HP 2x1Ex16 HP IP Console Viewer User Guide - Page 210

The Query Parameters tab specifies which query method is used to authenticate and authorize the user. It also specifies the parameters associated with each query method. The console switch performs two different types of queries. Query Mode (Console Switch) is used to authenticate administrators attempting to access the console switch itself. Query Mode (Server) is used to authenticate users who are attempting to access attached servers. Additionally, each type of query has three modes that utilize certain types of information to determine whether a user has access to a console switch connected servers, or both. The Query Mode (Console Switch) parameters are used to determine whether an HP IP Console Viewer has Console Switch Administrator or Administrator access to the console switch. The Query Mode (Server) parameters are used to determine whether a user of the HP IP Console Viewer has user access to servers attached to a console switch. The Query Mode (Server) cannot be used to grant Console Switch Administrator access to a console switch. The Group Container, Group Container Mask, and Target Mask fields are only used for Group Attribute query modes and are required when performing a Console Switch or Server Group Attribute query. The Group Container field specifies the OU created in the Active Directory by the administrator as the location for group objects. Group Container is used when Query Mode is set to Group Attribute. Each group object, in turn, is assigned members to associate with a particular access level for member objects (people, console switches, and target servers). Setting the value of an attribute in the group object configures the access level associated with a group. The Access Control Attribute field defines which field in the Directory schema is used to assign access rights. For example, if the Notes property in the group object is used to implement the access control attribute, the Access Control Attribute field in the Query Parameters tab should be set to info, because the schema name of the Notes field is info. Setting the Notes property to: • KVM Appliance Admin causes the members of that group to have administration access to the console switches and access to target servers that are connected to the KVM switches as a user. • KVM User causes the members of that group to have access to any target servers in the group. • Serial User causes the members of that group to have access to the serial port that is named the same as the server that is a member of that group. • Serial Appliance Admin causes the members of that group to have appliance administrator rights to the serial console switches that are members of that group. • Serial User Admin causes the members of that group to have rights to add, delete, or modify user accounts in the serial console switch internal user database. Using directory services integration 210