HP Integrity rx2800 Installation Guide, Windows Server 2008 R2 v7.0 - Page 91

Remote Management Using IPMI, Because only one remote IPMI account exists which is fixed as Admin

Get HP Integrity rx2800 - i2 PDF manuals and user guides View all HP Integrity rx2800 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 91 highlights

• Authentication is implemented by the OS login to the nPartition (the account used to log in to Windows on the nPartition where the tools are run). • For Partition Manager (a web application), you are prompted for login credentials when you first access an SMH or Partition Manager web page (locally or from a remote browser). • The credentials you provide are the same as the OS credentials used to log in to the nPartition directly (for example, in Windows, you use your local or domain Windows account to log in to SMH). Authorization issues associated with the local management mode include the following: • Authorization is based on the OS authorization group of the account you use to log in. • In Windows, if the login account is a member of the local or domain Administrators group, you are given full permission to view and modify nPartition configurations. Accounts that do not belong to the local or domain administrators group are given read-only access to nPartition tools. • If the nPartition Config Privilege option is enabled for the complex, users logging in to an nPartition with full privileges can modify the configuration of that nPartition only. All other nPartition configurations are read-only for them. • With HP SMH, you can grant read-only and read/write permissions to any OS group. Only Windows administrators are given full permissions. Other groups must be configured in SMH on the local nPartition to give those groups read-only or read/write permissions. This applies to Partition Manager only - when using nPartition commands, the rule is this: Administrators have full access and all other authenticated accounts have read-only access. Remote Management Using IPMI Authentication issues associated with the remote-by-IPMI management mode include the following: • You must log in to the local OS to access the tools. However, local OS permissions do not apply when you use the remote modes of nPartition tools. • You must specify a remote MP host name or IP address and an IPMI password to enable the remote IPMI connection to the MP. Authorization issues associated with the remote-by-IPMI management mode include: • Because only one remote IPMI account exists (which is fixed as "Admin," and is therefore not specified in the tools), this account always has full (read/write) access to all nPartition configurations in the complex. • The nPartition Config Privilege setting has no effect when you use remote IPMI to manage the complex. Users logged in through remote IPMI have full access to all nPartitions, regardless of the current nPartition Config Privilege setting. Remote Management Using WBEM Authentication issues associated with the remote-by-WBEM management mode: • You must log in to the local OS to access the tools. However, local OS permissions do not apply when you use the remote modes of nPartition tools. • You must specify a remote nPartition host name or IP address and an OS account and password that are used to log in to that remote nPartition. Authorization issues associated with the remote-by-WBEM management mode: • Authorization is based on the OS authorization group of the account you used to log in remotely. • In Windows, if the login account is a member of the local or domain Administrators group of the remote nPartition, you are given full permission to view and modify nPartition configurations. Accounts that do not belong to the local or domain Administrators group are given read-only access to nPartition tools. • If the nPartition Config Privilege option is enabled for the complex, users logging in to an nPartition with full privileges can modify the configuration of that nPartition only. All other nPartition configurations are read-only for them. Choosing a Management Mode 91

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
•
Authentication is implemented by the OS login to the nPartition (the account used to log in
to Windows on the nPartition where the tools are run).
•
For Partition Manager (a web application), you are prompted for login credentials when
you first access an SMH or Partition Manager web page (locally or from a remote browser).
•
The credentials you provide are the same as the OS credentials used to log in to the nPartition
directly (for example, in Windows, you use your local or domain Windows account to log
in to SMH).
Authorization issues associated with the local management mode include the following:
•
Authorization is based on the OS authorization group of the account you use to log in.
•
In Windows, if the login account is a member of the local or domain Administrators group,
you are given full permission to view
and
modify nPartition configurations. Accounts that
do not belong to the local or domain administrators group are given read-only access to
nPartition tools.
•
If the nPartition Config Privilege option is enabled for the complex, users logging in to an
nPartition with full privileges can modify the configuration of that nPartition only. All other
nPartition configurations are read-only for them.
•
With HP SMH, you can grant read-only and read/write permissions to any OS group. Only
Windows administrators are given full permissions. Other groups must be configured in
SMH on the local nPartition to give those groups read-only or read/write permissions. This
applies to Partition Manager only – when using nPartition commands, the rule is this:
Administrators have full access and all other authenticated accounts have read-only access.
Remote Management Using IPMI
Authentication issues associated with the remote-by-IPMI management mode include the
following:
•
You must log in to the local OS to access the tools. However, local OS permissions do not
apply when you use the remote modes of nPartition tools.
•
You must specify a remote MP host name or IP address and an IPMI password to enable
the remote IPMI connection to the MP.
Authorization issues associated with the remote-by-IPMI management mode include:
•
Because only one remote IPMI account exists (which is fixed as “Admin,” and is therefore
not specified in the tools), this account always has full (read/write) access to all nPartition
configurations in the complex.
•
The nPartition Config Privilege setting has no effect when you use remote IPMI to manage
the complex. Users logged in through remote IPMI have full access to
all
nPartitions,
regardless of the current nPartition Config Privilege setting.
Remote Management Using WBEM
Authentication issues associated with the remote-by-WBEM management mode:
•
You must log in to the local OS to access the tools. However, local OS permissions do not
apply when you use the remote modes of nPartition tools.
•
You must specify a remote nPartition host name or IP address and an OS account and
password that are used to log in to that remote nPartition.
Authorization issues associated with the remote-by-WBEM management mode:
•
Authorization is based on the OS authorization group of the account you used to log in
remotely.
•
In Windows, if the login account is a member of the local or domain Administrators group
of the remote nPartition, you are given full permission to view
and
modify nPartition
configurations. Accounts that do not belong to the local or domain Administrators group
are given read-only access to nPartition tools.
•
If the nPartition Config Privilege option is enabled for the complex, users logging in to an
nPartition with full privileges can modify the configuration of that nPartition only. All other
nPartition configurations are read-only for them.
Choosing a Management Mode
91