HP Integrity rx5670 Windows Integrity nPartition Guide - Page 23

Remote management via IPMI

Get HP Integrity rx5670 PDF manuals and user guides View all HP Integrity rx5670 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 23 highlights

Introduction Choosing a management mode • Authentication implemented solely by the OS login to the nPartition (the account used to login to Windows on the nPartition where the tools are run). • In the case of Partition Manager (a web application), you are asked for login credentials when first accessing an SMH or Partition Manager web page (either locally or from a remote browser). • The credentials you provide are the same as the OS credentials used to login to the nPartition directly (for example, in Windows, you would use your local or domain Windows account to login to SMH). Authorization issues associated with the local management mode include: • Authorization is based on the OS authorization "group" that the account used to login belongs to. • In Windows, if the login account is a member of the local or domain "Administrators" group, you are given full permission to view and modify nPartition configurations. Accounts that do not belong to the local or domain Administrators group are given read-only access to the nPar tools. • If the nPartition Config Privilege option is enabled for the complex, users logging into a given nPartition with full privileges are only able to modify the configuration of that nPartition. All other nPartition configurations are read-only for them. • HP SMH lets you grant read-only and read/write permissions to any OS group. Only Windows Administrators are automatically given full permissions. Other groups must be configured in SMH on the local nPartition, in order to give those groups read-only or read/write permissions (applies to Partition Manager only - when using the nPartition Commands, the rule is this: Administrators have full access, and all other authenticated accounts have read-only access). Remote management via IPMI Authentication issues associated with the remote via IPMI management mode include: • You must first login to the local OS in order to access the tools (however local OS permissions do not apply when using the remote modes of the nPar tools). • Next, you must specify a remote MP hostname/IP address and IPMI password in order to make the remote IPMI connection to the MP. Authorization issues associated with the remote via IPMI management mode include: • Since there is only one remote IPMI account (which is fixed as "Admin", and therefore not specified in the tools) and password, this account always has full (read/write) access to all nPartition configurations in the complex. • The nPartition Config Privilege setting has no affect when using remote IPMI to manage the complex (users logged in via remote IPMI have full access to all nPartitions, regardless of the current nPartition Config Privilege setting. Remote management via WBEM Authentication issues associated with the remote via WBEM management mode include: • You must first login to the local OS in order to access the tools (however local OS permissions do not apply when using the remote modes of the nPar tools). Chapter 1 23

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
Introduction
Choosing a management mode
Chapter 1
23
•
Authentication implemented solely by the OS login to the nPartition (the account
used to login to Windows on the nPartition where the tools are run).
•
In the case of Partition Manager (a web application), you are asked for login
credentials when first accessing an SMH or Partition Manager web page (either
locally or from a remote browser).
•
The credentials you provide are the same as the OS credentials used to login to the
nPartition directly (for example, in Windows, you would use your local or domain
Windows account to login to SMH).
Authorization issues associated with the local management mode include:
•
Authorization is based on the OS authorization “group” that the account used to login
belongs to.
•
In Windows, if the login account is a member of the local or domain “Administrators”
group, you are given full permission to view
and
modify nPartition configurations.
Accounts that do not belong to the local or domain Administrators group are given
read-only access to the nPar tools.
•
If the nPartition Config Privilege option is enabled for the complex, users logging into
a given nPartition with full privileges are only able to modify the configuration of
that nPartition. All other nPartition configurations are read-only for them.
•
HP SMH lets you grant read-only and read/write permissions to any OS group. Only
Windows Administrators are automatically given full permissions. Other groups
must be configured in SMH on the local nPartition, in order to give those groups
read-only or read/write permissions (applies to Partition Manager only – when using
the nPartition Commands, the rule is this: Administrators have full access, and all
other authenticated accounts have read-only access).
Remote management via IPMI
Authentication issues associated with the remote via IPMI management mode include:
•
You must first login to the local OS in order to access the tools (however local OS
permissions do not apply when using the remote modes of the nPar tools).
•
Next, you must specify a remote MP hostname/IP address and IPMI password in
order to make the remote IPMI connection to the MP.
Authorization issues associated with the remote via IPMI management mode include:
•
Since there is only one remote IPMI account (which is fixed as “Admin”, and therefore
not specified in the tools) and password, this account always has full (read/write)
access to all nPartition configurations in the complex.
•
The nPartition Config Privilege setting has no affect when using remote IPMI to
manage the complex (users logged in via remote IPMI have full access to
all
nPartitions, regardless of the current nPartition Config Privilege setting.
Remote management via WBEM
Authentication issues associated with the remote via WBEM management mode include:
•
You must first login to the local OS in order to access the tools (however local OS
permissions do not apply when using the remote modes of the nPar tools).