Schema-free setup using the ilo web interface, Schema-free setup using scripts – HP Integrated Lights-Out 3 User Manual

Page 168

Advertising
background image

5.

Click Finish, and then click Close and OK to close the remaining dialog boxes.

6.

Expand Computer Configuration

→Windows Settings→Security Settings→Public Key.

7.

Right-click Automatic Certificate Requests Settings, and select New

→Automatic Certificate

Request.

The Automatic Certificate Request Setup wizard starts.

8.

Click Next.

9.

Select the Domain Controller template, and click Next.

10. Select the listed certificate authority (it is the same CA that was defined during the Certificate

Services installation). Click Next.

11. Click Finish to close the wizard.

Schema-free setup using the iLO web interface

You can set up a schema-free configuration by using the iLO web interface. Only users who have
the Configure iLO Settings privilege can change these settings. Users who do not have the Configure
iLO Settings privilege can only view the assigned settings.
1.

Navigate to the Administration

→Security→Directory page.

2.

Select Use Directory Default Schema in the Authentication and Directory Server Settings section.

For more information, see

“Schema-free setup options” (page 169)

.

3.

Click Apply Settings.

4.

To test the communication between the directory server and iLO, click Test Settings.

Schema-free setup using scripts

To set up a schema-free directory configuration by using XML configuration and control scripts:
1.

Review the HP iLO 3 Scripting and Command Line Guide.

2.

Write and execute a script that configures iLO for schema-free directory support.

Use the following script as a template:

<RIBCL VERSION="2.0">
<LOGIN USER_LOGIN="admin" PASSWORD="admin123">
<DIR_INFO MODE = "write">
<MOD_DIR_CONFIG>
<DIR_ENABLE_GRP_ACCT value = "Yes"/>

<DIR_GRPACCT1_NAME value = "test1"/>
<DIR_GRPACCT1_PRIV value = "3,4,5"/>
<!-- Firmware support information for next tag:-->
<!-- iLO 4 - All versions.-->
<!-- iLO 3 - Version 1.20 or later only-->
<DIR_GRPACCT1_SID value= "S-1-0"/>

<!-- alternative method for iLO 3/4 only-->
<!-- <DIR_GRPACCT INDEX="1">-->
<!-- <NAME VALUE="string"/>-->
<!-- <SID VALUE="S-1-0"/>-->
<!-- <LOGIN_PRIV VALUE="Y"/>-->
<!-- </DIR_GRPACCT>-->

</MOD_DIR_CONFIG>
</DIR_INFO>
</LOGIN>
</RIBCL>

Schema-free setup with HP Directories Support for ProLiant Management Processors

HP recommends using HP Directories Support for ProLiant Management Processors (HPLOMIG.exe)
when you are configuring multiple iLO processors for directories.

168 Directory services

Advertising