Home » Lenovo Manuals » Desktops » Lenovo RD220 » Manual Viewer

Lenovo RD220 User Guide - Page 41

sAMAccountName, Group Filter, Binding Method, Anonymously, w/ Con d Credentials

UPC - 884942047961

Add to My Manuals
Save this manual to your list of manuals

Page 41 highlights

On Active Directory servers, this attribute name is usually sAMAccountName. On Novell eDirectory and OpenLDAP servers, it is usually uid. If this field is left blank, it defaults to uid. Group Filter This field is used for group authentication. Group authentication is attempted after the user's credentials are successfully verified. If group authentication fails, the user's attempt to log on is denied. When the group filter is configured, it is used to specify to which groups the service processor belongs. This means that the user must belong to at least one of the groups that are configured for group authentication to succeed. If the Group Filter field is left blank, group authentication automatically succeeds. If the group filter is configured, an attempt is made to match at least one group in the list to a group to which the user belongs. If there is no match, the user fails authentication and is denied access. If there is at least one match, group authentication is successful. The comparisons are case sensitive. The filter is limited to 511 characters and can consist of one or more group names. The colon (:) character must be used to delimit multiple group names. Leading and trailing spaces are ignored, but any other space is treated as part of the group name. A selection to allow or not allow the use of wildcards in the group name is provided. The filter can be a specific group name (for example, IMMWest), a wildcard (*) that matches everything, or a wildcard with a prefix (for example, IMM*). The default filter is IMM*. If security policies in your installation prohibit the use of wildcards, you can choose to not allow the use of wildcards, and the wildcard character (*) is treated as a normal character instead of the wildcard. A group name can be specified as a full DN or using only the cn portion. For example, a group with a DN of cn=adminGroup,dc=mycompany,dc=com can be specified using the actual DN or with adminGroup. For Active Directory environments only, nested group membership is supported. For example, if a user is a member of GroupA and GroupB and GroupA is a member of GroupC, the user is said to be a member of GroupC also. Nested searches stop if 128 groups have been searched. Groups in one level are searched before groups in a lower level. Loops are not detected. Binding Method Before the LDAP server can be searched or queried, a bind request must be sent. This parameter controls how this initial bind to the LDAP server is performed. Choose from the following three options: - Anonymously. Bind without a DN or password. This option is strongly discouraged because most servers are configured to not allow search requests on specific user records. - w/ Configured Credentials. Bind with configured client DN and password. - w/ Login Credentials. Bind with the credentials that are supplied during the login process. The user ID can be provided through a Distinguished Name, a fully qualified domain name, or a user ID that matches the UID Search Attribute that is configured on the IMM. If the initial bind is successful, a search is performed to find an entry on the LDAP server that belongs to the user who is logging in. If necessary, Chapter 3. Configuring the IMM 35

