HP Ilo 4 User Guide
Here you can view all the pages of manual HP Ilo 4 User Guide. The HP manuals for Server are available online for free. You can easily download all the documents as PDF.
Page 291
Thedirectoryserverevaluatesusertimerestrictions,butthedeterminationcanbecomplicatedby time-zonechangesortheauthenticationmechanism. Figure10Usertimerestrictions Creatingmultiplerestrictionsandroles Themostusefulapplicationofmultiplerolesisrestrictingoneormorerolessothatrightsdonot applyinallsituations.Otherrolesprovidedifferentrightsunderdifferentconstraints.Usingmultiple restrictionsandrolesenablestheadministratortocreatearbitrary,complexrightsrelationships withaminimumnumberofroles....
Page 292
intheserverResetroletheabilitytoresettheserverfromanywhere,iftheysatisfytherole'stime constraints. Thepreviousconfiguration(Figure11)meetscorporatesecurityrequirements.However,adding anotherrolethatgrantstheloginrightcaninadvertentlygrantserverresetprivilegesfromoutside thecorporatesubnetafterhours.AmoremanageablesolutionwouldbetorestricttheResetrole andtheGeneralUserole,asshowninFigure12(page292). Figure12RestrictingtheResetandGeneralUseroles Usingbulkimporttools...
Page 293
processorstomanagementbydirectories.Theutilityautomatessomeofthemigrationstepsnecessary forthemanagementprocessorstosupportdirectoryservices.Theutilitycandothefollowing: •Discovermanagementprocessorsonthenetwork. •Upgradethemanagementprocessorfirmware. •Namethemanagementprocessorstoidentifytheminthedirectory. •Createobjectsinthedirectorythatcorrespondtoeachmanagementprocessor,andassociate themwitharole. •Configurethemanagementprocessorstoenablethemtocommunicatewiththedirectory. Compatibility...
Page 294
NOTE:Iftheinstallationutilitydetectsthatthe.NETFrameworkisnotinstalled,itdisplaysan errormessageandexits. UsingHPDirectoriesSupportforProLiantManagementProcessors TheHPDirectoriesSupportforProLiantManagementProcessorsutilityautomatestheprocessof migratingmanagementprocessorsbycreatingobjectsinthedirectorythatcorrespondtoeach managementprocessorandassociatingthemwitharole.HPDirectoriesSupportforProLiant ManagementProcessorshasaGUIandprovidesawizardforimplementingorupgradingmultiple managementprocessors....
Page 295
4.EnteryouriLOloginnameandpassword,andthenclickFind. Whenthesearchiscomplete,themanagementprocessorsarelistedandtheFindbutton changestoVerify. YoucanalsoenteralistofmanagementprocessorsfromafilebyclickingImport.Thefileis asimpletextfilewithonemanagementprocessorlistedperline.Thecolumns,whichare delimitedwithsemicolons,areasfollows: •NetworkAddress •Product •F/WVersion •DNSName •UserName •Password •LDAPStatus •KerberosStatus Forexample,onelinemighthavethefollowinginformation:...
Page 296
NOTE:Binaryimagesofthefirmwareforthemanagementprocessorsmustbeaccessiblefrom thesystemthatisrunningthemigrationutility.Thesebinaryimagescanbedownloadedfrom http://www.hp.com/support/ilo4. Theupgradeprocessmighttakealongtime,dependingonthenumberofmanagementprocessors selected.Thefirmwareupgradeofasinglemanagementprocessorcantakeaslongas5minutes tocomplete.Ifanupgradefails,amessageisdisplayedintheResultscolumn,andtheutility continuestoupgradetheotherdiscoveredmanagementprocessors....
Page 297
Selectingadirectoryaccessmethod AfteryouclickNextintheUpgradeFirmwareonManagementProcessorswindow,theSelectthe DesiredConfigurationwindowappears. Youcanselectwhichmanagementprocessorstoconfigure(withrespecttoschemausage)and howtoconfigurethem.TheSelecttheDesiredConfigurationwindowhelpstopreventanaccidental overwriteofiLOsalreadyconfiguredforHPschema,oriLOsthathavedirectoriesturnedoff. Theselectionsyoumakeinthiswindowdeterminethewindowsthataredisplayedwhenyouclick Next....
Page 298
3.ClickCreateNames. ThenamesappearintheObjectNamecolumnastheyaregenerated.Atthispoint,names arenotwrittentothedirectoryorthemanagementprocessors.Thenamesarestoreduntilthe nextHPDirectoriesSupportforProLiantManagementProcessorswindowisdisplayed. 4.Optional:Tochangethenames,clickClearNames,andrenamethemanagementprocessors. 5.Whenthenamesarecorrect,clickNext. ConfiguringdirectorieswhenHPextendedschemaisselected TheConfigureDirectorywindowenablesyoutocreateadeviceobjectforeachdiscovered...
Page 299
TheboxesontheConfigureDirectorywindowfollow: •NetworkAddress—Thenetworkaddressofthedirectoryserver,whichcanbeavalidDNS nameorIPaddress. •Port—TheSSLporttothedirectory.Thedefaultportis636.Managementprocessorscan communicatewiththedirectoryonlybyusingSSL. •LoginNameandPassword—Entertheloginnameandpasswordforanaccountthathas domainadministratoraccesstothedirectory. •ContainerDN—Afteryouhavethenetworkaddress,port,andlogininformation,youcanclick...
Page 300
3.AssociatedeviceobjectswithamemberofarolebyenteringtheroleDNintheRole(s)DN box,orclickBrowsetoselectaroleDN. 4.ClickUpdateDirectory. Theutilityconnectstothedirectory,createsthemanagementprocessorobjects,andadds themtotheselectedroles. 5.Afterthedeviceobjectshavebeenassociatedwitharole,clickNext. ThevaluesyouenteredaredisplayedintheConfigureDirectorywindow. 300Directoryservices