network interface;
redirecting, by the baseboard management controller hardware, the login request to the domain controller via the internal network interface;
receiving, by the baseboard management controller hardware, authentication information for the user from the domain controller; and
logging the user in to the baseboard management controller hardware in response to receiving the authentication information.