Home » HP Manuals » Servers » HP rp3440 » Manual Viewer

HP rp3440 HP Integrity and HP 9000 iLO MP Operations Guide, Fifth Edition - Page 115

Installing Snap-Ins, Extending Schema, Verifying Snap-In Installation and Schema Extension

Add to My Manuals
Save this manual to your list of manuals

Page 115 highlights

To ensure you have the correct version of JRE installed on your system, follow these steps: 1. To determine the Java version, execute the following command: # java -version The Java version installed on your system is displayed. 2. If Java is not installed on your system, execute the following command: # rpm -iv j2re-1_4_2_04-linux-i586.rpm NOTE: You can download this rpm file from Java website at http://java.sun.com. 3. Execute the following command if: • Java is installed and the version is older than 1.4.2. • You want to upgrade the Java version and uninstall an older version. # rpm -Uv j2re-1_4_2_04-linux-i586.rpm 4. Add the entry /usr/java/j2re1.4.2_04/bin to the .bash_profile file. Installing Snap-Ins Create the HP directory under the /usr/ConsoleOne/snapins/ directory, and copy the two .jar snap-in files, hpqLOMv100.jar and hpqMgmtCore.jar, to the HP directory. When the hpdsse.sh file is executed, the HP directory is automatically created and the two .jar files are copied to it. NOTE: The hpdsse.sh file is obtained when the Schema.tar tarball is extracted. This process is explained in the Schema Extension section. You can download schema extensions from the HP website athttp://h18013.www1.hp.com/products/servers/management/directorysupp/index.html Select Software and Drivers, and the operating system for the schema extension you want to install. Extending Schema To obtain the hpdsse.sh file, follow these steps: 1. Download the tar file to the Linux system where eDirectory is installed. 2. Extract the tar file to obtain the hpdsse.sh file by executing the following command: # tar -xvf Schema. tar 3. Run this file by executing the following command: # ./hpdsse.sh This command displays instructions. As indicated in the instructions to extend the schema, provide the server name, admin DN, and admin password as command-line arguments. 4. To see the results, view the schema.log file, (created after the schema extension is complete). The log file lists the created classes and attributes. In addition, it indicates if the results succeeded. If the objects already exist, the message Already Exists appears in the log file. The Already Exists message appears only when you try to run the same .sh file after the schema extension is complete. The SSL port (636) is used during the schema extension. You can verify this by running the netstat -nt | grep :636 command while the hpdsse.sh file is being executed. Verifying Snap-In Installation and Schema Extension To verify the installation of snap-ins and the schema extension, follow these steps: Directory Services for eDirectory 115