Section	Page
Contents	5
Chapter 1. Introduction	7
IMM features	8
Upgrading from IMM Standard to IMM Premium	9
Comparing the IMM to other systems-management hardware in ThinkServer servers	9
Web browser and operating-system requirements	13
Notices used in this book	13
Chapter 2. Opening and using the IMM Web interface	15
Accessing the IMM Web interface	15
Setting up the IMM network connection through the Server Firmware Setup Utility	15
Logging in to the IMM	16
IMM action descriptions	17
Chapter 3. Configuring the IMM	21
Setting system information	21
Setting server timeouts	22
Setting the IMM date and time	23
Synchronizing clocks in a network	24
Disabling the USB in-band interface	25
Creating a login profile	26
Deleting a login profile	29
Configuring the global login settings	29
Configuring remote alert settings	30
Configuring remote alert recipients	30
Configuring global remote alert settings	31
Configuring SNMP alert settings	32
Configuring serial port settings	32
Serial-to-Telnet or SSH redirection	33
Configuring port assignments	34
Configuring network interfaces	34
Configuring network protocols	37
Configuring SNMP	37
Configuring DNS	38
Configuring Telnet	39
Configuring SMTP	39
Configuring LDAP	39
Setting up a client to use the LDAP server	39
Configuring LDAP client authentication	42
Configuring LDAP search attributes	42
Service Location Protocol (SLP)	44
Configuring security	44
Secure Web server and secure LDAP	45
SSL certificate overview	45
SSL server certificate management	46
Generating a self-signed certificate	46
Generating a certificate-signing request	46
Enabling SSL for the secure Web server	49
SSL client certificate management	49
SSL client trusted certificate management	49
Enabling SSL for the LDAP client	50
Configuring the Secure Shell server	50
Generating a Secure Shell server key	51
Enabling the Secure Shell server	51
Using the Secure Shell server	51
Using the configuration file	51
Backing up your current configuration	52
Restoring and modifying your IMM configuration	52
Restoring defaults	53
Restarting IMM	53
Logging off	54
Chapter 4. Monitoring server status	55
Viewing system status	55
Viewing the Easy LED Diagnostics	58
Viewing the event logs	58
Viewing the system-event log from the Web interface	59
Viewing event logs from the Setup Utility	60
Viewing event logs without restarting the server	60
Viewing vital product data	61
Chapter 5. Performing IMM tasks	63
Viewing server power and restart activity	63
Controlling the power status of a server	63
Remote presence	64
Updating your IMM firmware and Java applet	65
Enabling the remote presence function	65
Remote control	65
Remote control screen capture	66
Remote control Video Viewer view modes	66
Remote control video color mode	67
Remote control keyboard support	67
International keyboard support	67
Keyboard pass-through mode	68
Remote control mouse support	68
Absolute and relative mouse control	68
Single cursor mode	69
Remote power control	70
Viewing performance statistics	70
Starting Remote Desktop Protocol	70
Remote disk	70
Accessing the Remote Control	71
Mapping and unmapping drives with IMM firmware version 1.03 and later	71
Mapping and unmapping drives with IMM firmware version 1.02 and earlier	72
Exiting Remote Control	72
Setting up PXE network boot	72
Updating firmware	73
Resetting the IMM with the Setup Utility	73
Managing tools and utilities with IMM and the server firmware	74
Using IPMItool	74
Using Advanced Settings Utility (ASU)	74
Other methods for managing the IMM	74
Chapter 6. LAN over USB	77
Potential conflicts with the LAN over USB interface	77
Configuring the LAN over USB interface manually	77
Installing device drivers	77
Installing the Windows IPMI device driver	77
Installing the LAN over USB Windows device driver	78
Installing the LAN over USB Linux device driver	79
Chapter 7. Command-line interface	81
Managing the IMM using IPMI	81
Accessing the command line	81
Logging in to the command-line session	81
Command syntax	82
Features and limitations	82
Utility commands	83
exit command	83
Description	83
help command	83
Description	83
history command	84
Description	84
Example	84
Monitor commands	84
clearlog command	84
Description	84
fans command	84
Description	84
Example	84
readlog command	85
Syntax	85
Description	85
Example	85
syshealth command	85
Description	85
Example	85
temps command	85
Description	85
Example	85
volts command	86
Description	86
Example	86
vpd command	86
Syntax	86
Description	86
Example	87
Server power and restart control commands	87
power command	87
Syntax	87
Description	87
reset command	87
Syntax	87
Description	87
Serial redirect command	87
console command	87
Syntax	87
Description	88
Configuration commands	88
dhcpinfo command	88
Syntax	88
Description	88
Example	88
ifconfig command	89
Syntax	89
Description	89
Example	89
ldap command	90
Syntax	90
Description	90
ntp command	91
Syntax	91
Description	91
Example	92
passwordcfg command	92
Syntax	92
Description	92
Example	92
portcfg command	93
Syntax	93
Description	93
Example	93
srcfg command	93
Syntax	93
Description	93
Example	94
ssl command	94
Syntax	94
Description	94
Parameters	94
timeouts command	95
Syntax	95
Description	95
Example	95
usbeth command	96
Syntax	96
Description	96
Example	96
users command	96
Syntax	96
Description	96
Example	97
IMM control commands	97
clearcfg command	97
Description	97
clock command	98
Syntax	98
Description	98
Example	98
identify command	98
Syntax	98
Description	98
Example	98
resetsp command	99
Description	99
update command	99
Syntax	99
Description	99
Example	100
Appendix A. Getting help and technical assistance	101
Before you call	101
Using the documentation	101
Getting help and information from the World Wide Web	102
Calling for service	102
Using other services	103
Purchasing additional services	103
Lenovo product service	103
Appendix B. Notices	105
Trademarks	106
Important notes	106
Product recycling and disposal	107
Compliance with Republic of Turkey Directive on the Restriction of Hazardous Substances	108
Recycling statements for Japan	109
Battery return program	109
German Ordinance for Work gloss statement	111
Electronic emission notices	111
Federal Communications Commission (FCC) statement	111
Industry Canada Class A emission compliance statement	111
Avis de conformité à la réglementation d′Industrie Canada	111
Australia and New Zealand Class A statement	111
United Kingdom telecommunications safety requirement	111
European Union EMC Directive conformance statement	112
Germany Class A compliance statement	112
Japan Voluntary Control Council for Interference (VCCI) statement	113
Taiwan Class A warning statement	113
People′s Republic of China Class A warning statement	114
Korea Class A warning statement	114
Index	115
A	115
B	115
C	115
D	115
E	115
F	115
G	115
H	115
I	115
J	116
K	116
L	116
M	116
N	116
O	116
P	116
R	116
S	116
T	117
U	117
V	117

