HP Integrity iLO 2 Operations Guide

Table Of Contents
Directory Services Objects for eDirectory............................................................................188
Adding Role Managed Devices.....................................................................................188
Adding Members........................................................................................................188
Setting Role Restrictions.....................................................................................................189
Setting Time Restrictions....................................................................................................190
Defining Client IP Address or DNS Name Access............................................................190
Setting Lights-Out Management Device Rights......................................................................191
Installing Snap-Ins and Extending Schema for eDirectory on a Linux Platform...........................191
Installing the Java Runtime Environment..........................................................................192
Installing Snap-Ins.......................................................................................................192
Extending Schema......................................................................................................192
Verifying Snap-In Installation and Schema Extension........................................................193
Using the LDAP Command to Configure Directory Settings in iLO 2........................................193
User Login Using Directory Services........................................................................................194
Certificate Services...............................................................................................................195
Installing Certificate Services.............................................................................................195
Verifying Directory Services...............................................................................................195
Configuring an Automatic Certificate Request......................................................................195
Directory-Enabled Remote Management..................................................................................196
Using Existing Groups......................................................................................................196
Using Multiple Roles.........................................................................................................196
Creating Roles that Follow Organizational Structure..............................................................197
Restricting Roles...............................................................................................................197
Role Time Restrictions...................................................................................................198
IP Address Range Restrictions........................................................................................198
IP Address and Subnet Mask Restrictions........................................................................198
DNS-Based Restrictions................................................................................................198
Role Address Restrictions..............................................................................................198
Enforcing Directory Login Restrictions..................................................................................199
Enforcing User Time Restrictions.........................................................................................199
User Address Restrictions...................................................................................................200
Creating Multiple Restrictions and Roles..............................................................................200
Directory Services Schema (LDAP)...........................................................................................201
HP Management Core LDAP Object Identifier Classes and Attributes......................................201
Core Classes..............................................................................................................202
Core Attributes............................................................................................................202
Core Class Definitions..................................................................................................202
hpqTarget..............................................................................................................202
hpqRole................................................................................................................203
hpqPolicy..............................................................................................................203
Core Attribute Definitions.............................................................................................203
hpqPolicyDN.........................................................................................................203
hpqRoleMembership...............................................................................................203
hpqTargetMembership............................................................................................204
hpqRoleIPRestrictionDefault......................................................................................204
hpqRoleIPRestrictions...............................................................................................204
hpqRoleTimeRestriction............................................................................................204
iLO 2-Specific LDAP OID Classes and Attributes...................................................................205
iLO 2 Classes.............................................................................................................205
iLO 2 Attributes...........................................................................................................205
iLO 2 Class Definitions.................................................................................................205
hpqLOMv100........................................................................................................205
iLO 2 Attribute Definitions............................................................................................206
hpqLOMRightLogin.................................................................................................206
hpqLOMRightRemoteConsole...................................................................................206
Contents 9