HP Integrity iLO 2 Operations Guide

LDAP and MP Login for Integrity Cell-Based Servers
This section provides information on LDAP and MP login access rights and partition configuration
in iLO 2 for Integrity cell-based servers. System administrators can use this information to create
and assign access rights.
This section explains the following:
• User login functions when configured with different rights for different partitions
• User management and privileges required to execute commands in iLO 2
Integrity iLO 2 is an independent support processor that provides system manageability features
for a multi-partition server.
The following rules apply:
• Multiple users can simultaneously log in through the LAN port and independently manage
partitions or view the server status.
• Local or LDAP users can have rights.
• A user who has rights on multiple partitions can have the same or different rights for each
partition.
• For all operations that are not partition-specific, a user must have a specific right for all partitions
to which access is granted.
The iLO 2 supports multiple sessions that perform independent tasks and enables the following
usage models:
• A user can have multiple windows logged into iLO 2, and can perform long-term tasks such
as monitoring virtual front panels or studying event logs in some windows while simultaneously
performing short-term tasks like administering partitions from other windows.
• A user can independently connect to different partitions and manage them simultaneously.
• A user can reset a partition from one window and monitor the boot from another window
while interacting with the console from yet another.
User Accounts
LDAP enables you to define iLO 2 user accounts in a centralized database on an LDAP server.
LDAP directory support is an iLO 2 advanced feature that enables centralized, user account
administration using directory services.
Commands
The iLO 2 commands have access levels to manage users effectively. Because iLO 2 commands
work at different combinations of these access levels, you must understand how to categorize the
commands.
The iLO 2 user interface has commands that can be classified into the following categories. Each
category requires certain access rights as shown in Table 21.
Partition-specific Commands
These commands are partition-specific. They include commands that operate on a specified partition.
LDAP and MP Login for Integrity Cell-Based Servers 69