Match case Limit results 1 per page

On Active Directory servers, this attribute name is usually

sAMAccountName

. On Novell eDirectory and OpenLDAP servers, it is

usually

uid

. If this field is left blank, it defaults to

uid

Group Filter

This field is used for group authentication. Group authentication is

attempted after the user’s credentials are successfully verified. If group

authentication fails, the user’s attempt to log on is denied. When the

group filter is configured, it is used to specify to which groups the service

processor belongs. This means that the user must belong to at least one of

the groups that are configured for group authentication to succeed.

If the

Group Filter

field is left blank, group authentication automatically

succeeds. If the group filter is configured, an attempt is made to match at

least one group in the list to a group to which the user belongs. If there is

no match, the user fails authentication and is denied access. If there is at

least one match, group authentication is successful. The comparisons are

case sensitive.

The filter is limited to 511 characters and can consist of one or more

group names. The colon (:) character must be used to delimit multiple

group names. Leading and trailing spaces are ignored, but any other

space is treated as part of the group name. A selection to allow or not

allow the use of wildcards in the group name is provided. The filter can

be a specific group name (for example, IMMWest), a wildcard (*) that

matches everything, or a wildcard with a prefix (for example, IMM*). The

default filter is IMM*. If security policies in your installation prohibit the

use of wildcards, you can choose to not allow the use of wildcards, and

the wildcard character (*) is treated as a normal character instead of the

wildcard.

A group name can be specified as a full DN or using only the cn portion.

For example, a group with a DN of

cn=adminGroup,dc=mycompany,dc=com can be specified using the actual

DN or with adminGroup.

For Active Directory environments only, nested group membership is

supported. For example, if a user is a member of GroupA and GroupB

and GroupA is a member of GroupC, the user is said to be a member of

GroupC also. Nested searches stop if 128 groups have been searched.

Groups in one level are searched before groups in a lower level. Loops

are not detected.

Binding Method

Before the LDAP server can be searched or queried, a bind request must

be sent. This parameter controls how this initial bind to the LDAP server

is performed. Choose from the following three options:

–

Anonymously

. Bind without a DN or password. This option is

strongly discouraged because most servers are configured to not allow

search requests on specific user records.

–

w/ Configured Credentials

. Bind with configured client DN and

password.

–

w/ Login Credentials

. Bind with the credentials that are supplied

during the login process. The user ID can be provided through a

Distinguished Name, a fully qualified domain name, or a user ID that

matches the UID Search Attribute that is configured on the IMM.

If the initial bind is successful, a search is performed to find an entry on

the LDAP server that belongs to the user who is logging in. If necessary,

Chapter 3. Configuring the IMM