HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition

hpqRoleIPRestrictions
Table 7-12 hpqRoleIPRestrictions
1.3.6.1.4.1.232.1001.1.1.2.5OID
This attribute provides a list of IP addresses, DNS names, domain, address ranges,
and subnets, which partially specify right restrictions under an IP network address
constraint.
Description
Octet String—1.3.6.1.4.1.1466.115.121.1.40Syntax
Multi ValuedOptions
This attribute is only used on Role objects. IP restrictions are satisfied when the
address matches and general access is denied, and unsatisfied when the address
matches and general access is allowed. Values are an identifier byte followed by a
type-specific number of bytes specifying a network address. For IP subnets, the
identifier is <0x01>, followed by the IP network address in network order, followed
by the IP network subnet mask in network order. For example, the IP subnet
127.0.0.1/255.0.0.0 is represented as <0x01 0x7F 0x00 0x00 0x01 0xFF 0x00 0x00 0x00>.
For IP ranges, the identifier is <0x02>, followed by the lower bound IP address,
followed by the upper bound IP address. Both are inclusive and in network order.
For example, the IP range 10.0.0.1 to 10.0.10.255 is represented as <0x02 0x0A 0x00
0x00 0x01 0x0A 0x00 0x0A 0xFF>For DNS names or domains, the identifier is <0x03>,
followed by the ASCII encoded DNS name. DNS names can be prefixed with a *
(ASCII 0x2A), to indicate they should match all names that end with the specified
string. For example, the DNS domain *.acme.com is represented as <0x03 0x2A 0x2E
0x61 0x63 0x6D 0x65 0x2E 0x63 0x6F 0x6D>. General access is allowed.
Remarks
hpqRoleTimeRestriction
Table 7-13 hpqRoleTimeRestriction
1.3.6.1.4.1.232.1001.1.1.2.6OID
This attribute represents a 7-day time grid, with 30-minute resolution, which specifies
rights restrictions under a time constraint.
Description
Octet String {42}—1.3.6.1.4.1.1466.115.121.1.40Syntax
Single ValuedOptions
This attribute is only used on Role objects. Time restrictions are satisfied when the
bit corresponding to the current local side real time of the device is 1, and unsatisfied
when the bit is 0. The least significant bit of the first byte corresponds to Sunday,
from 12 midnight, to Sunday 12:30 AM. Each more significant bit and sequential
byte corresponds to the next consecutive half-hour blocks within the week. The most
significant (8th) bit of the 42nd byte corresponds to Saturday at 11:30 PM, to Sunday
at 12 midnight.
Remarks
iLO MP-Specific LDAP OID Classes and Attributes
The schema attributes and classes in Table 7-14 and Table 7-15 might depend on attributes or
classes defined in the HP management core classes and attributes.
iLO MP Classes
Table 7-14 iLO MP Classes
Assigned OIDClass Name
1.3.6.1.4.1.232.1001.1.8.1.1hpqLOMv100
Directory Services Schema (LDAP) 127