HP Integrity iLO 3 Operations Guide

IMPORTANT: To extend the schema on Active Directory you must be an authenticated schema
administrator, the schema must not be write protected, and the directory must be the flexible single
master operation (FSMO) role owner in the tree. The installer attempts to make the target directory
server the FSMO schema master.
To obtain write access to the schema in Windows 2000, you must change the registry safety
interlock. If you select the Active Directory option, the schema extender attempts to change the
registry. The schema extender can only change the registry if the administrator who is extending
the schema has the appropriate rights. Write access to the schema is automatically enabled on
Windows Server 2003.
The Directory Login section of the Setup screen enables you to enter your login name and password,
which might be required to complete the schema extension. The Use SSL During Authentication
option sets the form of secure authentication to be used. If selected, directory authentication using
SSL is used. If not selected and Active Directory is selected, Windows NT® authentication is used.
If not selected and eDirectory is selected, the administrator authentication and the schema extension
continues using an unencrypted (clear text) connection.
Results
The Results screen displays the results of the installation, including whether the schema can be
extended and what attributes were changed.
Figure 41 Schema Results screen
Management snap-in installer
The management snap-in installer installs the snap-ins required to manage iLO 3 objects in a
Microsoft Active Directory Users and Computers directory or in a Novell ConsoleOne directory.
To create an iLO 3 directory using iLO 3 snap-ins:
1. Create and manage iLO 3 objects and role objects.
2. Make the associations between iLO 3 objects and role objects.
Directory services for Active Directory
HP provides a utility to automate much of the directory setup process. You can download the HP
Directories Support for iLO 3 on the HP website at http://h20000.www2.hp.com/bizsupport/
TechSupport/.
Directory services for Active Directory 117