HP Integrity iLO 2 Operations Guide

9 Installing and Configuring Directory Services
This chapter provides information on how to install and configure iLO 2 directory services.
You can install and configure iLO 2 directory services to leverage the benefits of a single point of
administration for iLO 2 user accounts.
Directory Services
The following are benefits of directory integration:
Scalability Leverage the directory to support thousands of users on
thousands of iLO 2s.
Security Robust user password policies are inherited from the
directory. User password complexity, rotation frequency,
and expiration are policy examples.
Role-based administration You can create roles (for instance, clerical, remote control
of the host, complete control), and associate users or user
groups with those roles. When you change a single role,
the change applies to all users and the iLO 2 devices
associated with that role.
Single point of administration You can use native administrative tools, like Microsoft
Management Console (MMC) and ConsoleOne, to
administer the iLO 2 users.
Immediacy A single change in the directory rolls out immediately to
associated iLO 2s, eliminating the need to script this process.
Reuse of user name and password You can use existing user accounts and passwords in the
directory without having to record or remember a new set
of credentials for iLO 2.
Flexibility You can create a single role for a single user on a single
iLO 2; you can create a single role for multiple users on
multiple iLO 2s; or you can use a combination of roles to
best fit your enterprise.
Compatibility The iLO 2 directory integration applies to the iLO 2 products
and supports the popular directories Active Directory and
eDirectory.
Standards The iLO 2 directory support builds on the LDAP 2.0 standard
for secure directory access.
Features Supported by Directory Integration
The iLO 2 directory services functionality enables you to do the following:
• Authenticate users from a shared, consolidated, scalable user database.
• Control user privileges (authorization) using the directory service.
• Use roles in the directory service for group-level administration of iLO 2 and iLO 2 users.
To install directory services for the iLO 2, a schema administrator must extend the directory schema.
The local user database is retained. You can choose not to use directories, to use a combination
of directories and local accounts, or to use directories exclusively for authentication.
Directory Services 169