HP rp3440 HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition - Page 102

Directory Services Objects, Active Directory Snap-Ins, Managing HP Devices Within a Role

Get HP rp3440 PDF manuals and user guides View all HP rp3440 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 102 highlights

10. Click Apply and click OK. Members of the remoteMonitors role are able to authenticate and view the server status. User rights to any iLO MP are calculated as the sum of all the rights assigned by all the roles in which the user is a member and the iLO MP is a managed device. Following the preceding examples, if a user is included in both the remoteAdmins and remoteMonitors roles, the user has all the rights of those roles, because the remoteAdmins role also has those rights. To configure the iLO MP and associate it with an iLO MP object, use settings similar to the following based on the preceding example in the iLO MP directory settings test user interface: RIB Object DN = cn=lpmp,ou=MPs,dc=mpiso,dc=com Directory User Context 1 = cn=Users,dc=mpiso,dc=com For example, user Mel Moore (with the unique ID MooreM, located in the Users organizational unit within the mpiso.com domain and a member of one of the remoteAdmins or remoteMonitors roles) would be allowed to log in to the iLO MP. To log in, he would enter mpiso\moorem, or [email protected], or Mel Moore, in the Login Name field of the iLO MP login, and use his Active Directory password in the Password field. Directory Services Objects One of the keys to directory-based management is proper virtualization of the managed devices in the directory service. This virtualization enables the administrator to build relationships between a managed device and user or groups already contained within the directory service. iLO MP user management requires the following basic objects in the directory service: • iLO MP • Role • User Each object represents a device, user, or relationship that is required for directory-based management. NOTE: After you install the snap-ins, restart ConsoleOne and MMC to display the new entries. After the snap-in is installed, you can create iLO MP objects and roles in the directory. Using the Users and Computers tool, you can do the following: • Create iLO MP role objects • Add users to the role objects • Set the rights and restrictions of the role objects Active Directory Snap-Ins The following sections discuss the additional management options available in Active Directory Users and Computers after you have installed the HP snap-ins. Managing HP Devices Within a Role Use the HP Devices tab (Figure 7-8) to add HP devices to be managed in a role. 102 Installing and Configuring Directory Services

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
10.
Click
Apply
and click
OK
. Members of the remoteMonitors role are able to authenticate and
view the server status.
User rights to any iLO MP are calculated as the sum of all the rights assigned by all the roles in
which the user is a member and the iLO MP is a managed device. Following the preceding
examples, if a user is included in both the remoteAdmins and remoteMonitors roles, the user
has all the rights of those roles, because the remoteAdmins role also has those rights.
To configure the iLO MP and associate it with an iLO MP object, use settings similar to the
following based on the preceding example in the iLO MP directory settings test user interface:
RIB Object DN = cn=lpmp,ou=MPs,dc=mpiso,dc=com
Directory User Context 1 = cn=Users,dc=mpiso,dc=com
For example, user Mel Moore (with the unique ID MooreM, located in the Users organizational
unit within the mpiso.com domain and a member of one of the remoteAdmins or remoteMonitors
roles) would be allowed to log in to the iLO MP. To log in, he would enter
mpiso\moorem
, or
, or
Mel Moore
, in the Login Name field of the iLO MP login, and use his
Active Directory password in the Password field.
Directory Services Objects
One of the keys to directory-based management is proper virtualization of the managed devices
in the directory service. This virtualization enables the administrator to build relationships
between a managed device and user or groups already contained within the directory service.
iLO MP user management requires the following basic objects in the directory service:
•
iLO MP
•
Role
•
User
Each object represents a device, user, or relationship that is required for directory-based
management.
NOTE:
After you install the snap-ins, restart ConsoleOne and MMC to display the new entries.
After the snap-in is installed, you can create iLO MP objects and roles in the directory. Using the
Users and Computers tool, you can do the following:
•
Create iLO MP role objects
•
Add users to the role objects
•
Set the rights and restrictions of the role objects
Active Directory Snap-Ins
The following sections discuss the additional management options available in Active Directory
Users and Computers after you have installed the HP snap-ins.
Managing HP Devices Within a Role
Use the HP Devices tab (
Figure 7-8
) to add HP devices to be managed in a role.
102
Installing and Configuring Directory Services