User's Manual

Directory-enabled remote management 103
Directory-enabled remote management
In this section
Introduction to directory-enabled remote management .............................................................................. 103
Creating roles to follow organizational structure ...................................................................................... 103
How directory login restrictions are enforced........................................................................................... 105
Using bulk import tools.......................................................................................................................... 108
Introduction to directory-enabled remote management
This section is for administrators who are familiar with directory services and the RILOE II product and
want to use the HP schema directory integration option for RILOE II. You must be familiar with the
“Directory services (on page 75)" section and comfortable with setting up and understanding the
examples.
Directory-enabled remote management enables you to:
• Create Lights-Out Management Objects
You must create one LOM device object to represent each device that will use the directory service to
authenticate and authorize users. Refer to the "Directory services (on page 75)" section for
additional information on creating LOM device objects for Active Directory ("Directory services for
Active Directory" on page 83) and eDirectory ("Directory services for eDirectory" on page 92). In
general, you can use the HP provided snap-ins to create objects. It is useful to give the LOM device
objects meaningful names, such as the device network address, DNS name, host server name, or
serial number.
• Configure the Lights-Out management devices
Every LOM device that uses the directory service to authenticate and authorize users must be
configured with the appropriate directory settings. Refer to "Configuring directory settings" for
details on the specific directory settings. In general, you can configure each device with the
appropriate directory server address, LOM object distinguished name, and any user contexts. The
server address is either the IP address or DNS name of a local directory server or, for more
redundancy, a multi-host DNS name.
Creating roles to follow organizational structure
Often, the administrators within an organization are placed into a hierarchy in which subordinate
administrators must assign rights independently of ranking administrators. In this case, it is useful to have
one role that represents the rights assigned by higher-level administrators and to allow the subordinate
administrators to create and manage their own roles.
Using existing groups
Many organizations will have their users and administrators arranged into groups. In many cases, it is
convenient to use the existing groups and associate the groups with one or more Lights-Out Management
role objects. When the devices are associated with the role objects, the administrator controls access to
the Lights-Out devices associated with the role by adding or deleting members from the groups.