Section	Page
HP Integrity and HP 9000	1
Table of Contents	3
About This Document	13
Intended Audience	13
New and Changed Information in This Edition	13
Publishing History	13
Document Organization	14
Typographic Conventions	15
HP-UX Release Name and Release Identifier	15
Related Documents	16
HP Encourages Your Comments	16
1 Introduction to iLO MP	17
Features	17
Standard Features	17
Always-on Capability	18
Virtual Front Panel	18
Multiple Access Methods	18
Security	18
User Access Control	18
Multiple Users	18
IPMI over LAN	19
Firmware Upgrades	19
Internal Subsystem Information	19
DHCP and DNS Support	19
SNMP	19
Mirrored Console	19
Remote Power Control	20
Event Logging	20
Advanced Features	20
SSH	20
HPSIM Group Actions	20
Directory-Based Secure Authorization Using LDAP	20
LDAP Lite	20
iLO MP Advanced Pack License	21
Obtaining and Activating iLO MP Advanced Pack Licensing	21
Supported Systems and Required Components and Cables	21
iLO MP Supported Browsers and Client Operating Systems	22
Security	22
Security Setup	23
Protecting SNMP Traffic	23
Help System	23
Accessing Help Using the Text User Interface	23
Accessing Help Using the Web GUI	24
2 Ports and LEDs	25
Console Serial Port	25
iLO MP LAN Port	25
iLO MP LAN LEDs (rx4640; rp4410/4440)	26
iLO MP LAN LEDs (rx1600; rx1620; rx2600; rx2620; rp3410/3440)	27
iLO MP Reset Button	27
Resetting Local User Accounts and Passwords to Default Values	28
3 Setting Up and Connecting the Console	29
Setup Checklist	29
Setup Flowchart	30
Preparing to Set Up iLO MP	31
Determining the Physical iLO MP Access Method	31
Determining the iLO MP LAN Configuration Method	32
Configuring the iLO MP LAN Using DHCP and DNS	32
Configuring the iLO MP LAN Using ARP Ping	33
Configuring the iLO MP LAN Using the Console Serial Port	34
Logging In to the iLO MP	35
Additional Setup	36
Modifying User Accounts and Default Password	36
Setting Up Security	36
Setting Security Access	37
4 Accessing the Host Console	39
Accessing the iLO MP Using the Web GUI	39
Accessing Online Help	40
Accessing the Host Console Using the TUI	40
Accessing the Graphic Console Using VGA	41
5 Configuring DHCP, DNS, LDAP, and LDAP Lite	43
Configuring DHCP	43
Configuring DNS	44
Configuring LDAP Extended Schema	44
Login Process Using Directory Services with Extended LDAP	46
Configuring LDAP Lite Default Schema	46
Setting up Directory Security Groups	47
Login Process Using Directory Services Without Schema Extensions	47
6 Using iLO	49
Text User Interface	49
MP Command Interfaces	49
MP Main Menu	49
MP Main Menu Commands	49
CO (Console) Leave the MP Main Menu and enter console mode	49
VFP (Virtual Front Panel) Displays the virtual front panel	50
CM (Command Mode) Enter command mode	50
CL (Console Log) View the history of the console output	50
SL (Show Logs) Display contents of the system status logs	50
HE (Help) Display help for the menu or command	51
X: Exit iLO MP	51
Command Menu Commands	51
Command Line Interface Scripting	52
Expect Script Example	53
Command Menu Commands and Standard Command Line Scripting Syntax	54
BP: Reset BMC passwords	55
CA: Configure asynchronous local and remote serial port parameters	55
DATE: Display the current date	56
DC (Default Configuration): Reset all parameters to default configurations	56
DF: Display FRUID information	56
DI: Disconnect remote/Modem or LAN/Remote Serial Console	57
DNS: Set DNS configuration	57
FW: Firmware upgrade	57
HE (Help): Display help for menu or command	57
ID: Display or modify system information	58
IT: Modify iLO MP inactivity timers	58
LC: LAN configuration	58
LDAP: LDAP configuration	59
LDAP: LDAP group administration	61
LDAP: LDAP Lite	61
LM: License management	61
LOC: Locator LED status	61
LS: LAN status	62
MR: Modem reset	62
MS: Modem status—display modem status	62
PC: Power control—turn system power on and off	62
PG: Paging parameter setup	63
PR: Power restore policy configuration	63
PS: Power status	63
RB: Reset BMC	64
RS: Reset system through RST signal	64
SA: Set access options	64
SNMP: Configure SNMP parameters	64
SO: Configure security options and access control	65
SS (System Status)	65
SYSREV: Firmware revisions	65
TC: System reset through INIT or TOC signal	66
TE (Tell): Send a message to other terminals	66
UC (User Configuration): Controls user access	66
VDP: Display virtual diagnostics panel LEDs	67
WHO: Display a list of iLO MP connected users	68
XD: Diagnostics or reset of the iLO MP	68
Web GUI	68
System Status	69
System Status > Status Summary General	69
System Status > Status Summary > Active Users	70
System Status > Server Status > General	70
System Status > Server Status > Identification	71
System Status > System Event Log	72
Events	73
Remote Console	74
Remote Console > Remote Serial Console	74
Virtual Serial Port	76
Virtual Devices	76
Administration	78
Administration >User Administration	78
Administration > Access Settings	79
Administration > Access Settings > LAN	80
Administration > Access Settings > Serial	81
Administration > Access Settings > Login Options	81
Administration > Network Settings	82
Administration > Network Settings > Standard	82
Administration > Network Settings > Domain Name Service	83
Administration > Firmware Upgrade	84
Administration > Licensing	85
Administration > Directory Settings > LDAP Parameters	86
Administration > Directory Settings > Group Administration	87
Administration > SNMP Settings	88
Accessing Online Help	89
7 Installing and Configuring Directory Services	91
Directory Services	91
Features Supported by Directory Integration	92
Directory Services Installation Prerequisites	92
Installing Directory Services Overview	92
Schema Documentation	93
Directory Services Support	93
eDirectory Installation Prerequisites	93
Required Schema Software	93
Schema Installer	94
Schema Preview	94
Setup	94
Results	95
Management Snap-In Installer	96
Directory Services for Active Directory	96
Active Directory Installation Prerequisites	96
Preparing Directory Services for Active Directory	97
Installing and Initializing Snap-Ins for Active Directory	98
Example: Creating and Configuring Directory Objects for Use with iLO MP in Active Directory	98
Directory Services Objects	102
Active Directory Snap-Ins	102
Managing HP Devices Within a Role	102
Managing Users in a Role	103
Setting Login Restrictions	104
Setting Time Restrictions	105
Defining Client IP Address or DNS Name Access	106
Setting User or Group Role Rights	106
Directory Services for eDirectory	107
Installing and Initializing Snap-Ins for eDirectory	107
Creating and Configuring Directory Objects for Use with iLO MP Devices in eDirectory	108
Creating Objects	108
Creating Roles	109
Directory Services Objects for eDirectory	111
Adding Role Managed Devices	111
Adding Members	111
Setting Role Restrictions	112
Setting Time Restrictions	112
Defining Client IP Address or DNS Name Access	113
Setting Lights-Out Management Device Rights	113
Installing Snap-Ins and Extending Schema for eDirectory on a Linux Platform	114
Installing the Java Runtime Environment	114
Installing Snap-Ins	115
Extending Schema	115
Verifying Snap-In Installation and Schema Extension	115
Using the LDAP Command to Configure Directory Settings in iLO MP	116
User Login Using Directory Services	117
Certificate Services	118
Installing Certificate Services	118
Verifying Directory Services	118
Configuring an Automatic Certificate Request	118
Directory-Enabled Management	118
Using Existing Groups	119
Using Multiple Roles	119
Creating Roles that Follow Organizational Structure	120
Restricting Roles	120
Role Time Restrictions	120
IP Address Range Restrictions	121
IP Address and Subnet Mask Restrictions	121
DNS-Based Restrictions	121
Role Address Restrictions	121
How Directory Login Restrictions Are Enforced	121
How User Time Restrictions Are Enforced	122
User Address Restrictions	122
Creating Multiple Restrictions and Roles	123
Directory Services Schema (LDAP)	124
HP Management Core LDAP Object Identifier Classes and Attributes	124
Core Classes	124
Core Attributes	124
Core Class Definitions	125
hpqTarget	125
hpqRole	125
hpqPolicy	125
Core Attribute Definitions	125
hpqPolicyDN	126
hpqRoleMembership	126
hpqTargetMembership	126
hpqRoleIPRestrictionDefault	126
hpqRoleIPRestrictions	127
hpqRoleTimeRestriction	127
iLO MP-Specific LDAP OID Classes and Attributes	127
iLO MP Classes	127
iLO MP Attributes	128
iLO MP Class Definitions	128
hpqLOMv100	128
iLO MP Attribute Definitions	128
hpqLOMRightLogin	128
hpqLOMRightRemoteConsole	129
hpqLOMRightServerReset	129
hpqLOMRightLocalUserAdmin	129
hpqLOMRightConfigureSettings	129
Glossary	131

