HP Integrity iLO 3 Operations Guide

Directory services objects for eDirectory..............................................................................131
Adding role managed devices......................................................................................131
Adding members........................................................................................................131
Setting role restrictions......................................................................................................132
Setting time restrictions.....................................................................................................133
Defining client IP address or DNS name access...............................................................133
Setting Lights-Out management device rights.......................................................................134
Installing snap-Ins and extending schema for eDirectory on a Linux platform............................134
Installing the Java Runtime Environment..........................................................................135
Installing snap-Ins........................................................................................................135
Extending schema.......................................................................................................135
Verifying snap-in installation and schema extension.........................................................136
Using the LDAP command to configure directory settings.......................................................136
User login using directory services..........................................................................................137
Certificate services................................................................................................................138
Installing certificate services..............................................................................................138
Verifying directory services................................................................................................138
Configuring an automatic certificate request........................................................................138
Directory-enabled remote management....................................................................................139
Using existing groups.......................................................................................................139
Using multiple roles..........................................................................................................139
Creating roles that follow organizational structure.................................................................140
Restricting roles................................................................................................................140
Role time restrictions....................................................................................................141
IP address range restrictions..........................................................................................141
IP address and subnet mask restrictions..........................................................................141
DNS-based restrictions.................................................................................................141
Role address restrictions...............................................................................................141
Enforcing directory login restrictions...................................................................................142
Enforcing user time restrictions...........................................................................................142
User address restrictions....................................................................................................143
Creating multiple restrictions and roles................................................................................143
Directory services schema (LDAP)............................................................................................144
HP management core LDAP object identifier classes and attributes..........................................144
Core LDAP OID classes................................................................................................145
Core LDAP OID attributes.............................................................................................145
Core class definitions...................................................................................................145
hpqTarget..............................................................................................................145
hpqRole................................................................................................................146
hpqPolicy..............................................................................................................146
Core attribute definitions..............................................................................................146
hpqPolicyDN.........................................................................................................146
hpqRoleMembership...............................................................................................146
hpqTargetMembership............................................................................................147
hpqRoleIPRestrictionDefault......................................................................................147
hpqRoleIPRestrictions...............................................................................................147
hpqRoleTimeRestriction............................................................................................147
iLO 3-secific LDAP OID classes and attributes.......................................................................148
iLO 3 classes..............................................................................................................148
iLO 3 attributes...........................................................................................................148
iLO 3 class definitions..................................................................................................148
hpqLOMv100........................................................................................................148
iLO 3 attribute definitions.............................................................................................149
hpqLOMRightLogin.................................................................................................149
hpqLOMRightRemoteConsole...................................................................................149
Contents 7