Example: Creating and Configuring Directory Objects for Use with iLO 2 in Active Directory...186
Directory Services Objects
.............................................................................................................
189
Active Directory Snap-Ins
........................................................................................................
190
Managing HP Devices In a Role
.........................................................................................
190
Managing Users In a Role
...................................................................................................
190
Setting Login Restrictions
.........................................................................................................
191
Setting Time Restrictions
....................................................................................................
192
Defining Client IP Address or DNS Name Access
.............................................................
192
Setting User or Group Role Rights
................................................................................................
193
Directory Services for eDirectory
........................................................................................................
194
Installing and Initializing Snap-In for eDirectory
.........................................................................
194
Example: Creating and Configuring Directory Objects for Use with iLO 2 Devices in
eDirectory
......................................................................................................................................
195
Creating Objects
.......................................................................................................................
195
Creating Roles
..........................................................................................................................
196
Directory Services Objects for eDirectory
......................................................................................
198
Adding Role Managed Devices
................................................................................................
198
Adding Members
......................................................................................................................
198
Setting Role Restrictions
................................................................................................................
199
Setting Time Restrictions
...............................................................................................................
200
Defining Client IP Address or DNS Name Access
...................................................................
200
Setting Lights-Out Management Device Rights
............................................................................
200
Installing Snap-Ins and Extending Schema for eDirectory on a Linux Platform
..........................
201
Installing the Java Runtime Environment
................................................................................
201
Installing Snap-Ins
....................................................................................................................
202
Extending Schema
....................................................................................................................
202
Verifying Snap-In Installation and Schema Extension
.............................................................
203
Using the LDAP Command to Configure Directory Settings in iLO 2
.........................................
203
User Login Using Directory Services
..................................................................................................
204
Certificate Services
..............................................................................................................................
205
Installing Certificate Services
........................................................................................................
205
Verifying Directory Services
..........................................................................................................
205
Configuring an Automatic Certificate Request
.............................................................................
205
Directory-Enabled Remote Management
...........................................................................................
205
Using Existing Groups
...................................................................................................................
206
Using Multiple Roles
.....................................................................................................................
206
Creating Roles that Follow Organizational Structure
...................................................................
207
Restricting Roles
............................................................................................................................
207
Role Time Restrictions
..............................................................................................................
207
IP Address Range Restrictions
.................................................................................................
208
IP Address and Subnet Mask Restrictions
...............................................................................
208
DNS-Based Restrictions
............................................................................................................
208
Role Address Restrictions
........................................................................................................
208
Enforcing Directory Login Restrictions
.........................................................................................
208
Enforcing User Time Restrictions
..................................................................................................
209
User Address Restrictions
.............................................................................................................
210
Creating Multiple Restrictions and Roles
......................................................................................
210
Directory Services Schema (LDAP)
....................................................................................................
211
HP Management Core LDAP Object Identifier Classes and Attributes
........................................
211
Core Classes
..............................................................................................................................
211
Core Attributes
.........................................................................................................................
211
Core Class Definitions
..............................................................................................................
212
hpqTarget
............................................................................................................................
212
hpqRole
...............................................................................................................................
212
hpqPolicy
.............................................................................................................................
212
Table of Contents
9