Match case Limit results 1 per page

To ensure you have the correct version of JRE installed on your system, follow these steps:

To determine the Java version, execute the following command:

java -version

The Java version installed on your system is displayed.

If Java is not installed on your system, execute the following command:

rpm

–

iv j2re-1_4_2_04-linux-i586.rpm

NOTE:

You can download this

rpm

file from Java website at

http://jav

a.sun.com

Execute the following command if:

•

Java is installed and the version is older than 1.4.2.

•

You want to upgrade the Java version and uninstall an older version.

rpm

–

Uv j2re-1_4_2_04-linux-i586.rpm

Add the entry

/usr/java/j2re1.4.2_04/bin

to the

.bash_profile

file.

Installing Snap-Ins

Create the HP directory under the

/usr/ConsoleOne/snapins/

directory, and copy the two

.jar

snap-in files,

hpqLOMv100.jar

and

hpqMgmtCore.jar

, to the HP directory. When the

hpdsse.sh

file is executed, the HP directory is automatically created and the two

.jar

files

are copied to it.

NOTE:

The

hpdsse.sh

file is obtained when the

Schema.tar

tarball is extracted. This process

is explained in the Schema Extension section. You can download schema extensions from the

HP website

http://h18013.www1.hp.com/products/servers/management/directorysupp/index.html

Select Software and Drivers, and the operating system for the schema extension you want to

install.

Extending Schema

To obtain the

hpdsse.sh

file, follow these steps:

Download the tar file to the Linux system where eDirectory is installed.

Extract the tar file to obtain the

hpdsse.sh

file by executing the following command:

tar

–

xvf Schema. tar

Run this file by executing the following command:

./hpdsse.sh

This command displays instructions. As indicated in the instructions to extend the schema,

provide the server name, admin DN, and admin password as command-line arguments.

To see the results, view the

schema.log

file, (created after the schema extension is complete).

The log file lists the created classes and attributes. In addition, it indicates if the results

succeeded. If the objects already exist, the message Already Exists appears in the log file.

The Already Exists message appears only when you try to run the same

.sh

file after the schema

extension is complete.

The SSL port (636) is used during the schema extension. You can verify this by running the

netstat

–

nt | grep :636

command while the

hpdsse.sh

file is being executed.

Verifying Snap-In Installation and Schema Extension

To verify the installation of snap-ins and the schema extension, follow these steps:

Directory Services for eDirectory

115