HP iLO 3 User Guide

Using XML configuration and control scripts
The following sample scripts show how to set the iLO parameters for directories:
• Set_Server_Name.xml shows how to set the iLO host name.
• Mod_Schemaless_Directory.xml shows how to configure directory groups.
• Mod_Network_Settings.xml shows how to configure SNTP settings.
• Mod_Kerberos_Config.xml shows how to configure Kerberos-specific parameters.
NOTE: You can download sample XML scripts from http://www.hp.com/support/ilo3. For more
information, see the HP iLO 3 Scripting and Command Line Guide.
Using the CLI, CLP, or SSH interface
To configure the iLO parameters by using the CLI, CLP, or SSH interface:
• iLO Hostname—You can change the iLO host name in the Hostname property of the
/map1/dnsendpt1 target.
• Directory groups—You can configure directory group names and permissions in the properties
of the /map1/oemhp_dircfg1 target. The group SIDs cannot be configured through this
interface.
• iLO Date/Time, SNTP Settings—The current date and time and the SNTP settings cannot be
displayed through this interface.
• Kerberos-specific configuration parameters—You can configure Kerberos parameters in the
properties of the oemhp_dircfg1, target.
NOTE: For more information about configuring the iLO parameters by using the CLI, CLP, or
SSH, see the HP iLO 3 Scripting and Command Line Guide.
Time requirement
To log in to Kerberos successfully, ensure that the date and time of the following are set to within
5 minutes of one another:
• The iLO server
• The client running the web browser
• The servers performing the authentication
Configuring single sign-on
Users who are allowed to log in to iLO must be members of the groups for which permissions are
assigned. For Windows clients, locking and unlocking the workstation refreshes the credentials
that are used to log in to iLO. Home versions of the Windows operating system do not support
Kerberos login.
Internet Explorer
This section describes the procedure for enabling single sign-on with Internet Explorer. The following
steps enable login if Active Directory is configured correctly for iLO, and iLO is configured correctly
for Kerberos login.
NOTE: This procedure is based on Internet Explorer 7. Newer browser versions might have
different steps.
164 Directory services