HP Integrity iLO 2 Operations Guide

Figure 52 Lights-Out Management Tab
7. Click OK.
8. Using the same procedure in step 4, edit the properties of the remoteMonitors role, add the
lpmp device to the Managed Devices list on the HP Devices tab, and use the Members tab to
add users to the remoteMonitors role.
9. On the Lights-Out Management tab, click the Login checkbox.
10. Click Apply and OK. Members of the remoteMonitors role are able to authenticate and view
the server status.
User rights to any iLO 2 are calculated as the sum of all the rights assigned by all the roles in which
the user is a member and the iLO 2 is a managed device. Following the preceding examples, if
a user is included in both the remoteAdmins and remoteMonitors roles, he or she has all the rights
of those roles, because the remoteAdmins role also has those rights.
To configure iLO 2 and associate it with an iLO 2 object, use settings similar to the following (based
on the preceding example) in the iLO 2 Directory Settings text user interface:
RIB Object DN = cn=lpmp,ou=MPs,dc=mpiso,dc=com
Directory User Context 1 = cn=Users,dc=mpiso,dc=com
For example, user Mel Moore (with the unique ID MooreM, located in the Users organizational
unit within the mpiso.com domain, and a member of one of the remoteAdmins or remoteMonitors
roles) would be allowed to log in to the iLO 2. To log in, he would enter mpiso moorem, or
[e-mail], or Mel Moore, in the Login Name field of the iLO 2 login, and use his
Active Directory password in the Password field.
Directory Services Objects
One of the keys to directory-based management is proper virtualization of the managed devices
in the directory service. This virtualization enables the administrator to build relationships between
a managed device and user or groups already contained within the directory service. The iLO 2
user management requires the following basic objects in the directory service:
• iLO 2
• Role
• User
Each object represents a device, user, or relationship that is required for directory-based
management.
NOTE: After you install the snap-ins, restart ConsoleOne and MMC to display the new entries.
Directory Services for Active Directory 179